This security release is part of a new AI-driven security research effort at Encore to continuously and proactively find and fix security vulnerabilities. We have no indication these vulnerabilities are being exploited, but we’re sharing this release in the interest of transparency. We recommend all users to upgrade their Encore CLI with encore version update.

As this effort continues to ramp up over the coming weeks, there will likely be more frequent security updates than before. A full security advisory will follow on Monday.

This release contains remediations for two separate security vulnerabilities. We recommend all users to upgrade their Encore CLI with encore version update. If you are self-hosting Encore we recommend you upgrade to v1.57.11 and re-deploy your application.

One vulnerability affected the Encore CLI and one with the potential of affecting deployed applications. We have already rolled out a fixed runtime for all applications managed by Encore Cloud that were potentially affected.

From our telemetry we are quite confident these vulnerabilities have not been exploited in the wild. They were reported privately by a security researcher through our responsible disclosure program.

Additional information will be disclosed later today.

What's Changed

• go1.26.5
• Add docs for external vaults and JIT by @ekerfelt in #2498
• core: Add support for splitting secret payload across multiple env vars by @ekerfelt in #2499
• go: Add support for splitting the appsecrets across multiple env vars by @ekerfelt in #2500
• core: Fix logging field format for GCP by @ekerfelt in #2501
• docs: Add section about AWS in JIT/vaults docs by @ekerfelt in #2503
• docs: Add docs for importing topics & buckets by @ekerfelt in #2504
• runtimes/{core,js}: various fixes by @fredr in #2502
• Add option to load runtime config from buckets by @ekerfelt in #2506
• satisfy clippy by @fredr in #2512
• update domain: encore.cloud -> encore.dev by @fredr in #2511
• runtimes/{go,core,js}: add multiSet operation for redis by @fredr in #2513
• bump cmake by @fredr in #2514

Full Changelog: v1.57.9...v1.57.10

What's Changed

• runtimes/js: error when converting too deeply nested payloads by @fredr in #2480
• Add support for external secret vaults by @ekerfelt in #2479
• runtimes/core: avoid exit-time teardown race on shutdown by @fredr in #2482
• bump deps by @fredr in #2476
• dockerbuild: layer image by @fredr in #2483
• runtimes/core: fix raw endpoint status code in traces by @fredr in #2489
• docs: reframe overviews as infrastructure SDK; add development workflow page by @marcuskohlberg in #2488
• docs: update Security & Compliance with SOC 2 prep status by @marcuskohlberg in #2494

Full Changelog: v1.57.8...v1.57.9

What's Changed

• Have notFoundStatus 200 return 304s appropriately by @ekerfelt in #2472
• cli/daemon: add trace search filters to get_traces MCP tool by @simon-johansson in #2470
• Fix broken email link in migration docs (mail: -> mailto:) by @ivancernja in #2474
• update esbuild by @fredr in #2475
• docs/go/self-host: fix inverted databases map-key and name descriptions by @harsha-cpp in #2471
• infracfg: propagate push_config.id into PubSubSubscription.rid (fix self-host push 404) by @vendoshi in #2450
• runtimes/core: fix raw endpoint status code in metrics by @fredr in #2477
• fix test by @fredr in #2478

New Contributors

• @harsha-cpp made their first contribution in #2471
• @vendoshi made their first contribution in #2450

Full Changelog: v1.57.6...v1.57.8

What's Changed

• Add docs for et.SQLDBWithSuperuser by @ekerfelt in #2458
• Rewrite ts/go LLM instructions with benchmark-tuned content by @simon-johansson in #2457
• Revert "cli/daemon/mcp: synchronous Pub/Sub probe + retry-aware call_endpoint" by @simon-johansson in #2460
• cli/daemon/mcp: mention trace_id in call_endpoint description by @simon-johansson in #2462
• Update readme by @marcuskohlberg in #2463
• Update README.md by @marcuskohlberg in #2464
• Add a section about JSON key vs Encore Service Account in own cloud docs by @ekerfelt in #2466
• runtimes/core/sqs_sns: set operation_attempt_timeout to prevent hangs by @fredr in #2469

Full Changelog: v1.57.5...v1.57.6

What's Changed

• Docs: add bootstrap migration guide for existing databases by @marcuskohlberg in #2443
• Add docs for restoring DB from backup by @ekerfelt in #2445
• Add documentation for required GCP IAM scopes by @ekerfelt in #2446
• Add support for using SQL superuser in et by @ekerfelt in #2452
• Docs: generate TS runtime API reference with TypeDoc by @simon-johansson in #2444
• cli/daemon/sqldb: fix database name reference by @eandre in #2454
• Fetch docs as markdown in MCP get_docs tool by @simon-johansson in #2453
• cli/daemon/mcp: synchronous Pub/Sub probe + retry-aware call_endpoint by @simon-johansson in #2440

Full Changelog: v1.57.3...v1.57.5

What's Changed

• go1.26.3

Full Changelog: v1.57.3...v1.57.4

What's Changed

• Fix role grant deadlock on db setup by @ekerfelt in #2442

Full Changelog: v1.57.2...v1.57.3

What's Changed

• Docs: document cloud permissions scoping and self-hosted preview environments by @marcuskohlberg in #2438
• Fix DummySocket for latest Node socket types by @amikad09 in #2422
• gcp pubsub: allow larger bodies for push subscriptions by @fredr in #2439
• Run NewTestDatabase as migrator role by @ekerfelt in #2441

New Contributors

• @amikad09 made their first contribution in #2422

Full Changelog: v1.57.1...v1.57.2