Marc-André Bombeck
57adfe3117
Merge pnpm/action-setup v6.0.8->v6.0.9 (v1.20.0)
2026-06-22 08:32:25 +02:00
dependabot[bot]
97f34ccde1
chore(deps): bump actions/checkout from 6.0.3 to 7.0.0
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.3 to 7.0.0.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-21 15:52:29 +00:00
dependabot[bot]
e377eba545
chore(deps): bump pnpm/action-setup from 6.0.8 to 6.0.9
...
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup ) from 6.0.8 to 6.0.9.
- [Release notes](https://github.com/pnpm/action-setup/releases )
- [Commits](https://github.com/pnpm/action-setup/compare/0e279bb959325dab635dd2c09392533439d90093...0ebf47130e4866e96fce0953f49152a61190b271 )
---
updated-dependencies:
- dependency-name: pnpm/action-setup
dependency-version: 6.0.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-21 15:52:19 +00:00
Marc-André Bombeck
2b240c5798
chore(deps): bump prettier, undici, lucide-react and two CI actions
...
- prettier 3.8.3 -> 3.8.4 (dev)
- undici 8.3.0 -> 8.4.1
- lucide-react 1.17.0 -> 1.18.0
- docker/metadata-action 6.0.0 -> 6.1.0
- dependabot/fetch-metadata 2.5.0 -> 3.1.0
2026-06-14 21:11:44 +02:00
Marc-André Bombeck
d7bf0df10b
chore(ci): pin the supply chain and surface build provenance
...
Every workflow action is pinned to a commit SHA, dependabot auto-merge
is limited to patch and minor updates behind the now-required status
checks on main, and the audit, Trivy and ESLint gates block instead of
warning. The published image finally carries its build SHA and build
timestamp so the version endpoint can prove which commit is running.
The API-token HMAC key fails closed under 32 characters, compose pins
the database minor and denies privilege escalation, and the changelog
drops working-note references in favour of neutral wording.
2026-06-10 15:05:05 +02:00
dependabot[bot]
b6c4bd6920
chore(deps): bump pnpm/action-setup from 4 to 6 ( #291 )
...
Bumps [pnpm/action-setup](https://github.com/pnpm/action-setup ) from 4 to 6.
- [Release notes](https://github.com/pnpm/action-setup/releases )
- [Commits](https://github.com/pnpm/action-setup/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: pnpm/action-setup
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-07 15:55:08 +00:00
dependabot[bot]
de0689e419
chore(deps): Bump actions/setup-node from 4 to 6 ( #166 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4 to 6.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-14 14:11:01 +02:00
dependabot[bot]
1d3009d9ef
chore(deps): Bump actions/checkout from 4 to 6 ( #161 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-10 16:28:06 +00:00
Marc-André Bombeck
38309932f3
Initial release v1.0.0
...
HealthLog — personal health-tracking PWA with weight, blood pressure,
pulse, mood tracking, medication compliance, Withings integration,
doctor report PDF export, and Dracula-themed UI.
2026-03-10 20:14:33 +01:00
Marc-André Bombeck