fix(fireflyiii): address review feedback - no password logging, safe CREATE DATABASE, DB name validation, v6.5.10

Agent-Logs-Url: https://github.com/alexbelgium/hassio-addons/sessions/3edc7858-637d-40e0-849a-4d525187396d

Co-authored-by: alexbelgium <44178713+alexbelgium@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-04-23 11:54:58 +00:00
committed by GitHub
parent 547f1214b4
commit 169e3134f8
3 changed files with 19 additions and 6 deletions

View File

@@ -1,4 +1,9 @@
## 6.5.10 (2026-04-23)
- Fix: use service discovery credentials for CREATE DATABASE bootstrap (prevents failure when user-specified credentials lack CREATE privilege)
- Fix: validate DB_DATABASE name to prevent SQL injection in bootstrap SQL statement
- Fix: DB_PASSWORD is no longer logged to addon logs
## 6.5.9 (2026-03-28)
- Update to latest version from firefly-iii/firefly-iii (changelog : https://github.com/firefly-iii/firefly-iii/releases)
- Fix: mariadb_addon now respects user-configured DB_USERNAME, DB_PASSWORD, and DB_DATABASE options instead of always using service discovery credentials