Calnode v0.10.1 Released with Security Updates and One-Click NethServer Module
Calnode v0.10.1 has been released, featuring significant contributions from community deployers. The release includes a security sweep addressing five critical issues: rate-limiting public booking lookups, consolidating CalDAV error messages, preventing credential forwarding during cross-origin redirects, fixing a panic caused by short GOOGLE_CLIENT_ID values, and improving video room host takeover explanations. The update also introduces a one-click NethServer 8 module, allowing Calnode to install as a pre-configured app with Traefik routing, cluster TLS, and persistent storage. This module is marked as preview-grade, with robot tests covering installation paths but no live node testing yet. The release follows v0.10.0, which was largely contributed by a developer from Rotterdam who submitted ten pull requests in sixteen minutes, addressing multiple features including destination-provider preferences, availability reporting, shared-calendar booking, and timezone picker enhancements. The project emphasizes community-driven development, with contributors like Minos Chatzidakis providing detailed bug reports and fixes before merging them upstream. The announcement also highlights Cal.eu’s closure on November 1, urging EU teams to migrate using a provided playbook. Calnode is a self-hosted scheduling solution with a single Go binary, embedded SQLite, and no external dependencies like Redis or Postgres, operating under the Apache-2.0 license. The project has gained 100 stars and 17 forks, with the community actively contributing to its development. The release notes stress the importance of the update for users migrating from Cal.eu, positioning v0.10.1 as the recommended version for deployment.