kolaente b1f147deb9 fix(migration): omit duplicate values from unique-index repair error ...

address pr-swarm finding: the error embedded raw row values; unique columns
can hold secrets (token hashes, oauth codes), so report only the count

2026-07-20 13:13:46 +02:00

..

audit

feat: audit admin reads and denied admin access

2026-07-03 16:56:03 +00:00

caldav

fix(caldav): compute VTODO DURATION components correctly (#3155)

2026-07-11 17:28:59 +02:00

caldavtests

…

cmd

fix(cli): drain the mail queue before user commands exit

2026-07-09 17:05:21 +00:00

config

fix(filters): resolve relative and absolute date filters in UTC (#3181) 🤖🤖🤖 (#3229)

2026-07-19 13:31:21 +02:00

cron

…

db

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

doctor

…

e2etests

…

events

…

files

fix: GCS signing issue (#2920)

2026-07-02 17:38:37 +02:00

health

…

i18n

…

initialize

feat(auth): add OpenID provider availability monitoring and retry logic (#3145)

2026-07-10 17:52:01 +02:00

license

…

log

…

mail

fix(cli): drain the mail queue before user commands exit

2026-07-09 17:05:21 +00:00

metrics

feat(tasks): soft-delete tasks with permanent deletion after 30 days (#3119)

2026-07-07 11:38:33 +02:00

migration

fix(migration): omit duplicate values from unique-index repair error

2026-07-20 13:13:46 +02:00

models

fix(security): reject cross-project views in ProjectView Can{Delete,Update} (GHSA-gg93-x632-9ccv)

2026-07-19 18:59:34 +02:00

modules

fix(security): require Admin to detach a project from its parent (GHSA-44v6-7fxq-vgf4)

2026-07-19 18:59:34 +02:00

notifications

fix(notifications): render Markdown in plain-text emails (#3219)

2026-07-18 14:39:32 +02:00

plugins

…

red

…

richtext

feat(richtext): add markdown-domain change detection

2026-06-29 08:12:35 +02:00

routes

fix(auth): reject API tokens at the OAuth authorize endpoint (GHSA-v3p6-34mc-hj7v)

2026-07-19 18:59:34 +02:00

swagger

docs: fix @Success 200 -> 201 on 5 PUT/Create endpoints

2026-07-18 17:05:32 +00:00

user

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

utils

fix(security): hash password-reset, email-confirm and deletion tokens at rest (GHSA-r6w9-259g-gwrv)

2026-07-19 18:59:34 +02:00

version

…

web

fix: interpolate dynamic values into translated error toasts

2026-07-18 13:41:15 +00:00

websocket

…

webtests

fix(security): reject cross-project views in ProjectView Can{Delete,Update} (GHSA-gg93-x632-9ccv)

2026-07-19 18:59:34 +02:00

yaegi_symbols

feat(filters): generate open task saved filter on user creation

2026-06-27 13:35:50 +00:00