InvenTree 1.2.6 contains fixes for new security advisories

Updating to 1.2.6 is strongly advised. See GHSA-rhc5-7c3r-c769 and GHSA-m8j2-vfmq-p6qg for details.
Every admin should be aware of the assumed trust in our threat model. If you followed it you are not vulnerable see https://docs.inventree.org/en/latest/concepts/threat_model/

many thanks to patelhettt (x2) and alonaki for their research and responsible disclosure

#inventree #inventreedb #opensourcesecurity

Attention: Release 1.2.0 has no support for PostgreSQL 13 - our docs contain information regarding PostgreSQL updates - https://docs.inventree.org/en/latest/start/migrate/#migrating-between-incompatible-database-versions.

At least PostgreSQL 14 is required, we recommend PostgreSQL 18.

#inventree #inventree

InvenTree is now listed on artifact hub for easier Kubernetes deployment and discovery

With many thanks to community member @plaes [1] who basically wrote the whole chart and helped to close this long-standing request/issue [2].
Now with the listing on artifacthub[3] the base for easy deployment in the broad Kubernetes ecosystem is laid.

1: https://plaes.org/
2: https://github.com/inventree/InvenTree/discussions/8823
3: https://artifacthub.io/packages/helm/inventree/inventree

#inventreedb

Gearing up for 1.2.0 release - You can help!
https://github.com/inventree/InvenTree/discussions/11199

We are closing the scope for 1.2.0 and starting to put the finishing touches on. Expect a release in the next few months.
Please test the "latest" / "master" images and packages and help with translations to make this the best release yet.

#inventreedb #inventree

1.1.10 release with fix to long standing registration control problem

The newest release https://github.com/inventree/InvenTree/releases/tag/1.1.10 fixes a long-running issue where SSO registration could not be enabled without also enabling built-in authentication registration.
With debugging support by the community, this cosmetic issue could finally be fixed.

Upgrades are encouraged as there is also a patch for a vulnerable dependency.

#inventreedb #inventree #opensource