Merge pull request #1227 from MBombeck/release/v1.43.0

Release v1.43.0

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -15,7 +15,7 @@ body:
     id: version
     attributes:
       label: HealthLog version
-      description: Output of `/api/version` or the tag of the GHCR image you're running.
+      description: Settings, About shows it, as does `/api/version`, or the tag of the GHCR image you're running.
       placeholder: "1.4.19"
     validations:
       required: true
@@ -55,11 +55,27 @@ body:
         3. See error
     validations:
       required: true
+  - type: input
+    id: error-id
+    attributes:
+      label: Error ID
+      description: If the failure showed an error ID (eight characters, e.g. `3f9a2c1b`), paste it here. The operator finds the event with it under Admin, App logs.
+      placeholder: "3f9a2c1b"
+  - type: textarea
+    id: support-info
+    attributes:
+      label: Support info / support report
+      description: |
+        Everyone: Settings, About, "Copy support info".
+        Operators: Admin, System status, "Support report", then Copy.
+        Both are redacted (no names, emails, values or tokens); read them before you paste.
+        See https://github.com/MBombeck/HealthLog/blob/main/docs/self-hosting/support.md
+      render: text
   - type: textarea
     id: logs
     attributes:
-      label: Relevant logs / screenshots
-      description: Paste any relevant log output (redact secrets) or attach screenshots. Wide-event logs from `/admin/app-logs` are useful.
+      label: Screenshots / other logs
+      description: Attach screenshots, or paste other log output if you have it. Redact secrets and personal data first.
       render: shell
   - type: input
     id: browser

.github/dependabot.yml

@@ -24,17 +24,6 @@ updates:
           - "patch"
           - "minor"
     ignore:
-      # zod 4.5 made `z.iso.datetime()` require seconds, so a request carrying
-      # `2026-01-01T06:15Z` that passes today would be refused with a 422 on
-      # every route that validates a timestamp, and 4.6 rewrites nullable and
-      # primitive unions in the generated JSON Schema from `anyOf` to `type`
-      # arrays, which reshapes the OpenAPI document and every MCP tool schema.
-      # Both are contract changes for the web client, the iOS app and MCP
-      # callers, not a routine bump, so the move past 4.4 gets its own change
-      # with the timestamp producers audited. Patch releases on 4.4 still
-      # arrive.
-      - dependency-name: "zod"
-        versions: [">=4.5.0"]
       # Next 16.4.0 breaks URL state after history traversal: with a sheet
       # opened through `?doc=`, Back leaves it open, and `[` / `]` sometimes
       # do not move `?day=`. Reproduced in three end-to-end journeys (3 of 40