v1.10.1-fix.1

[laipz8200]

• Security/deps: backend bumps pyarrow 17.0.0, werkzeug 3.1.4, urllib3 2.5.0 in api/uv.lock; frontend bumps React 19.2.1 (addresses CVE-2025-55182) and Next.js 15.5.7 in web/package.json + web/pnpm-lock.yaml.

Full Changelog: 1.10.1...1.10.1-fix.1

---

This discussion was created from the release v1.10.1-fix.1.

[Cheney9303]

When will this version of the docker image be updated

[laipz8200]

It’s already here after releasing.

[stuarthe]

其他功能正常，开场白录入后，保存按键为灰色，无法保存。不知道大家有没有遇到？

[Xscut]

The dify-web service in the Docker Compose configuration for this tag is still outdated. Should the YAML file be updated?

[yatotm]

You need to manually update the tags in docker-compose.yml.
The latest zipped release on https://github.com/langgenius/dify/releases currently doesn't have the correct Docker tags updated. Alternatively, you can synchronize updates using Git.

[Xscut]

ok thx

[laipz8200]

We updated the docker compose config file and re-tagged it now.

[Poyhub]

I'd like to fix this CVE issue in v1.5.1. Is there any solution? I would appreciate guidance.

[laipz8200]

Just upgrade your react, nextjs, etc...

[hands0000me]

After deploying the cloud server, when I tried to register the administrator account, the following problem kept occurring and couldn't be resolved. Help, please! The error message is as follows:Setup failed: PermissionDenied(persistent) at write => permissiondenied Context: service: fs path:privkeys/0fdebe49-725c-4469-8b4e09eefa0f9e31/private.pem Source:Permission denied (os error 13)

[laipz8200]

Please check this guide to mod your permissions: https://github.com/langgenius/dify/releases/tag/1.10.1

[coolmian]

Since you cannot guarantee that the latest security patch release(v1.10.1-fix.1) includes all stable features and resolves all bugs, please confirm whether the historical version can address the security issue simply by upgrading the specified dependency version, without introducing any other dependency conflicts.

[laipz8200]

This fix version is based on 1.10.1 and only patch the dependencies upgrade.