Commit Graph
14943 Commits
Author SHA1 Message Date
kolaente 595f4c3edc fix(frontend): show confirmation notice when registration requires email verification
After a successful registration the frontend auto-logs-in. With email
confirmation enabled that login fails with 412 (code 1012), which
surfaced as a raw "Request failed with status code 412" error in the
register form even though the account was created fine. Treat that case
as a success and tell the user to check their inbox instead.
2026-08-18 11:30:03 +02:00
kolaente 3833b34d37 fix(user): keep email confirmation status after registration
The default-project creation triggered by the user-created event wrote the
stale in-memory user back with a full UpdateUser, racing registration and
sometimes resetting the status from "email confirmation required" back to
active. Only update the default_project_id column and keep the returned
user's status in sync with what was persisted.
2026-08-18 11:30:03 +02:00
kolaente 8607fad4a9 fix(webhooks): wrap long target URLs instead of overflowing the table
Webhook target URLs like Discord's contain no break opportunities, so the
cell's min-content width forced the whole table past its container and
pushed the other columns out of view.

Fixes #3456
2026-08-18 10:57:37 +02:00
kolaente d59b2e1f75 fix(frontend): don't duplicate subtasks as top-level rows in saved filter list views
shouldShowTaskInListView() skipped the parent-in-view check for saved
filters, so a subtask expanded for context was rendered nested *and* as
its own top-level row, even when it did not match the filter.

The bypass was a stopgap for #2494 (a matching subtask was invisible when
its parent did not match). That is now handled in the backend by
buildSubtaskRootCondition, which returns such a subtask as a root, so the
frontend check is safe to apply to saved filters too.

Fixes #3462
2026-08-18 10:26:13 +02:00
renovate[bot]andkolaente 8fd0c23421 chore(deps): update dependency js-yaml to v5.3.0 2026-08-18 10:22:43 +02:00
renovate[bot]andkolaente 4fea68e624 fix(deps): update module golang.org/x/net to v0.58.0 2026-08-18 10:21:54 +02:00
kolaente e773ee4683 fix(frontend): keep focus in the multiselect input after selecting an option
Selecting an option unmounts the result list, so focus fell back to the
document body. On the task detail view, subsequent keystrokes were then
picked up by the global task shortcuts, which looked like focus jumping
to the description or assignee field.

Resolves #3464
2026-08-18 10:08:32 +02:00
kolaente 536d7b7dbf fix(notifications): retry subscriber notifications instead of dropping them on error
Since e25295422 the subscriber loops in the comment, assigned, deleted and
project-created listeners logged a failed Notify and moved on. On SQLite the
insert regularly fails with "database is locked" (SQLITE_BUSY_SNAPSHOT: the
listener's deferred transaction cannot upgrade to a write once a sibling
listener has committed), so the notification was silently lost.

Return the error again so the events router retries the handler with a fresh
session, as it did before 2.5.0.

Reported at https://community.vikunja.io/t/notification-problems-since-2-5-0/4750
2026-08-18 09:46:57 +02:00
kolaente 7d91052976 feat: show relative time in api token expiry notifications 2026-08-18 09:44:49 +02:00
renovate[bot]andkolaente c6b6d84ab1 chore(deps): update e18e/action-dependency-diff action to v1.7.1 2026-08-18 09:32:40 +02:00
renovate[bot]andkolaente 9fbce54a5d chore(deps): update dependency js-yaml@4 to v5.3.0 2026-08-18 09:29:16 +02:00
renovate[bot]andkolaente e61c81cc54 fix(deps): update dependency @sentry/vue to v10.70.0 2026-08-17 17:07:21 +02:00
renovate[bot]andkolaente 7247ae69e8 chore(deps): update dependency esbuild to v0.28.2 2026-08-17 16:41:41 +02:00
renovate[bot]andkolaente c95cf786bd fix(deps): update tiptap to v3.30.1 2026-08-17 14:59:14 +02:00
renovate[bot]andkolaente 3acf56bb82 fix(deps): update dependency pinia to v4.0.3 2026-08-17 14:39:11 +02:00
renovate[bot]andkolaente 6df8e84adf chore(deps): update dependency ip-address to v10.5.0 2026-08-17 14:32:46 +02:00
renovate[bot]andkolaente 5c3c127cc1 chore(deps): update dependency undici@6 to v8.10.0 2026-08-17 14:11:19 +02:00
renovate[bot]andkolaente bad120a368 chore(deps): update dependency serialize-javascript to v7.1.0 2026-08-17 14:07:34 +02:00
renovate[bot]andkolaente 55b3d42854 fix(deps): update module github.com/stretchr/testify to v1.12.0 2026-08-17 14:01:37 +02:00
renovate[bot]andkolaente a8ec0d7a9a chore(deps): update dependency rollup-plugin-visualizer to v7.1.1 2026-08-17 13:40:54 +02:00
renovate[bot]andkolaente 976e84efaa fix(deps): update module charm.land/lipgloss/v2 to v2.0.6 2026-08-17 13:34:56 +02:00
renovate[bot]andkolaente af2f735a39 chore(deps): update cachix/install-nix-action action to v31.11.1 2026-08-17 13:31:23 +02:00
renovate[bot]andkolaente 4b27de44e7 fix(deps): update dependency marked to v18.0.9 2026-08-17 12:38:53 +02:00
renovate[bot]andkolaente 70db5bce84 fix(deps): update module golang.org/x/image to v0.45.0 2026-08-17 12:35:09 +02:00
renovate[bot]andkolaente 3ffea20a16 fix(deps): update dependency vue to v3.5.41 2026-08-17 12:21:11 +02:00
renovate[bot]andkolaente 468e50f4f4 chore(deps): update dependency postcss to v8.5.26 2026-08-17 12:18:40 +02:00
renovate[bot]andkolaente 6569148088 chore(deps): update dependency go to v1.26.6 2026-08-17 12:15:01 +02:00
renovate[bot]andkolaente d41f637068 chore(deps): update docker/dockerfile:1 docker digest to ecfaec9 2026-08-17 12:03:41 +02:00
kolaente b6037a2562 chore(deps): update fast-uri to 3.1.5 2026-08-17 11:35:52 +02:00
kolaente a9b7c89bfb chore(deps): update brace-expansion to 5.0.9 in desktop 2026-08-17 11:35:41 +02:00
kolaente 2b22f0661e chore(deps): update brace-expansion to 5.0.9 2026-08-17 11:35:17 +02:00
kolaente c7dc7844f1 chore(deps): update js-yaml to 3.15.1 2026-08-17 11:35:14 +02:00
kolaente 6314285564 chore(deps): update nanoid to 3.3.18 2026-08-17 11:35:06 +02:00
kolaente c901cedf48 chore(deps): drop redundant esbuild devDependency
Nothing imports esbuild directly and the pnpm override already forces
0.28.1 on all transitive copies, so the direct pin had no effect.
2026-08-17 11:26:51 +02:00
dependabot[bot]andkolaente d053ffec29 chore(deps): bump nanoid from 3.3.16 to 6.0.1 in /frontend
Bumps [nanoid](https://github.com/ai/nanoid) from 3.3.16 to 6.0.1.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/3.3.16...6.0.1)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-version: 6.0.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-17 11:03:40 +02:00
renovate[bot]andkolaente 9d6928663f chore(deps): update ghcr.io/techknowlogick/xgo:go-1.26.x docker digest to 1a7c89c 2026-08-17 10:58:51 +02:00
renovate[bot]andkolaente cf5f3f9f6d fix(deps): update aws-sdk-go-v2 monorepo 2026-08-17 10:18:22 +02:00
renovate[bot]andkolaente dddbc2f330 fix(deps): update dependency nanoid to v6.0.1 2026-08-17 10:18:08 +02:00
renovate[bot]andkolaente 11730960e2 chore(deps): update dependency undici@7 to v8.10.0 2026-08-17 10:17:38 +02:00
renovate[bot]andkolaente 315087dff2 chore(deps): update dev-dependencies 2026-08-17 10:17:29 +02:00
renovate[bot]andkolaente 97f2515dcc chore(deps): update pnpm to v11.21.0 2026-08-17 10:17:15 +02:00
renovate[bot]andkolaente 5cf77228e4 chore(deps): update danielroe/provenance-action digest to 2fb14fe 2026-08-17 10:17:04 +02:00
renovate[bot]andkolaente 268f1d79b4 fix(deps): update dependency dompurify to v3.4.13 [security] 2026-08-17 10:16:52 +02:00
Frederick [Bot] a7e0f51325 [skip ci] Updated yaegi symbols 2026-08-16 16:27:32 +00:00
kolaente 6d2b5aff54 fix: load export file meta inside transaction and open storage after commit
v1 queried on an already-committed session; v2 opened storage while
still holding the transaction. Both now load meta under the tx, commit,
then open the file. Addresses pr-swarm findings.
2026-08-16 17:57:52 +02:00
kolaente 263c24f0b7 feat: expose database connection pool stats as prometheus metrics 2026-08-16 17:57:52 +02:00
kolaente 96ddc10110 fix: release db connection before reading attachment files from storage
Preview generation reads the whole file (a network round trip on s3),
decodes and resizes it — seconds per image — while the request
transaction pinned a pool connection. A board full of image previews
could drain the pool. Commit first; the storage read needs no
transaction.
2026-08-16 17:57:52 +02:00
kolaente 044106508a fix: use caller's session in LoadFileMetaByID to prevent connection pool deadlock
Querying the global engine while the request already holds an open
transaction acquires a second pool connection. Under concurrent
attachment downloads (e.g. a kanban board full of image previews) all
pool connections end up held by transactions that each wait for an
extra connection that can never be freed, hanging every request until
restart.

The redundant meta load in the upload avatar provider is removed
entirely; the decoded image is all that path uses.
2026-08-16 17:57:52 +02:00
Frederick [Bot] ce2c3bce97 chore(i18n): update translations via Crowdin 2026-08-16 00:05:29 +00:00
Frederick [Bot] 9403ed1526 chore(i18n): update translations via Crowdin 2026-08-07 01:08:25 +00:00