Skip to content

chore(release): prepare v2.6.40 #376

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
LucasSantana-Dev merged 1 commit into from
Mar 30, 2026
Merged

chore(release): prepare v2.6.40 #376

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,13 +7,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

## [Unreleased]

## [2.6.40] - 2026-03-30

### Fixed

- `/autoplay` queue resolution now falls back to queue metadata channel guild IDs, so autoplay can be enabled while a single current track is playing even when the queue cache key is non-standard.
- Watchdog orphan-session recovery now clears non-restorable snapshots and marks recovery as failed when zero tracks are restored, preventing repeated rejoin loops and VoiceConnection listener leaks.
- Manually added single tracks are now moved to play before any autoplay-tagged tracks in the queue, regardless of whether autoplay mode is active — previously priority insertion only ran in AUTOPLAY repeat mode.
- Eliminated duplicate track entries when adding a song while autoplay is running: `player.play()` already appends the track, so the follow-up priority step now moves the existing entry rather than inserting a second copy, preventing audio resource conflicts (yellow warning icon).

### Security

- Added npm overrides for `brace-expansion` (≥5.0.5), `handlebars` (≥4.7.9), and `path-to-regexp` (≥8.4.0) to resolve high/critical transitive dependency vulnerabilities.

@coderabbitai coderabbitai Bot Mar 30, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Add issue/PR reference to the new security entry.

Line 21 documents the fix, but it should include the related reference (e.g., (#376)) for traceability consistency with prior entries.

As per coding guidelines: "Update CHANGELOG.md with all changes, include breaking changes documentation, and reference issues and PRs".

🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@CHANGELOG.md` at line 21, The changelog entry "Added npm overrides for
`brace-expansion` (≥5.0.5), `handlebars` (≥4.7.9), and `path-to-regexp` (≥8.4.0)
to resolve high/critical transitive dependency vulnerabilities." needs the
related issue/PR reference added for traceability—update that line to append the
correct issue or PR reference in parentheses (e.g., " (`#376`)") so the entry
reads like the other entries and includes the PR/issue number.


## [2.6.39] - 2026-03-24

### Fixed
Expand Down
2 changes: 1 addition & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
{
"name": "lucky-bot",
"version": "2.6.39",
"version": "2.6.40",
"description": "All-in-one Discord bot platform — music, moderation, auto-mod, custom commands, and web dashboard",
"type": "module",
"workspaces": [
Expand Down
Loading