 Marc-André Bombeck
|
348d9e0739
|
Merge pull request #946 from MBombeck/release/v1.38.15
Release v1.38.15
|
2026-09-10 08:21:29 +02:00 |
|
|
Marc-André Bombeck
|
297395372b
|
Merge pull request #945 from MBombeck/release/v1.38.14
v1.38.14 — the reported bugs at their class, and a gate that stops crying wolf
|
2026-09-10 03:43:31 +02:00 |
|
|
Marc-André Bombeck
|
1d372df3a0
|
Merge pull request #942 from MBombeck/fix/managed-record-capabilities
v1.38.13 — a guardian sees the controls the routes accept
|
2026-09-09 22:03:41 +02:00 |
|
|
Marc-André Bombeck
|
3f67a78952
|
Merge pull request #941 from MBombeck/ci/trivy-install
Install Trivy from its release, not through apt
|
2026-09-09 20:58:38 +02:00 |
|
|
Marc-André Bombeck
|
925cc59ea5
|
Merge pull request #940 from MBombeck/chore/trivy-findings
v1.38.12 — the scanner findings are cleared
|
2026-09-09 19:38:19 +02:00 |
|
|
Marc-André Bombeck
|
75d3fad04e
|
Merge pull request #935 from MBombeck/dependabot/npm_and_yarn/types/pg-8.23.1
chore(deps-dev): bump @types/pg from 8.20.0 to 8.23.1
|
2026-09-08 21:46:24 +02:00 |
|
|
Marc-André Bombeck
|
5080624925
|
Merge pull request #934 from MBombeck/dependabot/npm_and_yarn/axe-core/playwright-4.13.0
chore(deps-dev): bump @axe-core/playwright from 4.12.1 to 4.13.0
|
2026-09-08 21:44:50 +02:00 |
|
|
Marc-André Bombeck
|
13a9c6576b
|
Merge pull request #932 from MBombeck/dependabot/npm_and_yarn/lefthook-2.1.12
chore(deps-dev): bump lefthook from 2.1.10 to 2.1.12
|
2026-09-08 21:43:15 +02:00 |
|
|
Marc-André Bombeck
|
7a54aae1ca
|
Merge pull request #931 from MBombeck/dependabot/npm_and_yarn/jose-6.2.10
chore(deps): bump jose from 6.2.3 to 6.2.10
|
2026-09-08 21:41:41 +02:00 |
|
|
Marc-André Bombeck
|
c2bd573c99
|
Merge pull request #937 from MBombeck/release/v1.38.11
v1.38.11 — sign out everywhere means everywhere
|
2026-09-08 21:06:06 +02:00 |
|
|
Marc-André Bombeck
|
a262cf7bb1
|
Merge pull request #930 from MBombeck/release/v1.38.10
v1.38.10 — the off-host backup streams, the rotated token sunsets
|
2026-09-06 16:28:46 +02:00 |
|
|
Marc-André Bombeck
|
fe71c9bf6b
|
Merge pull request #929 from MBombeck/fix/rotation-sunset
fix(auth): give the rotated access token a fifteen-second sunset
|
2026-09-06 16:01:17 +02:00 |
|
|
Marc-André Bombeck
|
48fa96d4b6
|
Merge pull request #927 from MBombeck/fix/offhost-backup-streaming
fix(backup): stream the off-host copy so it fits a small container
|
2026-09-06 14:25:19 +02:00 |
|
|
Marc-André Bombeck
|
040cc6b767
|
Merge pull request #928 from MBombeck/docs/credit-1389-reporters
docs(changelog): credit the two reporters behind v1.38.9
|
2026-09-05 20:24:58 +02:00 |
|
|
Marc-André Bombeck
|
1cd398897e
|
Merge pull request #926 from MBombeck/release/v1.38.9
v1.38.9 — date order everywhere, plain-HTTP writes, gateway errors named
|
2026-09-05 18:56:12 +02:00 |
|
|
Marc-André Bombeck
|
5694e25e68
|
Merge pull request #924 from MBombeck/fix/gateway-error-surfacing
fix(ai): say what the gateway actually answered instead of "empty content"
|
2026-09-05 18:17:42 +02:00 |
|
|
Marc-André Bombeck
|
d4ee3480f1
|
Merge pull request #925 from MBombeck/fix/date-format-everywhere
fix(format): carry the date-order preference to every numeric date
|
2026-09-05 18:16:24 +02:00 |
|
|
Marc-André Bombeck
|
0913e8f2b7
|
Merge pull request #923 from MBombeck/fix/upload-https-hint
fix: writes and uploads work again on a plain-HTTP self-host
|
2026-09-05 16:48:04 +02:00 |
|
|
Marc-André Bombeck
|
295d70988d
|
Merge pull request #921 from MBombeck/release/v1.38.8
v1.38.8 — the HRV tile for ring and strap accounts, and a token ceiling
|
2026-09-03 21:28:44 +02:00 |
|
|
Marc-André Bombeck
|
c0cbe10033
|
Merge pull request #899 from Antiheld86/fix/dashboard-hrv-rmssd-fallback
Fix/dashboard hrv rmssd fallback
|
2026-09-03 21:01:25 +02:00 |
|
|
Marc-André Bombeck
|
d6d463ff72
|
Merge pull request #893 from Antiheld86/feat/measurement-token-ceiling
Cap how many live measurement tokens an account may hold
|
2026-09-03 20:35:38 +02:00 |
|
|
Marc-André Bombeck
|
6db18d0b71
|
Merge pull request #920 from MBombeck/fix/backup-heap-budget
fix(backup): bound the blob, not the heap, so the weekly pass runs again
|
2026-09-03 10:31:31 +02:00 |
|
|
Marc-André Bombeck
|
3cf65c2c90
|
Merge pull request #919 from MBombeck/integration/post-1385
v1.38.6 — glucose in mmol/L, backups inside key rotation
|
2026-09-03 08:17:59 +02:00 |
|
|
Marc-André Bombeck
|
26f01ad746
|
Merge pull request #912 from MBombeck/fix/strictschemas
fix: refuse an unrecognised request field where the caller can act on it
|
2026-09-03 06:34:47 +02:00 |
|
|
Marc-André Bombeck
|
daaa8e17b2
|
Merge pull request #917 from MBombeck/test/settle-background-tasks
test: settle detached background work before a test file tears down
|
2026-09-03 06:34:39 +02:00 |
|
|
Marc-André Bombeck
|
fc1ebeae9e
|
Merge pull request #911 from MBombeck/fix/colaudit
fix(audit): teach the column sweep to tell a filter from a write
|
2026-09-03 05:47:37 +02:00 |
|
|
Marc-André Bombeck
|
006db19bee
|
Merge pull request #910 from MBombeck/chore/advisory-floors-1385
chore(deps): clear the advisory list and drop an unused 340 MB dependency
|
2026-09-03 05:47:30 +02:00 |
|
|
Marc-André Bombeck
|
1e4b30c417
|
Merge pull request #909 from MBombeck/integration/night-audit
chore(release): v1.38.5 — the backup finishes, the dashboard stops scanning
|
2026-09-03 04:00:46 +02:00 |
|
|
Marc-André Bombeck
|
f6a45ca5c5
|
Merge pull request #901 from MBombeck/perf/dashboard-seq-scans
perf(dashboard): stop scanning the two largest tables on every load
|
2026-09-03 03:15:58 +02:00 |
|
|
Marc-André Bombeck
|
6a733c9272
|
Merge pull request #905 from MBombeck/chore/advisory-floors-0903
chore(security): raise two advisory floors that went stale overnight
|
2026-09-03 02:32:34 +02:00 |
|
|
Marc-André Bombeck
|
214b268b41
|
Merge pull request #898 from MBombeck/release/v1.38.4
chore(release): v1.38.4 — the shared key finds its provider
|
2026-09-02 17:24:10 +02:00 |
|
|
Marc-André Bombeck
|
a0f2e0d260
|
Merge pull request #894 from MBombeck/chore/scanning-sweep
chore(security): close seven scanning alerts and the guard that hid one
|
2026-09-02 17:00:26 +02:00 |
|
|
Marc-André Bombeck
|
15ded13b79
|
Merge pull request #896 from MBombeck/test/a11y-visible-locators
test(a11y): match only the visible copy of a painted marker
|
2026-09-02 16:41:57 +02:00 |
|
|
Marc-André Bombeck
|
0e605b0698
|
Merge pull request #897 from MBombeck/fix/admin-provider-host
fix(ai): send the admin key to the provider its base URL names
|
2026-09-02 16:34:56 +02:00 |
|
|
Marc-André Bombeck
|
a9055c96a4
|
Merge pull request #895 from MBombeck/docs/readme-thanks
docs: say thank you where people can see it
|
2026-09-02 16:14:57 +02:00 |
|
|
Marc-André Bombeck
|
c2ea07b0bc
|
Merge pull request #891 from MBombeck/test/sharing-fence-flake
test(sharing): wait for the refusal audit row instead of guessing
|
2026-09-02 15:25:15 +02:00 |
|
|
Marc-André Bombeck
|
1de8634625
|
Merge pull request #890 from MBombeck/release/v1.38.3
chore(release): v1.38.3 — delete from the phone, name every source
|
2026-09-02 15:24:46 +02:00 |
|
|
Marc-André Bombeck
|
71a6dd0e2a
|
Merge pull request #889 from MBombeck/fix/source-priority-labels
fix(i18n): name every measurement source instead of showing its enum
|
2026-09-02 12:28:06 +02:00 |
|
|
Marc-André Bombeck
|
53689ee99e
|
Merge pull request #888 from MBombeck/fix/account-delete-bearer-mfa
fix(auth): let the app delete an account that has a second factor
|
2026-09-02 12:08:20 +02:00 |
|
|
Marc-André Bombeck
|
72117104d5
|
Merge pull request #887 from MBombeck/release/v1.38.2
chore(release): v1.38.2 — Anthropic on current models, briefing in your language
|
2026-09-02 11:33:55 +02:00 |
|
|
Marc-André Bombeck
|
ad0a055fdc
|
Merge pull request #886 from MBombeck/fix/briefing-locale
fix: never serve the briefing in another language than the reader's
|
2026-09-02 11:09:23 +02:00 |
|
|
Marc-André Bombeck
|
718cc3568f
|
Merge pull request #885 from MBombeck/fix/anthropic-no-prefill
fix(ai): no assistant prefill on Anthropic, Claude 5 counts as vision-capable
|
2026-09-02 10:51:25 +02:00 |
|
|
Marc-André Bombeck
|
d5cf82fb6e
|
Merge pull request #884 from MBombeck/release/v1.38.1
chore(release): v1.38.1 — push readings in, see the range at a glance
|
2026-09-01 21:26:13 +02:00 |
|
|
Marc-André Bombeck
|
8016d375c6
|
Merge pull request #880 from TimonBed/lab-visual-improvement
Improve lab range and trend visual alignment
|
2026-09-01 19:06:09 +02:00 |
|
|
Marc-André Bombeck
|
1cc5779282
|
Merge pull request #883 from MBombeck/docs/knip-triage-current
Say which knip entry is kept on purpose, and re-measure the count
|
2026-08-31 21:43:05 +02:00 |
|
|
Marc-André Bombeck
|
e6751f0f0c
|
Merge pull request #882 from MBombeck/fix/transposed-reference-window-v2
Drop a reference window whose floor sits above its ceiling
|
2026-08-31 20:35:14 +02:00 |
|
|
Marc-André Bombeck
|
a852860654
|
Merge pull request #881 from Antiheld86/feat/measurements-write-scope
Feat/measurements write scope
|
2026-08-31 16:03:44 +02:00 |
|
|
Marc-André Bombeck
|
4308114c5b
|
Merge pull request #879 from MBombeck/fix/lab-outlier-range-assertion
test(labs): assert the outlier's distance from the edge, not one string
|
2026-08-31 00:22:15 +02:00 |
|
|
Marc-André Bombeck
|
7cca0a0710
|
Merge pull request #860 from TimonBed/feat/labs-ocr-openai-fix
rework of range bar ind lab list
|
2026-08-31 00:04:14 +02:00 |
|
|
Marc-André Bombeck
|
b1d6765790
|
Merge pull request #875 from MBombeck/dependabot/npm_and_yarn/vitejs/plugin-react-6.1.0
chore(deps-dev): bump @vitejs/plugin-react from 6.0.4 to 6.1.0
|
2026-08-30 22:24:11 +02:00 |
|
|
Marc-André Bombeck
|
78921399fb
|
Merge pull request #877 from MBombeck/dependabot/npm_and_yarn/radix-ui-1.6.7
chore(deps): bump radix-ui from 1.6.2 to 1.6.7
|
2026-08-30 22:07:32 +02:00 |
|
|
Marc-André Bombeck
|
e7d40e22b0
|
Merge pull request #876 from MBombeck/dependabot/npm_and_yarn/lucide-react-1.34.0
chore(deps): bump lucide-react from 1.27.0 to 1.34.0
|
2026-08-30 22:05:58 +02:00 |
|
|
Marc-André Bombeck
|
68f33dad5f
|
Merge pull request #874 from MBombeck/dependabot/npm_and_yarn/next/bundle-analyzer-16.3.3
chore(deps-dev): bump @next/bundle-analyzer from 16.3.1 to 16.3.3
|
2026-08-30 22:00:18 +02:00 |
|
|
Marc-André Bombeck
|
0be1663989
|
Merge pull request #873 from MBombeck/dependabot/npm_and_yarn/hookform/resolvers-5.9.1
chore(deps): bump @hookform/resolvers from 5.4.0 to 5.9.1
|
2026-08-30 21:58:27 +02:00 |
|
|
Marc-André Bombeck
|
a4b2a1541d
|
Merge pull request #872 from MBombeck/fix/pg-runtime-dependency
fix: declare pg as the runtime dependency it already was
|
2026-08-30 21:57:26 +02:00 |
|
|
Marc-André Bombeck
|
b4c18d131a
|
Merge pull request #871 from MBombeck/fix/codeql-action-4.37.9
ci: move every codeql-action pin to v4.37.9 in one commit
|
2026-08-30 20:50:25 +02:00 |
|
|
Marc-André Bombeck
|
eb49580271
|
Merge pull request #868 from MBombeck/dependabot/npm_and_yarn/zod-openapi-6.0.1
chore(deps): bump zod-openapi from 6.0.0 to 6.0.1
|
2026-08-30 20:47:35 +02:00 |
|
|
Marc-André Bombeck
|
95a75cd9e0
|
Merge pull request #862 from MBombeck/dependabot/npm_and_yarn/knip-6.32.3
chore(deps-dev): bump knip from 6.32.2 to 6.32.3
|
2026-08-30 20:47:27 +02:00 |
|
|
Marc-André Bombeck
|
58de37cf52
|
Merge pull request #869 from MBombeck/dependabot/npm_and_yarn/simplewebauthn/server-13.3.3
chore(deps): bump @simplewebauthn/server from 13.3.2 to 13.3.3
|
2026-08-30 20:19:17 +02:00 |
|
|
Marc-André Bombeck
|
d67115b115
|
Merge pull request #867 from MBombeck/dependabot/npm_and_yarn/node-rs/argon2-2.1.0
chore(deps): bump @node-rs/argon2 from 2.0.2 to 2.1.0
|
2026-08-30 20:12:57 +02:00 |
|
|
Marc-André Bombeck
|
2326ca585b
|
Merge pull request #861 from TimonBed/feat/openai-ocr-only
fix: fixes ocr for newer open ai models
|
2026-08-30 20:02:24 +02:00 |
|
|
Marc-André Bombeck
|
fe0c248d5c
|
Merge pull request #864 from MBombeck/release/v1.38.0
chore(release): v1.38.0 — the score works with the record you keep
|
2026-08-30 18:50:21 +02:00 |
|
|
Marc-André Bombeck
|
28af7c13d3
|
Merge pull request #859 from MBombeck/feat/health-score-target-guards
feat: pin the rule that keeps invented targets dead
|
2026-08-30 17:50:57 +02:00 |
|
|
Marc-André Bombeck
|
a2a743c9e1
|
Merge pull request #858 from MBombeck/feat/health-score-composition-notice
feat: the score says when a pillar stopped counting
|
2026-08-30 16:42:42 +02:00 |
|
|
Marc-André Bombeck
|
58701706db
|
Merge pull request #857 from MBombeck/fix/geometry-guard-must-measure
fix: the geometry guard has never measured in CI
|
2026-08-30 16:42:27 +02:00 |
|
|
Marc-André Bombeck
|
624432b3fe
|
Merge pull request #855 from TimonBed/fix/withings-dev-redirect-uri
Shows warning for misconfigured callback urls
|
2026-08-30 15:59:17 +02:00 |
|
|
Marc-André Bombeck
|
319a75b02f
|
Merge pull request #856 from MBombeck/feat/health-score-basis-surfaces
feat: the score says how much of the record it rests on
|
2026-08-30 15:40:09 +02:00 |
|
|
Marc-André Bombeck
|
320788a984
|
Merge pull request #854 from MBombeck/feat/health-score-adaptive-eligibility
feat: the health score adapts to the data a person actually has
|
2026-08-30 14:59:29 +02:00 |
|
|
Marc-André Bombeck
|
f0ccd9db38
|
Merge pull request #853 from MBombeck/release/v1.37.33
chore(release): v1.37.33 — a community day
|
2026-08-29 20:03:54 +02:00 |
|
|
Marc-André Bombeck
|
b908d53b5f
|
Merge pull request #852 from MBombeck/fix/scanning-triage-and-geo-notice
fix: scanning triage follow-ups and the repeating geo notice
|
2026-08-29 19:44:49 +02:00 |
|
|
Marc-André Bombeck
|
8c7ae08fe4
|
Merge pull request #850 from MBombeck/docs/tailscale
docs: add Tailscale serve and funnel as a reverse-proxy option
|
2026-08-29 19:02:39 +02:00 |
|
|
Marc-André Bombeck
|
0263540ac1
|
Merge pull request #848 from TimonBed/fix/password-strength-error-color
fix: show short password labels as invalid
|
2026-08-29 18:49:22 +02:00 |
|
|
Marc-André Bombeck
|
5196aff766
|
Merge pull request #846 from MBombeck/fix/restore-perms-trust-proxy
fix: write restored PHI 0o600 and let TRUST_PROXY_HOPS reach the container
|
2026-08-29 18:15:06 +02:00 |
|
|
Marc-André Bombeck
|
9b3c7f088f
|
Merge pull request #845 from MBombeck/docs/truth-audit
docs: truth audit against the current code — correct and prune the operator docs
|
2026-08-29 18:15:03 +02:00 |
|
|
Marc-André Bombeck
|
05732c6632
|
Merge pull request #849 from MBombeck/feat/korean-locale
feat: Korean locale (#839, @aucun6352) — the seventh interface language
|
2026-08-28 22:35:39 +02:00 |
|
|
Marc-André Bombeck
|
7f407797f4
|
Merge pull request #844 from MBombeck/release/v1.37.31
release: v1.37.31
|
2026-08-27 11:45:07 +02:00 |
|
|
Marc-André Bombeck
|
1d7bd82ca8
|
Merge pull request #843 from MBombeck/release/v1.37.30
release: v1.37.30
|
2026-08-27 09:15:44 +02:00 |
|
|
Marc-André Bombeck
|
d489d29cab
|
Merge pull request #842 from MBombeck/fix/openssl-cve-2026-14456
Patch OS packages in the runtime image at build time
|
2026-08-26 19:56:35 +02:00 |
|
|
Marc-André Bombeck
|
898a5a95f3
|
Merge pull request #840 from MBombeck/release/v1.37.29
release: v1.37.29
|
2026-08-26 19:18:37 +02:00 |
|
|
Marc-André Bombeck
|
3ce5411d19
|
Merge pull request #838 from MBombeck/release/v1.37.28
v1.37.28 — the parts of a shared record nobody could see
|
2026-08-24 03:27:56 +02:00 |
|
|
Marc-André Bombeck
|
d290422923
|
Merge pull request #837 from MBombeck/release/v1.37.27
v1.37.27 — the checks that were green because they were not checking
|
2026-08-23 21:17:51 +02:00 |
|
|
Marc-André Bombeck
|
c4544556f7
|
Merge pull request #830 from MBombeck/fix/stale-repo-truths
Point the doctor-report references at the route that exists
|
2026-08-23 16:49:25 +02:00 |
|
|
Marc-André Bombeck
|
46191337fc
|
Merge pull request #829 from MBombeck/release/v1.37.26
v1.37.26 — the app reads what you wrote, in every language it offers
|
2026-08-23 15:54:16 +02:00 |
|
|
Marc-André Bombeck
|
1ae21b5971
|
Merge pull request #828 from MBombeck/feat/retired-routes
Answer a retired route with 410 rather than a bare 404
|
2026-08-23 15:29:10 +02:00 |
|
|
Marc-André Bombeck
|
b52262e27f
|
Merge pull request #827 from MBombeck/fix/locale-matching
Match user-written text in every language the app ships
|
2026-08-23 15:28:41 +02:00 |
|
|
Marc-André Bombeck
|
b76468f455
|
Merge pull request #826 from MBombeck/release/v1.37.25
v1.37.25 — the Coach stops answering with numbers it cannot check
|
2026-08-22 17:06:14 +02:00 |
|
|
Marc-André Bombeck
|
fefda545ae
|
Merge pull request #825 from MBombeck/verify/coach-grounding
Grade the Coach turn that went looking and found nothing
|
2026-08-22 16:38:12 +02:00 |
|
|
Marc-André Bombeck
|
1efac85a68
|
Merge pull request #824 from MBombeck/fix/openapi-meta
Register the schemas that annotated themselves into nothing
|
2026-08-22 16:24:41 +02:00 |
|
|
Marc-André Bombeck
|
4d53241574
|
Merge pull request #823 from MBombeck/docs/openapi-contract
Publish the contract the application actually answers: 262 paths to 410
|
2026-08-22 15:29:27 +02:00 |
|
|
Marc-André Bombeck
|
1c2e6c5c80
|
Merge pull request #822 from MBombeck/work/backup-clinical
Carry the clinical history: ECG strips, efficacy targets, schedule eras
|
2026-08-22 12:23:21 +02:00 |
|
|
Marc-André Bombeck
|
a6c239d952
|
Merge pull request #820 from MBombeck/work/backup-awards
Carry the bests, the badges and the environment days through backup and restore
|
2026-08-22 11:37:24 +02:00 |
|
|
Marc-André Bombeck
|
775efad923
|
Merge pull request #821 from MBombeck/fix/proxy-relative-redirects
Stop redirecting to the address the process bound to
|
2026-08-22 11:14:31 +02:00 |
|
|
Marc-André Bombeck
|
974a90f28f
|
Merge pull request #819 from MBombeck/work/backup-docs
Carry the vault's filing and its staged facts through backup and restore
|
2026-08-22 10:58:28 +02:00 |
|
|
Marc-André Bombeck
|
4d2fc06fe7
|
Merge pull request #818 from MBombeck/work/backup-sensitive
Carry the screener history and the consent record, disaster recovery only
|
2026-08-22 10:16:48 +02:00 |
|
|
Marc-André Bombeck
|
79725a85e9
|
Merge pull request #817 from MBombeck/feat/backup-notification-prefs
Carry per-drug reminder phase timings, and stop claiming the notification preferences could travel
|
2026-08-22 09:34:59 +02:00 |
|
|
Marc-André Bombeck
|
e56b54cf24
|
Merge pull request #816 from MBombeck/feat/backup-mood-taxonomy
Restore an account that grouped its own mood factors
|
2026-08-22 09:16:34 +02:00 |
|
|
Marc-André Bombeck
|
460ed37a2a
|
Merge pull request #815 from MBombeck/feat/backup-medication-stock
Carry medication stock and its ledger through backup and restore
|
2026-08-22 01:15:55 +02:00 |
|
|
Marc-André Bombeck
|
f4e65c827a
|
Merge pull request #814 from MBombeck/feat/backup-coach-memory
Carry the Coach's memory through backup and restore
|
2026-08-22 00:59:10 +02:00 |
|
|
Marc-André Bombeck
|
ad8325f18d
|
Merge pull request #813 from MBombeck/feat/backup-coach-transcript
Carry the Coach transcript through backup and restore
|
2026-08-22 00:41:21 +02:00 |
|
|
Marc-André Bombeck
|
b400e8bb4a
|
Merge pull request #812 from MBombeck/test/portable-restore-refusal-ordering
Pin that a refused restore has not already wiped the account
|
2026-08-22 00:24:26 +02:00 |
|