Update Info

openSUSE-2026-16


Security update for zk


Type: security
Severity: moderate
Issued: 2026-01-16
Description:
This update for zk fixes the following issues:

- Update to version 0.15.2
  * Find notes with missing backlinks using zk list --missing-backlink
  * LSP diagnostic for missing backlinks when other notes link to current note
    without reciprocal links
  * Code action to add missing backlinks
  * LSP diagnostic for self-referential links
  * Release tarballs now output the program version
  * Config path can be set with $ZK_CONFIG_DIR
  * bump deps: golang.org/x/crypto v0.45.0 fixes CVE-2025-58181

- Update to version 0.15.0
  * fixed LSP crashes when editing code fences and/or working in text files
    with code fences
  * new feature to set a group path "by name", in that any directory with the
    same name can share the same group rules, no matter how deep in the
    notebook. See references below.

- Update to version 0.14.2
  * Path in .zk/config.toml for the default note template now accepts
    UNIX "~/paths"
  * Find notes without tags with zk list --tagless
  * fix: LSP ignores magnet links as links to notes
  * fix: Note titles with double quoted words no longer break json output
  * fix: Grammar in error output
  * fix: Group rules could not be nested

- Update to version 0.14.1
  * Fixed parsing large notes @khimaros in #339
  * fix day range parsing (#382) by @tjex in #384
  * accept tripple dash file URIs as valid links by @tjex in #391
  * fix(lsp): fix trigger completion of zk LSP by @Rahlir in #397
  * fix(lsp): ignore diagnostic check within code blocks by @Rahlir in #399
  * allow notebook as hidden dir by @tjex in #402
  * documentation fixes


              

References


Packages


  • zk-0.15.2-bp157.2.3.1