Commit Graph

202 Commits

Author SHA1 Message Date
Johannes Löthberg
46dbc89482 Make edge builds fetch master builds from correct repository (#265)
If we don't verify that the repository ID is what we expected then we
will pull artifacts from PRs where the source branch is `master`.

Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2023-09-10 20:04:19 -05:00
Jakob Aarup Skov
bde303ec45 Add GoCardless bank integration for Spar Nord SPARNORD_SPNODK22 (#257) 2023-09-03 17:42:41 +01:00
James Hackett
6512c465f0 Make file size uploads configurable via env vars (#245) 2023-09-03 17:42:28 +01:00
Matiss Janis Aboltins
6f216cc1aa 🔖 (23.9.0) mobile transaction entry, privacy mode (#259) 2023-09-03 16:22:20 +01:00
Constantin Mihai
ad65fcdffc Fix config file not being loaded from the project root by default (#249) 2023-08-16 20:03:58 +01:00
Dylan Myers
87747a83b9 Disable Express x-powered-by Header (#248) 2023-08-16 18:36:33 +01:00
Ludvig Hozman
0501deac2d Add DANSKEBANK_DABANO22 integration (#244) 2023-08-15 19:07:17 +01:00
Johannes Löthberg
95c7d5bc2c Decide on transaction date during GoCardless transaction normalization (#243) 2023-08-15 08:29:38 +01:00
CharlieMK
09380db661 Add FINTRO_BE_GEBABEBB GoCardless integration (Include additionalInformation in notes) (#242) 2023-08-09 21:20:50 +01:00
Johannes Löthberg
52c1676005 Add NORWEGIAN_SE_NORWNOK1 bank (#237)
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2023-08-09 17:54:36 +01:00
Johannes Löthberg
9c9f6645d3 Add GoCardless bank integration for American Express AESUDEF1 (#239) 2023-08-09 08:27:47 +01:00
Johannes Löthberg
9102d974a5 Make endDate optional when downloading GoCardless transactions (#241) 2023-08-09 08:22:57 +01:00
Matiss Janis Aboltins
7cef3fe24b 🔖 (23.8.1) fix nYNAB import, mobile colors and other smaller fixes (#240)
- web: https://github.com/actualbudget/actual/pull/1475
- server: https://github.com/actualbudget/actual-server/pull/240
- docs: https://github.com/actualbudget/docs/pull/260
2023-08-07 18:58:41 +01:00
Matiss Janis Aboltins
496d60c3a7 🔖 (23.8.0) stability improvements and new experimental features (#238)
- web: https://github.com/actualbudget/actual/pull/1444
- server: https://github.com/actualbudget/actual-server/pull/238
- docs: https://github.com/actualbudget/docs/pull/257

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2023-08-02 21:01:54 +01:00
Matiss Janis Aboltins
ce8d53a513 🔥 (nordigen) removing env var/config file support (#235)
Removing env var/config file support for Nordigen secrets. These have
been migrated to the new `secrets` db table a while ago. We can now
clean up the legacy implementation for these secrets.
2023-07-29 19:59:31 +01:00
Matiss Janis Aboltins
20c2f1950b ♻️ rename nordigen to gocardless (#231)
Just renaming things from Nordigen to Gocardless.
2023-07-24 19:41:25 +01:00
dependabot[bot]
723d9cd62c build(deps): bump word-wrap from 1.2.3 to 1.2.4 (#230)
Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3
to 1.2.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jonschlinkert/word-wrap/releases">word-wrap's
releases</a>.</em></p>
<blockquote>
<h2>1.2.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Remove default indent by <a
href="https://github.com/mohd-akram"><code>@​mohd-akram</code></a> in <a
href="https://redirect.github.com/jonschlinkert/word-wrap/pull/24">jonschlinkert/word-wrap#24</a></li>
<li>🔒fix: CVE 2023 26115 (2) by <a
href="https://github.com/OlafConijn"><code>@​OlafConijn</code></a> in <a
href="https://redirect.github.com/jonschlinkert/word-wrap/pull/41">jonschlinkert/word-wrap#41</a></li>
<li>🔒 fix: CVE-2023-26115 by <a
href="https://github.com/aashutoshrathi"><code>@​aashutoshrathi</code></a>
in <a
href="https://redirect.github.com/jonschlinkert/word-wrap/pull/33">jonschlinkert/word-wrap#33</a></li>
<li>chore: publish workflow by <a
href="https://github.com/OlafConijn"><code>@​OlafConijn</code></a> in <a
href="https://redirect.github.com/jonschlinkert/word-wrap/pull/42">jonschlinkert/word-wrap#42</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/mohd-akram"><code>@​mohd-akram</code></a> made
their first contribution in <a
href="https://redirect.github.com/jonschlinkert/word-wrap/pull/24">jonschlinkert/word-wrap#24</a></li>
<li><a
href="https://github.com/OlafConijn"><code>@​OlafConijn</code></a> made
their first contribution in <a
href="https://redirect.github.com/jonschlinkert/word-wrap/pull/41">jonschlinkert/word-wrap#41</a></li>
<li><a
href="https://github.com/aashutoshrathi"><code>@​aashutoshrathi</code></a>
made their first contribution in <a
href="https://redirect.github.com/jonschlinkert/word-wrap/pull/33">jonschlinkert/word-wrap#33</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4">https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f64b188c72"><code>f64b188</code></a>
run verb to generate README</li>
<li><a
href="03ea08256b"><code>03ea082</code></a>
Merge pull request <a
href="https://redirect.github.com/jonschlinkert/word-wrap/issues/42">#42</a>
from jonschlinkert/chore/publish-workflow</li>
<li><a
href="420dce9a24"><code>420dce9</code></a>
Merge pull request <a
href="https://redirect.github.com/jonschlinkert/word-wrap/issues/41">#41</a>
from jonschlinkert/fix/CVE-2023-26115-2</li>
<li><a
href="bfa694edf5"><code>bfa694e</code></a>
Update .github/workflows/publish.yml</li>
<li><a
href="ace0b3c78f"><code>ace0b3c</code></a>
chore: bump version to 1.2.4</li>
<li><a
href="6fd7275946"><code>6fd7275</code></a>
chore: add publish workflow</li>
<li><a
href="30d6daf60f"><code>30d6daf</code></a>
chore: fix test</li>
<li><a
href="655929cabe"><code>655929c</code></a>
chore: remove package-lock</li>
<li><a
href="49e08bbc32"><code>49e08bb</code></a>
chore: added an additional testcase</li>
<li><a
href="9f626935f3"><code>9f62693</code></a>
fix: cve 2023-26115</li>
<li>Additional commits viewable in <a
href="https://github.com/jonschlinkert/word-wrap/compare/1.2.3...1.2.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=word-wrap&package-manager=npm_and_yarn&previous-version=1.2.3&new-version=1.2.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/actualbudget/actual-server/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-19 17:08:34 +01:00
Matiss Janis Aboltins
1de788ea68 ⬆️ (nordigen-node) upgrade to v1.2.6 (#229)
1. upgrade `nordigen-node` to 1.2.6 (which uses the new gocardless
domain)
2. allow accessing `nordigen` functionality via `/gocardless` to unblock
using the new API path in actual-web
2023-07-18 18:31:54 +01:00
Matiss Janis Aboltins
354152dbb5 🔖 (23.7.2) more patches (not so critical, but still annoying) (#225)
- web: https://github.com/actualbudget/actual/pull/1322
- server: https://github.com/actualbudget/actual-server/pull/225
- docs: https://github.com/actualbudget/docs/pull/230
2023-07-09 17:03:55 +01:00
Matiss Janis Aboltins
c2ee92878c 🔖 (23.7.1) critical sync fixes (#224)
- web: https://github.com/actualbudget/actual/pull/1295
- server: https://github.com/actualbudget/actual-server/pull/224
- docs: https://github.com/actualbudget/docs/pull/225
2023-07-05 21:51:03 +01:00
Matiss Janis Aboltins
8237eb56ab 🔖 (23.7.0) Nordigen release, stability improvements (#222)
- web: https://github.com/actualbudget/actual/pull/1280
 - server: https://github.com/actualbudget/actual-server/pull/222
 - docs: https://github.com/actualbudget/docs/pull/223

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2023-07-04 22:08:39 +01:00
Shazib Hussain
28e0d712ab Update comments in docker-compose.yml (#221) 2023-06-30 21:16:35 -04:00
Matiss Janis Aboltins
debb33a63d ♻️ (crdt) use actual-app/crdt package instead of api (#218)
Using the new CRDT package instead of API.
2023-06-19 08:07:21 +01:00
Jed Fox
5252f45073 Add a health check script (#214)
This allows running a health check from inside the container. Usage:
`npm run health-check`. That may not work inside of Alpine containers,
so you can do `node src/scripts/health-check.js` directly instead. Fixes
#213.
2023-06-18 22:36:16 -04:00
Rich Howell
5954141c15 Contributing readme link update (#217)
Replaced contributing link

<!-- Thank you for submitting a pull request! Make sure to follow the
instructions to write release notes for your PR — it should only take a
minute or two:
https://github.com/actualbudget/docs#writing-good-release-notes -->
2023-06-14 20:07:50 +01:00
Jed Fox
ca27949989 Update “how it works” link (#216)
- https://github.com/actualbudget/docs/pull/202
2023-06-14 07:33:52 +01:00
Rich Howell
8ac74ed397 Update README.md (#215)
Remove the bulk in favour of links to our core docs.

---------

Co-authored-by: Jed Fox <git@jedfox.com>
2023-06-13 14:05:59 -04:00
Matiss Janis Aboltins
7c8e9bb5ec 🔖 (23.6.0) category hiding and filters for reports (#207)
Web: https://github.com/actualbudget/actual/pull/1087
Server: https://github.com/actualbudget/actual-server/pull/207
Docs: https://github.com/actualbudget/docs/pull/179

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2023-06-01 21:13:18 +01:00
Jed Fox
d1ff06840e Migrate to combined release notes action from main repo (#208) 2023-06-01 16:07:42 -04:00
Jed Fox
c2c8c1719e Authenticate request for artifacts (#204)
Previously, the latest artifact list was requested unauthenticated using
`ADD "https://api.github.com/..." /tmp/artifacts.json`. While this works
locally, on GitHub’s servers it seems that the per-IP rate limit was
exceeded. There isn’t a way to get Docker to pass the `Authorization`
header that I know of, so this work has been moved to an external shell
script that pulls down the relevant data.
2023-05-15 17:47:10 -04:00
Jed Fox
5d36ecbbbb Update README (#201) 2023-05-05 19:34:02 -04:00
Matiss Janis Aboltins
9169bfabad 🔖 (23.5.0) various improvements (#200) 2023-05-04 18:51:03 +01:00
Matiss Janis Aboltins
fb6dc5e8f1 🐛 (nordigen) return JSON response for the secrets API (#197)
A small fix: returning JSON response instead of plain-text.

The frontend always expects a JSON response. So a tiny fix here..
2023-05-02 19:06:14 +01:00
Henrik Maaland
d60bb6a19e App secret service (#194)
Co-authored-by: Henrik Maaland <henrikm@netpower.no>
2023-04-26 08:41:07 -04:00
Jed Fox
996f238648 Remove the unused migrations folder (#195) 2023-04-25 16:18:41 -04:00
Jakub Kuczys
7c744f0e3d Add a field with all transactions to /nordigen/transactions endpoint (#190)
Helps with actualbudget/actual#919 by adding the `all` field wit both
pending and booked transactions to the output of
`getTransactionsWithBalance()` and, by extension, the
`/nordigen/transactions` endpoint.

I could alter the `getTransactions()` to return the `all` field as well
but I figured that keeping it such that it returns the output from
Nordigen API 1:1 might be better so I left it as is. If you don't agree,
let me know and I'll update this.
2023-04-22 16:44:43 +01:00
Matiss Janis Aboltins
2f54a948be 🔖 (23.4.2) revert back to old autocomplete & keyboard shortcut fix (#192)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2023-04-22 15:43:51 +01:00
Jed Fox
652d75a939 Add a handler for AxiosError errors (#189) 2023-04-17 15:54:36 -04:00
Jed Fox
104c9803f7 Add a password set/reset script (#186)
Co-authored-by: Matiss Janis Aboltins <matiss@mja.lv>
2023-04-16 15:08:06 -04:00
Matiss Janis Aboltins
bc93604576 🔖 (23.4.1) fix rule creation from transaction list (#188) 2023-04-16 18:11:43 +01:00
Jed Fox
a1af1ff3d2 Add express-rate-limit (#187)
CodeQL keeps yelling at us about this… I’m not sure if the filter is
smart enough to use this rate limit middleware to remove the warnings,
but at least we will be setting a reasonable bound on attempts to crack
the server password.
2023-04-12 16:38:43 -04:00
Alberto Gasparin
47d77a3198 Use babel preset-typescript (#185)
Seems like we already added `tsc` to build the project, but we use the
wrong babel preset (Flow) instead of the specific TS one. This is only
used in testing to make Jest work (from what I can tell).
2023-04-08 23:21:14 -04:00
intiplink
82b4643c78 github action workflow: revert old way to build images (#184) 2023-04-08 12:13:25 -04:00
Jed Fox
0096907368 Add workflow_dispatch to edge image action so it can be manually run 2023-04-08 07:47:42 -04:00
Jed Fox
1504127979 Blank commit to trigger image build 2023-04-08 07:46:29 -04:00
Jed Fox
6f7306cd37 Don’t check for release notes on release/* branches (#181) 2023-04-07 16:26:29 -04:00
intiplink
063d468836 Add support for armv6l (alpine based images) (#182)
GitHub CI log:
```
[linux/arm/v6 base 6/8] RUN yarn workspaces focus --all --production
204.6 ➤ YN0007: │ bcrypt@npm:5.1.0 must be built because it never has been before or the last one failed
204.6 ➤ YN0007: │ better-sqlite3@npm:8.2.0 must be built because it never has been before or the last one failed
...
[linux/arm/v7 base 6/8] RUN yarn workspaces focus --all --production
203.8 ➤ YN0007: │ bcrypt@npm:5.1.0 must be built because it never has been before or the last one failed
203.8 ➤ YN0007: │ better-sqlite3@npm:8.2.0 must be built because it never has been before or the last one failed
```

It seems that both armv6 and armv7 have the same issues with `bcrypt`
and `better-sqlite3` not being built. These packages are required to
build from source, luckily QEMU use armv7l for compiling.

Tested and working on RPi Zero W.

---------

Co-authored-by: Jed Fox <git@jedfox.com>
2023-04-07 14:37:10 -04:00
Matiss Janis Aboltins
7e88de182e 🔖 (23.4.0) (#180) 2023-04-06 22:16:15 +01:00
Jed Fox
bf4319d978 Add some basic debug logging (#178)
This will help people sort out configuration issues. Will open a PR to
the docs as well to guide people to troubleshoot using this!
2023-04-06 13:24:46 -04:00
Trevor Farlow
c3d89b6509 New Docker Hub org in CI and README (#175)
Update all Docker Hub references to new `actualbudget` organization from
`jlongster` personal account.
We're officially an org now!

A bit of markdown/yaml auto-formatting snuck in, too.

Closes https://github.com/actualbudget/actual/issues/364
Corresponding update for the docs site in
https://github.com/actualbudget/docs/pull/144

Simultaneous to merging, we need to update our `DOCKER_HUB_*` GitHub
secrets in this repo.

---------

Co-authored-by: Jed Fox <git@jedfox.com>
2023-03-31 14:07:15 -06:00