2e4904f77d
feat: Add two-factor authentication via TOTP
...
Adds TOTP setup with QR code, login challenge, recovery codes and
trusted devices that let a browser skip the second factor for 30
days. Admins can reset another user's second factor by confirming
with their own password.
2026-08-07 20:11:55 +02:00
a1f0a2b3fa
chore: Update dependencies
2026-08-07 16:45:51 +02:00
bec5dd1597
chore: Update dependencies
...
Bump Node to 24 in Dockerfile and Dockerfile.dev.
Bump sharp to 0.35, nodemailer to 9 and concurrently to 10.
Add overrides for body-parser, qs, multiparty, uuid, diff,
serialize-javascript, linkify-it and svgo to pull in security fixes
that upstream pins block.
Rename the sails patch to match 1.5.18.
2026-08-07 16:17:24 +02:00
45119825f4
build(deps): Bump tmp from 0.2.5 to 0.2.7 in /client
...
Bumps [tmp](https://github.com/raszi/node-tmp ) from 0.2.5 to 0.2.7.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/raszi/node-tmp/compare/v0.2.5...v0.2.7 )
---
updated-dependencies:
- dependency-name: tmp
dependency-version: 0.2.7
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-28 02:53:47 +00:00
20eb57de4c
Merge pull request #1635 from HannesOberreiter/fix/unicode-initials
...
fix: unicode/emoji characters in user avatar initials
2026-04-18 15:28:06 +02:00
11f7814e87
Merge pull request #1611 from plankanban/dependabot/npm_and_yarn/client/yaml-2.8.3
...
build(deps): Bump yaml from 2.8.2 to 2.8.3 in /client
2026-04-18 15:27:59 +02:00
4fd164c81a
Merge pull request #1627 from plankanban/dependabot/npm_and_yarn/client/vite-7.3.2
...
build(deps): Bump vite from 7.3.1 to 7.3.2 in /client
2026-04-18 15:27:55 +02:00
fd0981b5b3
Merge pull request #1624 from plankanban/dependabot/npm_and_yarn/client/lodash-es-4.18.1
...
build(deps): Bump lodash-es from 4.17.23 to 4.18.1 in /client
2026-04-18 15:27:48 +02:00
9b68d3fc30
Merge pull request #1630 from plankanban/dependabot/npm_and_yarn/client/lodash-4.18.1
...
build(deps): Bump lodash from 4.17.23 to 4.18.1 in /client
2026-04-18 15:27:46 +02:00
3bf6e6fa19
fix: allow unicodes in initials
2026-04-16 14:21:13 +02:00
7a3873cbeb
build(deps): Bump lodash from 4.17.23 to 4.18.1 in /client
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.18.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-08 08:29:03 +00:00
f61299fde8
build(deps): Bump vite from 7.3.1 to 7.3.2 in /client
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 7.3.1 to 7.3.2.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 7.3.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-06 21:38:57 +00:00
a55214e617
build(deps): Bump lodash-es from 4.17.23 to 4.18.1 in /client
...
Bumps [lodash-es](https://github.com/lodash/lodash ) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1 )
---
updated-dependencies:
- dependency-name: lodash-es
dependency-version: 4.18.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-02 11:42:15 +00:00
081d0cee1f
build(deps): Bump yaml from 2.8.2 to 2.8.3 in /client
...
Bumps [yaml](https://github.com/eemeli/yaml ) from 2.8.2 to 2.8.3.
- [Release notes](https://github.com/eemeli/yaml/releases )
- [Commits](https://github.com/eemeli/yaml/compare/v2.8.2...v2.8.3 )
---
updated-dependencies:
- dependency-name: yaml
dependency-version: 2.8.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-26 17:25:40 +00:00
f9102db1b2
build(deps-dev): Bump picomatch from 2.3.1 to 2.3.2 in /client
...
Bumps [picomatch](https://github.com/micromatch/picomatch ) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases )
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2 )
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 2.3.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-25 23:18:47 +00:00
e31eca2273
build(deps-dev): Bump flatted from 3.4.1 to 3.4.2 in /client ( #1595 )
...
Bumps [flatted](https://github.com/WebReflection/flatted ) from 3.4.1 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.4.1...v3.4.2 )
---
updated-dependencies:
- dependency-name: flatted
dependency-version: 3.4.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-25 21:06:17 +01:00
f47c188331
build(deps): Bump socket.io-parser from 4.2.5 to 4.2.6 in /client ( #1589 )
...
Bumps [socket.io-parser](https://github.com/socketio/socket.io ) from 4.2.5 to 4.2.6.
- [Release notes](https://github.com/socketio/socket.io/releases )
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md )
- [Commits](https://github.com/socketio/socket.io/compare/socket.io-parser@4.2.5...socket.io-parser@4.2.6 )
---
updated-dependencies:
- dependency-name: socket.io-parser
dependency-version: 4.2.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-19 10:29:12 +01:00
d9ae02899d
chore: Update dependencies
2026-03-16 16:04:51 +01:00
5ebe320396
chore: Update dependencies
2026-03-01 16:42:19 +01:00
f8cd7474d1
chore: Update client dependencies
2026-02-04 17:52:04 +01:00
ee917c545c
chore: Update dependencies
2026-01-26 14:11:20 +01:00
c88fd340bc
build(deps): Bump lodash-es from 4.17.22 to 4.17.23 in /client ( #1495 )
...
Bumps [lodash-es](https://github.com/lodash/lodash ) from 4.17.22 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/commits/4.17.23 )
---
updated-dependencies:
- dependency-name: lodash-es
dependency-version: 4.17.23
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-22 10:06:57 +01:00
7b1be0db27
build(deps): Bump lodash from 4.17.21 to 4.17.23 in /client ( #1491 )
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.17.23
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-22 10:06:36 +01:00
5636c2bb79
chore: Update dependencies
2026-01-14 13:22:11 +01:00
f4a24a3c1f
build(deps): Bump @remix-run/router and react-router-dom in /client ( #1479 )
...
Bumps [@remix-run/router](https://github.com/remix-run/react-router/tree/HEAD/packages/router ) to 1.23.2 and updates ancestor dependency [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom ). These dependencies need to be updated together.
Updates `@remix-run/router` from 1.23.1 to 1.23.2
- [Release notes](https://github.com/remix-run/react-router/releases )
- [Changelog](https://github.com/remix-run/react-router/blob/@remix-run/router@1.23.2/packages/router/CHANGELOG.md )
- [Commits](https://github.com/remix-run/react-router/commits/@remix-run/router@1.23.2/packages/router )
Updates `react-router-dom` from 6.30.2 to 6.30.3
- [Release notes](https://github.com/remix-run/react-router/releases )
- [Changelog](https://github.com/remix-run/react-router/blob/main/CHANGELOG.md )
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@6.30.3/packages/react-router-dom )
---
updated-dependencies:
- dependency-name: "@remix-run/router"
dependency-version: 1.23.2
dependency-type: indirect
- dependency-name: react-router-dom
dependency-version: 6.30.3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-09 05:42:39 +01:00
cadb013527
build(deps): Bump qs from 6.14.0 to 6.14.1 in /client ( #1469 )
2026-01-02 07:04:51 +01:00
bd10a7fa5a
chore: Update dependencies
2025-12-19 12:32:10 +01:00
197ebc16db
chore: Bump package lock files
2025-11-24 19:48:30 +01:00
5c787d65a9
fix: Properly prevent shortcut events, update dependencies
...
Closes #1440
2025-11-24 19:21:07 +01:00
015562d8da
build(deps): Bump glob from 10.4.5 to 10.5.0 in /client ( #1432 )
2025-11-18 21:23:34 +01:00
7da8d8219b
build(deps-dev): Bump js-yaml from 3.14.1 to 3.14.2 in /client ( #1431 )
...
Bumps [js-yaml](https://github.com/nodeca/js-yaml ) from 3.14.1 to 3.14.2.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/3.14.1...3.14.2 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 3.14.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-18 21:11:18 +01:00
d99e949d07
build(deps): Bump validator from 13.15.15 to 13.15.20 in /client ( #1403 )
...
Bumps [validator](https://github.com/validatorjs/validator.js ) from 13.15.15 to 13.15.20.
- [Release notes](https://github.com/validatorjs/validator.js/releases )
- [Changelog](https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md )
- [Commits](https://github.com/validatorjs/validator.js/compare/13.15.15...13.15.20 )
---
updated-dependencies:
- dependency-name: validator
dependency-version: 13.15.20
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-31 12:57:38 +01:00
d385a1c238
build(deps): Bump vite from 6.3.6 to 6.4.1 in /client ( #1395 )
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 6.3.6 to 6.4.1.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/create-vite@6.4.1/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 6.4.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-31 12:53:31 +01:00
0d8edbbbc6
build(deps-dev): Bump playwright and @playwright/test in /client ( #1393 )
...
Bumps [playwright](https://github.com/microsoft/playwright ) and [@playwright/test](https://github.com/microsoft/playwright ). These dependencies needed to be updated together.
Updates `playwright` from 1.55.0 to 1.56.1
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.55.0...v1.56.1 )
Updates `@playwright/test` from 1.55.0 to 1.56.1
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.55.0...v1.56.1 )
---
updated-dependencies:
- dependency-name: playwright
dependency-version: 1.56.1
dependency-type: direct:development
- dependency-name: "@playwright/test"
dependency-version: 1.56.1
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-31 12:53:22 +01:00
f968e1976b
build(deps): Bump tmp and patch-package in /client ( #1369 )
...
Bumps [tmp](https://github.com/raszi/node-tmp ) to 0.2.5 and updates ancestor dependency [patch-package](https://github.com/ds300/patch-package ). These dependencies need to be updated together.
Updates `tmp` from 0.0.33 to 0.2.5
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/raszi/node-tmp/compare/v0.0.33...v0.2.5 )
Updates `patch-package` from 8.0.0 to 8.0.1
- [Release notes](https://github.com/ds300/patch-package/releases )
- [Changelog](https://github.com/ds300/patch-package/blob/master/CHANGELOG.md )
- [Commits](https://github.com/ds300/patch-package/commits )
---
updated-dependencies:
- dependency-name: tmp
dependency-version: 0.2.5
dependency-type: indirect
- dependency-name: patch-package
dependency-version: 8.0.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-10 12:48:37 +02:00
494800d131
build(deps): Bump vite from 6.3.5 to 6.3.6 in /client ( #1341 )
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 6.3.5 to 6.3.6.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/v6.3.6/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v6.3.6/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 6.3.6
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-10 11:47:26 +02:00
6863f557a3
chore: Update dependencies
2025-08-30 17:25:25 +02:00
bb40a22563
chore: Update dependencies
2025-08-20 13:10:16 +02:00
0049ba2145
feat: Track navigation path when switching between cards
2025-07-31 16:59:16 +02:00
c272a65015
build(deps): Bump linkifyjs from 4.3.1 to 4.3.2 in /client ( #1273 )
...
Bumps [linkifyjs](https://github.com/nfrasser/linkifyjs/tree/HEAD/packages/linkifyjs ) from 4.3.1 to 4.3.2.
- [Release notes](https://github.com/nfrasser/linkifyjs/releases )
- [Changelog](https://github.com/nfrasser/linkifyjs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/nfrasser/linkifyjs/commits/v4.3.2/packages/linkifyjs )
---
updated-dependencies:
- dependency-name: linkifyjs
dependency-version: 4.3.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-30 12:37:49 +02:00
e58a9f5d21
chore: Update dependencies
2025-06-30 12:43:06 +02:00
463b6284c7
build(deps): Bump pbkdf2 from 3.1.2 to 3.1.3 in /client ( #1223 )
...
Bumps [pbkdf2](https://github.com/crypto-browserify/pbkdf2 ) from 3.1.2 to 3.1.3.
- [Changelog](https://github.com/browserify/pbkdf2/blob/master/CHANGELOG.md )
- [Commits](https://github.com/crypto-browserify/pbkdf2/compare/v3.1.2...v3.1.3 )
---
updated-dependencies:
- dependency-name: pbkdf2
dependency-version: 3.1.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-30 12:23:57 +02:00
8df49a636a
build: Use Node.js v22
2025-06-16 21:32:54 +02:00
04b97b66cb
chore: Update dependencies
2025-06-03 13:02:16 +02:00
a2495b664e
chore: Add missing things
2025-06-02 19:44:08 +02:00
c0b0436851
feat: Add ability to mention users in comments ( #1162 )
2025-05-30 22:01:29 +02:00
42817c5199
feat: Add CSV attachment viewer ( #1154 )
2025-05-27 14:19:44 +02:00
2db75ed420
chore: Downgrade and pin i18next version
2025-05-21 13:25:54 +02:00
dd8cd2f4fd
chore: Bump vite to version 6
2025-05-10 21:45:31 +02:00
2ee1166747
feat: Version 2
...
Closes #627 , closes #1047
2025-05-10 02:09:06 +02:00
Daniel Hiller