TinkandGitHub 0b46adfa88 fix(caldav): return 404 for principal sub-paths and foreign usernames (#3371)

2026-07-29 23:44:49 +02:00

..

audit

feat(audit): audit full personal data export requests

2026-07-28 18:05:34 +02:00

caldav

fix(caldav): compute VTODO DURATION components correctly (#3155)

2026-07-11 17:28:59 +02:00

caldavtests

…

cmd

fix(cli): drain the mail queue before user commands exit

2026-07-09 17:05:21 +00:00

config

fix(config): apply deprecated service.jwtsecret to service.secret

2026-07-26 15:59:40 +00:00

cron

…

db

fix(db): ping the database on connect so failures report the real error

2026-07-26 15:40:29 +02:00

doctor

…

e2etests

…

events

fix(notifications): use full user so notifications show display name

2026-06-18 20:57:05 +00:00

files

fix: GCS signing issue (#2920)

2026-07-02 17:38:37 +02:00

health

…

i18n

chore(i18n): update translations via Crowdin

2026-07-25 00:24:11 +00:00

initialize

feat(auth): add OpenID provider availability monitoring and retry logic (#3145)

2026-07-10 17:52:01 +02:00

license

fix(license): refuse redirects and use the SSRF-safe http client for checks

2026-07-28 17:26:12 +02:00

log

…

mail

fix(cli): drain the mail queue before user commands exit

2026-07-09 17:05:21 +00:00

metrics

feat(tasks): soft-delete tasks with permanent deletion after 30 days (#3119)

2026-07-07 11:38:33 +02:00

migration

fix(notifications): delete stored notifications of unknown types

2026-07-29 07:58:17 +00:00

models

fix(models): use ILIKE for the team search count query

2026-07-29 22:53:46 +02:00

modules

fix(avatar): bounds-check size before narrowing int64 to int

2026-07-29 22:53:46 +02:00

notifications

fix(notifications): require a persisted notification to declare its project

2026-07-29 07:58:17 +00:00

plugins

…

red

…

richtext

feat(richtext): add markdown-domain change detection

2026-06-29 08:12:35 +02:00

routes

fix(caldav): return 404 for principal sub-paths and foreign usernames (#3371)

2026-07-29 23:44:49 +02:00

swagger

[skip ci] Updated swagger docs

2026-07-29 08:45:06 +00:00

user

fix(auth): use configured bcrypt rounds everywhere

2026-07-28 08:43:26 +02:00

utils

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

version

…

web

fix(web): stop logging the full auth object on permission denials

2026-07-29 07:58:17 +00:00

websocket

fix(notifications): check project access when reading notifications

2026-07-29 07:58:17 +00:00

webtests

fix(caldav): return 404 for principal sub-paths and foreign usernames (#3371)

2026-07-29 23:44:49 +02:00

yaegi_symbols

feat(filters): generate open task saved filter on user creation

2026-06-27 13:35:50 +00:00