kolaente 86da987f8a feat(migration): add planka api client ...

Authenticates with an API key, a JWT or username + password (Planka checks
Bearer before X-Api-Key, so only one header is ever sent; downloads use the
accessToken cookie). The synchronous credential check has one 15s deadline and
no retries. Redirects to another host or to plain http are refused for the
api, followed without credentials for attachment downloads. Response bodies
are capped, url userinfo is stripped, pending login steps (totp, terms) and
non-planka endpoints are reported as distinct client errors (142xx).

2026-08-20 08:45:42 +02:00

..

audit

feat(audit): audit full personal data export requests

2026-07-28 18:05:34 +02:00

caldav

fix(caldav): report completion status from Done instead of done_at

2026-07-30 11:32:24 +02:00

caldavtests

fix(caldav): don't duplicate a task when a client PUTs a stale href

2026-08-18 12:55:13 +02:00

cmd

…

config

fix(ratelimit): give session renewal its own budget

2026-08-18 14:01:06 +02:00

cron

…

db

fix(api/v2): don't require read_one for autopatch's internal GET

2026-08-19 13:01:59 +02:00

doctor

feat: report ParadeDB extension and index status in doctor command

2026-08-05 19:27:12 +02:00

e2etests

…

events

fix(events): don't log event payloads in the poison queue handler

2026-08-20 08:45:42 +02:00

files

fix: use caller's session in LoadFileMetaByID to prevent connection pool deadlock

2026-08-16 17:57:52 +02:00

health

…

i18n

chore(i18n): update translations via Crowdin

2026-08-20 00:39:14 +00:00

initialize

…

license

…

log

…

mail

fix(user): keep old email active until new one is confirmed

2026-08-18 22:03:38 +02:00

metrics

fix(metrics): store active users as TTL keys in keyvalue to avoid concurrent map access

2026-08-19 17:29:35 +02:00

migration

feat(user): add pending_email column

2026-08-18 22:03:38 +02:00

models

fix(projects): deny writes to pseudo projects across the permission family

2026-08-19 16:02:39 +02:00

modules

feat(migration): add planka api client

2026-08-20 08:45:42 +02:00

notifications

fix(notifications): require a persisted notification to declare its project

2026-07-29 07:58:17 +00:00

plugins

fix: expose xorm and xormigrate to yaegi plugins

2026-08-18 22:03:09 +02:00

red

…

richtext

…

routes

fix(caldav): stop answering requests out of process-wide state

2026-08-19 22:24:21 +02:00

swagger

[skip ci] Updated swagger docs

2026-08-19 00:53:08 +00:00

user

fix(user): expire used TOTP passcodes via keyvalue TTL

2026-08-19 17:29:35 +02:00

utils

feat(migration): client-aware get and size-limited download helpers, bounded json decode

2026-08-20 08:45:42 +02:00

version

…

web

fix(web): stop logging the full auth object on permission denials

2026-07-29 07:58:17 +00:00

websocket

fix(notifications): check project access when reading notifications

2026-07-29 07:58:17 +00:00

webtests

fix(caldav): encode task uids in hrefs instead of interpolating them raw (#3560)

2026-08-19 20:13:06 +00:00

yaegi_symbols

[skip ci] Updated yaegi symbols

2026-08-19 16:27:07 +00:00