v0.4.2
π Release Notes β Open Mercato v0.4.2
π Date: January 29, 2026
β¨ Highlights
This release introduces the π Notifications module, π§ Agent Skills infrastructure, π Dashboard Analytics Widgets, and a major architectural improvement decoupling module setup with a centralized config.
It also includes important π security fixes, π³ Docker infrastructure improvements, and β¬οΈ dependency updates.
𧩠Features
π Notifications Module (#422, #457)
Full implementation of the in-app notifications system, including notification types, subscribers, custom renderers, and user preferences. (@pkarw)
π Workflows Improvements (#394)
A solid set of UX and feature improvements to the workflows module. (@pat-lewczuk)
π§ Agent Skills Infrastructure (#455)
Created the foundational structure for agent skills in Open Mercato, enabling extensible AI-powered capabilities. (@pat-lewczuk)
π Dashboard Analytics Widgets (#408)
New analytics widgets for the dashboard, providing richer data visualization and actionable insights. (@haxiorz)
𧱠Decoupled Module Setup β Centralized ModuleSetupConfig (#446)
Resolves #410 β module setup is now decoupled using a centralized ModuleSetupConfig, improving modularity and reducing coupling between modules. (@redjungle-as)
ποΈ Specs Reorganization (#436, #416)
Reorganized architecture specs and added new specifications for SDD, messages, notifications, progress tracking, and record locking. (@pkarw)
π CodeQL Security Improvements (#418)
Addressed CodeQL-identified security issues across the codebase. (@pkarw)
π Bug Fixes
π Security: Prevent Open Redirect in Session Refresh (#429)
Fixed an open redirect vulnerability in the authentication session refresh flow. (@bartek-filipiuk)
π€ Fix Assistant Module (#442)
Resolved issues in the AI assistant module. (@fto-aubergine)
π Fix Global Search Dialog Title (#440)
Corrected the dialog title for global search and added specs for new widgets. (@pkarw)
π³ Fix Docker Compose Overlapping Services (#448, #449)
Resolved service conflicts in Docker Compose configuration where services were overlapping. (@MStaniaszek1998)
π οΈ Fix Docker Compose Configuration (#423, #424)
General Docker Compose configuration fixes. (@pkarw)
π¦ Change Base Image to Debian for OpenCode (#443)
Switched the OpenCode container base image to Debian for better compatibility. (@MStaniaszek1998)
βοΈ Infrastructure & DevOps
π Change Service Port (#434)
Updated the default service port configuration. (@MStaniaszek1998)
π Create Dockerfile for Docs (#425)
Added a dedicated Dockerfile for building and serving the documentation site. (@MStaniaszek1998)
π¦ Dependencies
- #454 β β¬οΈ Bump
tarfrom 7.5.6 to 7.5.7 (security patch) - #447 β β¬οΈ Bump
npm_and_yarngroup across 2 directories
π Contributors
- @pkarw
- @pat-lewczuk
- @MStaniaszek1998
- @bartek-filipiuk
- @fto-aubergine
- @redjungle-as
- @haxiorz
- @dependabot