diff --git a/CHANGELOG.md b/CHANGELOG.md index 53cb335cb..a98d936ba 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,59 @@ # Changelog +## [1.40.0] — 2026-10-04 + +Back up the encryption key and refuse a key that cannot open the data; +several courses and custom categories for medications; custom symptoms; +document reads in the background; sick notes; lab unit refusal and charts +that follow the source priority. + +### Added + +- **Encryption key backup step (migration 0365).** Admin step with key id, + fingerprint and per-platform guidance (`HEALTHLOG_PLATFORM`), an optional + "check my copy" that compares and discards the pasted key, a reminder that + returns when the key changes. +- **Boot key check.** A canary per key id, probed oldest values first across + string and Bytes columns; a proven mismatch answers 503 + `encryption.key_mismatch` everywhere except `/api/health` and + `/api/version`, MCP included, and starts no worker; an unproven result + serves, warns and re-checks. `ENCRYPTION_KEY_CHECK=warn` as a last resort. +- **Medication courses and custom categories (#1024, #1041, migration + 0368).** Several courses per medication; compliance, streak, cadence and + dose history count every course and never the gaps; existing dated + medications become one course each. Own categories as `custom:` with + `categoryLabel`; the runtime category table is now in the schema. +- **Custom symptoms (#981, migration 0369).** Up to eight definitions, events + with a 0 to 10 intensity, a capture kind, one correlation channel per + symptom, a Coach block; gated on the Illness module. +- **Document AI as background runs (#1090, migrations 0366 and 0370).** + Index, summary, suggestions and extraction accept `Prefer: respond-async`; + the lab scan always runs in the background; `GET /api/ai-runs/{id}`. +- **`SICK_NOTE` document kind.** +- **Natural durations (#1101)** in the sleep field. + +### Fixed + +- **Lab unit mismatch (#1094).** A reading in another unit than its marker is + refused (`labs.unit.mismatch`) on every write path; a marker's unit is + locked while it has readings (`biomarkers.unit.locked`). +- **Source priority in series (#1108).** Pulse, HRV and SpO2 series read the + ladder's source per day; unranked types keep every source. +- **Sign-in over plain http (#1097).** Refused with + `auth.session.insecure_transport` before a password, code or challenge is + used; the sign-in page says so first. +- **Chart window (#1102).** Ends at the end of today in the profile time zone. +- **Workouts.** The insight cap survives a delete (migration 0367); a changed + `manual:` resubmit updates the workout and its paragraph. +- **Display.** Clinician decimals in the owner's locale, stated dates east of + UTC+12, archive month grouping, lab list columns without a range, icon + picker touch targets and labels, symptom entry load errors. + +### Changed + +- Quick-entry forms load on demand; the four eager route baselines are + lowered to the new measurements. + ## [1.39.9] — 2026-10-03 Workouts can be logged by hand, the body fat tile opens its own page, and diff --git a/README.md b/README.md index 806f6649d..f5a20e17e 100644 --- a/README.md +++ b/README.md @@ -129,9 +129,9 @@ Actively developed — new releases roughly weekly, issue reports and PRs welcom HealthLog started as something I built for myself. That it has turned into a project other people use, care about and help shape still surprises me, and I am grateful for every part of it. -Thank you to everyone who sent code that shipped: [@TimonBed](https://github.com/TimonBed), [@Antiheld86](https://github.com/Antiheld86), [@BernhardBuckel](https://github.com/BernhardBuckel), [@balajiv113](https://github.com/balajiv113), [@aucun6352](https://github.com/aucun6352), [@mathewcsims](https://github.com/mathewcsims) and [@muhdusama](https://github.com/muhdusama). A special thanks to [@BernhardBuckel](https://github.com/BernhardBuckel), who has been working through the lab screens one careful pull request at a time, with tests and a plan before every change. +Thank you to everyone who sent code that shipped: [@TimonBed](https://github.com/TimonBed), [@Antiheld86](https://github.com/Antiheld86), [@BernhardBuckel](https://github.com/BernhardBuckel), [@balajiv113](https://github.com/balajiv113), [@aucun6352](https://github.com/aucun6352), [@mathewcsims](https://github.com/mathewcsims) and [@muhdusama](https://github.com/muhdusama). A special thanks to [@BernhardBuckel](https://github.com/BernhardBuckel), who has gone far beyond one fix: careful reports with the code paths already traced, pull requests with tests and a plan before every change, and fixes that everyone using HealthLog benefits from, from the lab screens to how charts pick a source and average a day. -Thank you to everyone who opened an issue, asked a question in the discussions or wrote me an email. Most of what got better in the last months started with someone describing what went wrong for them, often with a log, a screenshot and a second try when the first fix was not enough. +Thank you to the people whose reports shaped HealthLog, again and again: [@lutzkind](https://github.com/lutzkind), [@HercoGC](https://github.com/HercoGC), [@mills1975](https://github.com/mills1975), [@sreeramachandramurthy](https://github.com/sreeramachandramurthy), [@CritLoren](https://github.com/CritLoren), [@mbreitkreuz](https://github.com/mbreitkreuz), [@k-nacion](https://github.com/k-nacion), [@NebuPookins](https://github.com/NebuPookins), [@Nazza01](https://github.com/Nazza01), [@Cnote43](https://github.com/Cnote43) and [@juliaanvaneijndt](https://github.com/juliaanvaneijndt). And to everyone else who opened an issue, asked a question in the discussions or wrote me an email. Most of what got better started with someone describing what went wrong for them, often with a log, a screenshot and a second try when the first fix was not enough. And thank you to everyone who supported the project with a coffee or by buying the iPhone app. I don't name anyone here, but I read every message that comes with it. It pays for the servers and the Apple developer account, and it tells me that HealthLog is worth the evenings. diff --git a/docs/api/openapi.yaml b/docs/api/openapi.yaml index 25431a0bd..8b11dbff7 100644 --- a/docs/api/openapi.yaml +++ b/docs/api/openapi.yaml @@ -1,7 +1,7 @@ openapi: 3.1.0 info: title: HealthLog API - version: 1.39.9 + version: 1.40.0 description: >- Self-hosted personal-health-tracking PWA — public API surface for the iOS native client and external ingest. diff --git a/package.json b/package.json index 8f2a1b5f0..74f0243db 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "healthlog", - "version": "1.39.9", + "version": "1.40.0", "description": "Self-hosted personal-health-tracking PWA with Withings integration, AI insights, and doctor-report PDF export.", "license": "PolyForm-Noncommercial-1.0.0", "homepage": "https://healthlog.dev", diff --git a/public/sw.js b/public/sw.js index 12e07572b..32351a83e 100644 --- a/public/sw.js +++ b/public/sw.js @@ -36,7 +36,7 @@ try { // v1.4.38.4 → v1.4.42. Do not hand-edit; bump `package.json` and rebuild. const CACHE_VERSION = (typeof self !== "undefined" && self.__APP_VERSION__) || - /* @sw-version-fallback */ "v1.39.9"; + /* @sw-version-fallback */ "v1.40.0"; const STATIC_CACHE = `healthlog-static-${CACHE_VERSION}`; const PAGE_CACHE = `healthlog-pages-${CACHE_VERSION}`; // v1.18.6 — read-only data cache for a curated allowlist of safe GET `/api/*`