Commit Graph

  • e0ac8346f3 Update zh_cn translation strings (#1030) main milletbig 2026-04-28 04:30:16 +08:00
  • 7a72e09044 chore(main): release 4.8.4 (#1049) v4.8.4 github-actions[bot] 2026-04-27 22:28:32 +02:00
  • d7c7bd0785 chore(main): release 4.8.4 release-please--branches--main github-actions[bot] 2026-04-27 20:27:01 +00:00
  • 8d43623da9 fix: improve date formatting with IntlDateFormatter fallback (b2c565f) (#1048) Miguel Ribeiro 2026-04-27 22:26:19 +02:00
  • afebc005c7 fix: improve date formatting with IntlDateFormatter fallback (b2c565f) fix: missing year for subscription next payment display (ca5823d) v4_8_4 Miguel Ribeiro 2026-04-27 22:23:51 +02:00
  • ca5823da6c missing year for subscription next payment display (#975) Mercury233 2026-04-28 04:09:55 +08:00
  • b2c565f74c merge improve date formatting with IntlDateFormatter fallback (#974) Mercury233 2026-04-28 00:38:55 +08:00
  • 4ec9b9b945 chore(main): release 4.8.3 (#1046) v4.8.3 github-actions[bot] 2026-04-26 14:05:45 +02:00
  • d4725f36bd fix: cases on private endpoints where self-xss was possible (#1045) Miguel Ribeiro 2026-04-26 14:04:53 +02:00
  • ea396b9dca fix: cases on private endpoints where self-xss was possible v4_8_3 Miguel Ribeiro 2026-04-26 11:16:03 +02:00
  • a9d3ba990f chore(main): release 4.8.2 (#1041) v4.8.2 github-actions[bot] 2026-04-18 18:29:41 +02:00
  • a95aaadbcc fix: logo cut on registration page (#1040) Miguel Ribeiro 2026-04-18 18:27:11 +02:00
  • 59587860fa fix: logo cut on registration page v4_8_2 Miguel Ribeiro 2026-04-18 18:23:33 +02:00
  • 1c8dbcd939 chore(main): release 4.8.1 (#1039) v4.8.1 github-actions[bot] 2026-04-18 17:02:09 +02:00
  • e79f28be6b fix: ssrf vultenaribility on add subscription (#1038) Miguel Ribeiro 2026-04-18 16:57:46 +02:00
  • a163c7bd94 cleanup v4_8_1 Miguel Ribeiro 2026-04-18 16:23:49 +02:00
  • f3dfb805ad fix: dns rebinding vulnerability Miguel Ribeiro 2026-04-18 16:17:21 +02:00
  • 863058b6a8 fix: only allow to use internalurls csrf validation bypass by admin user Miguel Ribeiro 2026-04-18 14:15:39 +02:00
  • d50aa0600f fix: ssrf vultenaribility on add subscription Miguel Ribeiro 2026-04-18 13:51:48 +02:00
  • 8950e84125 chore(main): release 4.8.0 (#1029) v4.8.0 github-actions[bot] 2026-03-23 16:29:39 +00:00
  • 99c30e70c8 feat: add openai compatible host for ai recommendations Miguel Ribeiro 2026-03-23 16:24:26 +00:00
  • 37b52c1042 feat: enable ai recommendations at a schedule v4_8_0 Miguel Ribeiro 2026-03-23 16:19:49 +00:00
  • 579a27f934 feat: add openai compatible host for ai recommendations fix: handle some ai responses that come in a different format chore: handle deprecation of curl_close Miguel Ribeiro 2026-03-23 16:09:51 +00:00
  • 240d3eba00 chore(main): release 4.7.3 (#1024) v4.7.3 github-actions[bot] 2026-03-21 18:08:44 +00:00
  • 4fd87c3014 fix: session expiration on pwa on android (#1023) Miguel Ribeiro 2026-03-21 18:05:59 +00:00
  • ee7a561365 fix typo v4.7.3 Miguel Ribeiro 2026-03-21 18:04:08 +00:00
  • 92e59642a1 fix: session expiration on pwa on android fix: image search failing to save Miguel Ribeiro 2026-03-21 17:58:36 +00:00
  • b39f0ae40f chore(main): release 4.7.2 (#1022) v4.7.2 github-actions[bot] 2026-03-19 17:57:37 +00:00
  • 90bb6186ee fix: vulnerability would allow to bypass 2fa (#1021) Miguel Ribeiro 2026-03-19 17:54:25 +00:00
  • 7e7219adb5 fix: vulnerability would allow to bypass 2fa fix: password reset tokens now expire after 60 minutes login_fix Miguel Ribeiro 2026-03-19 17:49:40 +00:00
  • ed4876e49a chore(main): release 4.7.1 (#1020) v4.7.1 github-actions[bot] 2026-03-19 01:14:32 +00:00
  • f5c9a3498e fix: remove extra line on languages.php causing headers already sent (#1019) Miguel Ribeiro 2026-03-19 01:12:42 +00:00
  • 4c6c7d416c fix: remove extra line on languages.php causing headers already sent v4.7.1 Miguel Ribeiro 2026-03-19 01:10:50 +00:00
  • 6e52b68718 chore(main): release 4.7.0 (#1018) v4.7.0 github-actions[bot] 2026-03-19 00:46:01 +00:00
  • e87387f0eb feat: add romanian translations (#1017) Miguel Ribeiro 2026-03-19 00:41:55 +00:00
  • 83ba7bbd16 feat: add romanian translations fix: ai recommendation numbering when deleting a recommendation feat: mask ai api key on the settings page fix: unicode character on the css file fix: retain first and last name when switching language during registration fix: calendar ocurrences to respect subscriptions start date fix: ssrf vulnerability on several endpoints fix: logo search fix: xss vulnerability on payment method rename endpoint fix: set login cookie to httponly v4_7_0 Miguel Ribeiro 2026-03-19 00:21:51 +00:00
  • 69613766bc retain first and last names on language change during registration (#995) mister-ben 2026-03-18 16:31:57 +01:00
  • 74a515b865 unicode char in styles.css (#976) Mercury233 2026-03-18 23:30:50 +08:00
  • e4b66cb265 Add Romanian Translation (#1015) g0b3x98 2026-03-18 16:30:22 +01:00
  • f3ab48360c Add AI API key field visibility toggle (#998) LumiDev 2026-03-18 16:29:11 +01:00
  • 4bb69e7df6 update AI recommendation numbering after delete (#996) LumiDev 2026-03-18 16:27:08 +01:00
  • 8f0b5d0a84 chore(main): release 4.6.2 (#1006) v4.6.2 github-actions[bot] 2026-03-05 23:17:41 +01:00
  • e8a513591d fix: ssrf vulnerability on all test notifications endpoint Miguel Ribeiro 2026-03-05 23:13:51 +01:00
  • b2e41f1fa3 chore: bump version scurity_fixes_461 Miguel Ribeiro 2026-03-05 23:11:40 +01:00
  • 5244c0123f fix: vulnerability allowed to delete avatars from other users Miguel Ribeiro 2026-03-05 23:04:28 +01:00
  • cc46a87b94 fix: xss vulnerability on password reset page Miguel Ribeiro 2026-03-05 21:29:41 +01:00
  • 86437ae53e fix: ssrf vulnerability on all test notifications endpoint Miguel Ribeiro 2026-03-05 20:03:11 +01:00
  • 9027afbd8b fix: ssrf vulnerability on test webhook endpoint Miguel Ribeiro 2026-03-05 19:22:47 +01:00
  • 44774d3673 chore(main): release 4.6.1 (#992) v4.6.1 github-actions[bot] 2026-02-10 22:06:25 +01:00
  • 28e896ef56 fix typo in key (#978) Albert Brugués 2026-02-10 22:05:59 +01:00
  • 76a53df9cb fix: vulnerabily on add subscription endpoint (#991) Miguel Ribeiro 2026-02-10 22:03:40 +01:00
  • cff1a12630 fix: vulnerabily on add subscription endpoint v4_6_1 Miguel Ribeiro 2026-02-10 21:59:20 +01:00
  • 9c3948a2e7 chore(main): release 4.6.0 (#971) v4.6.0 github-actions[bot] 2025-12-20 15:57:23 +00:00
  • f5746e76a5 feat: add catalan translation (#970) Miguel Ribeiro 2025-12-20 15:50:53 +00:00
  • d484f8b50d extend notification to 180 days v4_6_0 Miguel Ribeiro 2025-12-20 15:37:30 +00:00
  • c7ff954caf cleanup merges from PRs Miguel Ribeiro 2025-12-20 15:37:12 +00:00
  • 76a2f96514 cleanup merges from PRs Miguel Ribeiro 2025-12-20 15:36:57 +00:00
  • 279ddf61ce add serverchan notification (#951) Easy 2025-12-20 23:06:49 +08:00
  • 671763e78b use stable UID for iCal events to prevent duplicates (#966) Pedro Pombeiro 2025-12-20 16:04:41 +01:00
  • b6b0abed0d fix: use RFC 5545 compliant date format in iCal exports (#965) Pedro Pombeiro 2025-12-20 16:03:55 +01:00
  • 2a371a1a75 Added catalan translation (#960) Albert Brugués 2025-12-20 16:01:33 +01:00
  • a01e446029 Added robots.txt file (#961) Albert Brugués 2025-12-20 16:00:14 +01:00
  • 89a1fee77b chore(main): release 4.5.0 (#941) v4.5.0 github-actions[bot] 2025-10-19 00:00:17 +02:00
  • 3247ce2c87 feat: enforce CSRF protection and POST-only policy across endpoints (#940) Miguel Ribeiro 2025-10-18 23:58:50 +02:00
  • 42a159d6fe csrf on subscriptions v4_5_0 Miguel Ribeiro 2025-10-18 23:55:05 +02:00
  • 7d09cd4cc9 csrf on admin Miguel Ribeiro 2025-10-18 23:10:34 +02:00
  • 46a959dc80 csrf on settings / notifications Miguel Ribeiro 2025-10-18 22:29:36 +02:00
  • 4f89e6e19c csrf on dashboard Miguel Ribeiro 2025-10-18 22:18:35 +02:00
  • cc99a49a44 csrf on profile Miguel Ribeiro 2025-10-18 22:14:52 +02:00
  • 0d0bd13dfb csrf on settings / display settings Miguel Ribeiro 2025-10-18 21:48:29 +02:00
  • 66f0305679 csrf on settings / theme Miguel Ribeiro 2025-10-18 15:46:55 +02:00
  • c4416ba84e csrf on settings / payments Miguel Ribeiro 2025-10-18 15:34:57 +02:00
  • 1aa197a660 csrf on settings / ai Miguel Ribeiro 2025-10-18 15:14:03 +02:00
  • 2526792f1c csrf on settings / household Miguel Ribeiro 2025-10-18 15:06:23 +02:00
  • e50b273370 csrf on settings / budget Miguel Ribeiro 2025-10-18 14:52:05 +02:00
  • 7e05dc02e4 csrf on settings / budget Miguel Ribeiro 2025-10-18 14:33:12 +02:00
  • d6418eeadb extract validation logic to an include file Miguel Ribeiro 2025-10-18 14:27:27 +02:00
  • 2747e833d2 csrf on settings / fixer api Miguel Ribeiro 2025-10-18 14:11:43 +02:00
  • 5c762200e6 csrf on settings / currency Miguel Ribeiro 2025-10-18 13:58:51 +02:00
  • 5b94a9b493 csrf on settings / catgory Miguel Ribeiro 2025-10-18 12:27:19 +02:00
  • 0e3626bfde add csrf lib Miguel Ribeiro 2025-10-18 12:25:15 +02:00
  • 8c46d2ea68 chore(main): release 4.4.1 (#938) v4.4.1 github-actions[bot] 2025-10-12 17:37:52 +02:00
  • d6329a7af5 fix: get_subscriptions api endpoint was not returning subscriptions (#937) Miguel Ribeiro 2025-10-12 17:36:26 +02:00
  • b3e4bd4dd7 fix: get_subscriptions api endpoint was not returning subscriptions v4_4_1 Miguel Ribeiro 2025-10-12 17:33:57 +02:00
  • abf85d7d65 chore(main): release 4.4.0 (#935) v4.4.0 github-actions[bot] 2025-10-12 15:53:50 +02:00
  • 5629a319bc feat: add mattermost notifications (#923) (#934) Miguel Ribeiro 2025-10-12 15:52:08 +02:00
  • 3b30bfa85d feat: add mattermost notifications (#923) feat: add openrouter ai endpoint (#922) fix: add autocomplete attribute to inputes (#926) feat: enhance get_subscriptions API with admin access (#928) chore: update container to php8.3 (#933) v4_4_0 Miguel Ribeiro 2025-10-12 15:16:29 +02:00
  • 34bc004f06 Update container to php8.3 (#933) CodeShakingSheep 2025-10-12 07:14:58 -06:00
  • efd292fab3 Enhance get_subscriptions API with admin access (#928) JamesAdams 2025-10-12 13:02:25 +02:00
  • b99a07cc5c add autocomplete attribute for inputs (#926) Dmitry 2025-10-12 13:52:10 +03:00
  • 75c94ad15c add support for mattermost notifications (#923) Dani Bento 2025-10-12 11:42:39 +01:00
  • 98eeda70fb add openrouter endpoint (#922) aurilly 2025-10-12 03:36:11 -07:00
  • 75dd3a8cb7 chore(main): release 4.3.0 (#920) v4.3.0 github-actions[bot] 2025-09-15 19:34:21 +02:00
  • 852cb485a6 feat: add health endpoint and healthcheck to container (#919) Miguel Ribeiro 2025-09-15 19:30:37 +02:00
  • 9cfab973f5 feat: add health endpoint and healthcheck to container v4_3_0 Miguel Ribeiro 2025-09-15 19:24:40 +02:00
  • 20d6f8dbee Add Dockerfile HEALTHCHECK command and basic healthcheck reply (#918) Gilad Peleg 2025-09-15 18:41:41 +03:00
  • 2727f7b061 chore(main): release 4.2.0 (#917) v4.2.0 github-actions[bot] 2025-09-14 16:48:48 +02:00
  • 27ac805141 feat: make container shutdown instant & graceful Miguel Ribeiro 2025-09-14 16:46:42 +02:00
  • f2c567617f Merge branch 'main' into v4_2_0 v4_2_0 Miguel Ribeiro 2025-09-14 16:38:16 +02:00
  • c9696ff274 Fix gemini parsing issue (#909) Luke Garrigan 2025-09-14 15:37:13 +01:00