Marc-André Bombeck
a6016eac90
chore(release): v1.38.5 — the backup finishes, the dashboard stops scanning
...
Carries the night's audit work: the weekly backup ran out of memory
rather than out of time and now completes, two dashboard reads stopped
scanning the largest tables, six webhook verbs compare a secret behind a
rate limit, three global channel switches actually stop delivery,
thirty-five settings reach the container, four guarded helpers are used
where their naive twins were, and three guards now see what they claim.
2026-09-03 03:37:25 +02:00
Marc-André Bombeck
253bd3175a
chore(release): v1.38.4 — the shared key finds its provider
...
The admin AI key now goes to the API its base URL names, seven code
scanning findings are closed at their source, and the guard that was
meant to hold the image's two dependency pins in step can see scoped
packages for the first time. Two accessibility markers and one audit
read no longer race their own page.
2026-09-02 17:01:06 +02:00
Marc-André Bombeck
397baac818
chore(release): v1.38.3 — delete from the phone, name every source
...
The account-deletion fix landed after v1.38.2 was tagged, so its entry
moves out of that section and into this one where it belongs. Also in
this release: every measurement source carries a display name in all
seven languages, with a test that reads the enums out of the schema.
2026-09-02 12:29:09 +02:00
Marc-André Bombeck
56ded00395
chore(release): v1.38.2 — Anthropic on current models, briefing in your language
...
No assistant prefill on Anthropic JSON calls, Claude 5 and Fable count as
vision-capable, the briefing cache carries its language and is never
served to a reader of another one, and job paths resolve a missing
account language to the instance default.
2026-09-02 11:10:35 +02:00
Marc-André Bombeck
c462d9a282
chore(release): v1.38.1 — push readings in, see the range at a glance
...
A measurement ingest token for readings from your own hardware, a
reference-range bar beside every lab reading, lab OCR working with a
GPT-5 model, an impossible reference window no longer written to the
record, and the image build kept intact across the Prisma adapter bump.
Dependency updates ride along.
2026-09-01 20:33:30 +02:00
Marc-André Bombeck
b1d6765790
Merge pull request #875 from MBombeck/dependabot/npm_and_yarn/vitejs/plugin-react-6.1.0
...
chore(deps-dev): bump @vitejs/plugin-react from 6.0.4 to 6.1.0
2026-08-30 22:24:11 +02:00
Marc-André Bombeck
78921399fb
Merge pull request #877 from MBombeck/dependabot/npm_and_yarn/radix-ui-1.6.7
...
chore(deps): bump radix-ui from 1.6.2 to 1.6.7
2026-08-30 22:07:32 +02:00
Marc-André Bombeck
e7d40e22b0
Merge pull request #876 from MBombeck/dependabot/npm_and_yarn/lucide-react-1.34.0
...
chore(deps): bump lucide-react from 1.27.0 to 1.34.0
2026-08-30 22:05:58 +02:00
Marc-André Bombeck
68f33dad5f
Merge pull request #874 from MBombeck/dependabot/npm_and_yarn/next/bundle-analyzer-16.3.3
...
chore(deps-dev): bump @next/bundle-analyzer from 16.3.1 to 16.3.3
2026-08-30 22:00:18 +02:00
Marc-André Bombeck
0be1663989
Merge pull request #873 from MBombeck/dependabot/npm_and_yarn/hookform/resolvers-5.9.1
...
chore(deps): bump @hookform/resolvers from 5.4.0 to 5.9.1
2026-08-30 21:58:27 +02:00
dependabot[bot]
c532f60c57
chore(deps): bump radix-ui from 1.6.2 to 1.6.7
...
Bumps [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui ) from 1.6.2 to 1.6.7.
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md )
- [Commits](https://github.com/radix-ui/primitives/commits/1.6.7/packages/react/radix-ui )
---
updated-dependencies:
- dependency-name: radix-ui
dependency-version: 1.6.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-30 19:17:23 +00:00
dependabot[bot]
07b32617d2
chore(deps): bump lucide-react from 1.27.0 to 1.34.0
...
Bumps [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react ) from 1.27.0 to 1.34.0.
- [Release notes](https://github.com/lucide-icons/lucide/releases )
- [Commits](https://github.com/lucide-icons/lucide/commits/1.34.0/packages/lucide-react )
---
updated-dependencies:
- dependency-name: lucide-react
dependency-version: 1.34.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-30 19:02:53 +00:00
dependabot[bot]
098cc9d5d4
chore(deps-dev): bump @vitejs/plugin-react from 6.0.4 to 6.1.0
...
Bumps [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react ) from 6.0.4 to 6.1.0.
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases )
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.0/packages/plugin-react )
---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
dependency-version: 6.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-30 19:02:16 +00:00
dependabot[bot]
5898742fa3
chore(deps-dev): bump @next/bundle-analyzer from 16.3.1 to 16.3.3
...
Bumps [@next/bundle-analyzer](https://github.com/vercel/next.js/tree/HEAD/packages/next-bundle-analyzer ) from 16.3.1 to 16.3.3.
- [Release notes](https://github.com/vercel/next.js/releases )
- [Commits](https://github.com/vercel/next.js/commits/v16.3.3/packages/next-bundle-analyzer )
---
updated-dependencies:
- dependency-name: "@next/bundle-analyzer"
dependency-version: 16.3.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-30 19:01:40 +00:00
dependabot[bot]
2e6e133409
chore(deps): bump @hookform/resolvers from 5.4.0 to 5.9.1
...
Bumps [@hookform/resolvers](https://github.com/react-hook-form/resolvers ) from 5.4.0 to 5.9.1.
- [Release notes](https://github.com/react-hook-form/resolvers/releases )
- [Commits](https://github.com/react-hook-form/resolvers/compare/v5.4.0...v5.9.1 )
---
updated-dependencies:
- dependency-name: "@hookform/resolvers"
dependency-version: 5.9.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-30 19:00:56 +00:00
Marc-André Bombeck
9f07a46633
fix: declare pg as the runtime dependency it already was
...
The Dockerfile asserts that the standalone image can resolve pg, because
pg-boss loads it through native Node resolution. That assertion has been
passing on a coincidence: pg sat in devDependencies, and the version our own
entry pinned happened to match the one @prisma/adapter-pg pulled in, so both
names resolved to a single copy in the store and Next's file tracer packed it
whole.
Bumping the adapter to 7.10.0 moves its transitive pg to 8.23.0 while ours
stayed at 8.22.0. The tracer packs only the copy the adapter reaches, the
top-level link points at the other one, and the image fails to build on both
architectures:
Error: Cannot find module '/app/node_modules/pg/lib/index.js'
Move pg into dependencies at ^8.23.0. The lockfile now carries one pg version
instead of two, so the two resolutions cannot drift apart again on the next
adapter release. Carries the adapter bump from #865 , which cannot build alone.
2026-08-30 20:49:46 +02:00
Marc-André Bombeck
eb49580271
Merge pull request #868 from MBombeck/dependabot/npm_and_yarn/zod-openapi-6.0.1
...
chore(deps): bump zod-openapi from 6.0.0 to 6.0.1
2026-08-30 20:47:35 +02:00
Marc-André Bombeck
95a75cd9e0
Merge pull request #862 from MBombeck/dependabot/npm_and_yarn/knip-6.32.3
...
chore(deps-dev): bump knip from 6.32.2 to 6.32.3
2026-08-30 20:47:27 +02:00
Marc-André Bombeck
58de37cf52
Merge pull request #869 from MBombeck/dependabot/npm_and_yarn/simplewebauthn/server-13.3.3
...
chore(deps): bump @simplewebauthn/server from 13.3.2 to 13.3.3
2026-08-30 20:19:17 +02:00
dependabot[bot]
e87d44952c
chore(deps-dev): bump knip from 6.32.2 to 6.32.3
...
Bumps [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip ) from 6.32.2 to 6.32.3.
- [Release notes](https://github.com/webpro-nl/knip/releases )
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.32.3/packages/knip )
---
updated-dependencies:
- dependency-name: knip
dependency-version: 6.32.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-30 18:16:04 +00:00
Marc-André Bombeck
d67115b115
Merge pull request #867 from MBombeck/dependabot/npm_and_yarn/node-rs/argon2-2.1.0
...
chore(deps): bump @node-rs/argon2 from 2.0.2 to 2.1.0
2026-08-30 20:12:57 +02:00
dependabot[bot]
a425cf58bf
chore(deps): bump @simplewebauthn/server from 13.3.2 to 13.3.3
...
Bumps [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server ) from 13.3.2 to 13.3.3.
- [Release notes](https://github.com/MasterKale/SimpleWebAuthn/releases )
- [Changelog](https://github.com/MasterKale/SimpleWebAuthn/blob/master/CHANGELOG.md )
- [Commits](https://github.com/MasterKale/SimpleWebAuthn/commits/v13.3.3/packages/server )
---
updated-dependencies:
- dependency-name: "@simplewebauthn/server"
dependency-version: 13.3.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-30 15:56:00 +00:00
dependabot[bot]
89b630060d
chore(deps): bump zod-openapi from 6.0.0 to 6.0.1
...
Bumps [zod-openapi](https://github.com/samchungy/zod-openapi ) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/samchungy/zod-openapi/releases )
- [Changelog](https://github.com/samchungy/zod-openapi/blob/master/CHANGELOG.md )
- [Commits](https://github.com/samchungy/zod-openapi/compare/zod-openapi@6.0.0...zod-openapi@6.0.1 )
---
updated-dependencies:
- dependency-name: zod-openapi
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-30 15:55:30 +00:00
dependabot[bot]
b16f5f9947
chore(deps): bump @node-rs/argon2 from 2.0.2 to 2.1.0
...
Bumps [@node-rs/argon2](https://github.com/napi-rs/node-rs ) from 2.0.2 to 2.1.0.
- [Release notes](https://github.com/napi-rs/node-rs/releases )
- [Commits](https://github.com/napi-rs/node-rs/compare/@node-rs/argon2@2.0.2...@node-rs/argon2@2.1.0 )
---
updated-dependencies:
- dependency-name: "@node-rs/argon2"
dependency-version: 2.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-30 15:55:00 +00:00
Marc-André Bombeck
f71b0142a8
chore(release): v1.38.0 — the score works with the record you keep
...
Three areas of health become a recommendation rather than a gate. A one
or two area record now scores, the card says what the number rests on,
and refusal narrows to the one honest case: nothing scoreable yet.
Carries the composition notice, the reference-citation guard that keeps
invented targets out, @TimonBed's OAuth callback warning, and the fix
for a geometry check that had never measured in CI.
2026-08-30 17:54:02 +02:00
Marc-André Bombeck
921e0bc81f
chore(release): v1.37.33 — a community day
...
A contributor's first code fix, a self-hoster's Tailscale recipe turned
into documentation on both doc sites, the repeating admin geo notice
anchored to configuration state, the notification HTML stripper made
structural, and the code-scanning backlog triaged to zero untreated
findings.
2026-08-29 19:46:56 +02:00
Marc-André Bombeck
4f77abc157
chore(release): v1.37.32 — Korean joins as a seventh interface language
...
Integrates @aucun6352's Korean locale (PR #839 ): the full catalog, the
NFC recompose in the shared fold, the Hangul lab-name normaliser, the
tilde range separator, and the officially published Korean PHQ-9, GAD-7
and WHO-5 wording. Resolves the CHANGELOG and OpenAPI conflicts against
the current trunk and regenerates the spec. Raises the aggregate bundle
budget to 3700 KB gz for the seventh message catalog, with the reasoning
recorded next to the value.
The contributor's three commits are preserved with their authorship.
2026-08-28 22:09:26 +02:00
Marc-André Bombeck
a0bbf0bf46
chore(release): v1.37.31 — the retry ledger gets an operator's window
2026-08-27 11:27:07 +02:00
Marc-André Bombeck
96d6f64ee6
chore(release): v1.37.30 — the operator provider may cross into its own network
2026-08-27 08:49:49 +02:00
Marc-André Bombeck
14b8b5ac27
chore(release): v1.37.29 — the range tabs say days because they are days
2026-08-26 18:00:12 +02:00
Marc-André Bombeck
7a4e09bb4c
chore(release): v1.37.28 — the parts of a shared record nobody could see
2026-08-24 02:58:23 +02:00
Marc-André Bombeck
5803d16e7d
chore(release): v1.37.27 — the checks that were green because they were not checking
2026-08-23 19:44:01 +02:00
Marc-André Bombeck
b9fe29c066
Bump knip from 6.16.1 to 6.32.2
...
The newer resolver tracks each re-export as its own reference site, so a
barrel line that nothing imports is now reported instead of being counted
as used whenever the underlying symbol was used anywhere. The gate goes
from zero findings to 206 on unchanged code.
2026-08-23 19:11:12 +02:00
dependabot[bot]
8ecf7e5595
Bump @napi-rs/canvas from 1.0.2 to 1.0.7 ( #836 )
...
Bumps [@napi-rs/canvas](https://github.com/Brooooooklyn/canvas ) from 1.0.2 to 1.0.7.
- [Release notes](https://github.com/Brooooooklyn/canvas/releases )
- [Changelog](https://github.com/Brooooooklyn/canvas/blob/main/CHANGELOG.md )
- [Commits](https://github.com/Brooooooklyn/canvas/compare/v1.0.2...v1.0.7 )
---
updated-dependencies:
- dependency-name: "@napi-rs/canvas"
dependency-version: 1.0.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-23 18:55:24 +02:00
dependabot[bot]
b217bb2618
Bump @next/bundle-analyzer from 16.2.12 to 16.3.1 ( #834 )
...
Bumps [@next/bundle-analyzer](https://github.com/vercel/next.js/tree/HEAD/packages/next-bundle-analyzer ) from 16.2.12 to 16.3.1.
- [Release notes](https://github.com/vercel/next.js/releases )
- [Commits](https://github.com/vercel/next.js/commits/v16.3.1/packages/next-bundle-analyzer )
---
updated-dependencies:
- dependency-name: "@next/bundle-analyzer"
dependency-version: 16.3.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-23 18:36:00 +02:00
dependabot[bot]
ece7253a42
Bump @modelcontextprotocol/sdk from 1.29.0 to 1.30.0 ( #831 )
...
Bumps [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk ) from 1.29.0 to 1.30.0.
- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases )
- [Commits](https://github.com/modelcontextprotocol/typescript-sdk/compare/v1.29.0...1.30.0 )
---
updated-dependencies:
- dependency-name: "@modelcontextprotocol/sdk"
dependency-version: 1.30.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-23 18:29:10 +02:00
Marc-André Bombeck
fed37829e2
chore(release): v1.37.26 — the app reads what you wrote, in every language it offers
2026-08-23 15:35:33 +02:00
Marc-André Bombeck
590911ca72
chore(release): v1.37.25 — the Coach stops answering with numbers it cannot check
2026-08-22 16:49:04 +02:00
Marc-André Bombeck
08fd7c208f
Merge pull request #762 from MBombeck/dependabot/npm_and_yarn/playwright/test-1.62.1
...
Bump @playwright/test from 1.60.0 to 1.62.1
2026-08-16 20:11:17 +02:00
Marc-André Bombeck
2435c9cefe
Merge pull request #760 from MBombeck/dependabot/npm_and_yarn/pg-boss-12.27.0
...
Bump pg-boss from 12.26.0 to 12.27.0
2026-08-16 20:10:37 +02:00
dependabot[bot]
552f11c21f
Bump @playwright/test from 1.60.0 to 1.62.1
...
Bumps [@playwright/test](https://github.com/microsoft/playwright ) from 1.60.0 to 1.62.1.
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.60.0...v1.62.1 )
---
updated-dependencies:
- dependency-name: "@playwright/test"
dependency-version: 1.62.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-16 17:27:52 +00:00
dependabot[bot]
c9a3132893
Bump testcontainers from 12.0.3 to 12.1.0
...
Bumps [testcontainers](https://github.com/testcontainers/testcontainers-node ) from 12.0.3 to 12.1.0.
- [Release notes](https://github.com/testcontainers/testcontainers-node/releases )
- [Commits](https://github.com/testcontainers/testcontainers-node/compare/v12.0.3...v12.1.0 )
---
updated-dependencies:
- dependency-name: testcontainers
dependency-version: 12.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-16 17:27:38 +00:00
Marc-André Bombeck
50e4138ed5
Merge pull request #761 from MBombeck/dependabot/npm_and_yarn/testcontainers/postgresql-12.1.0
...
Bump @testcontainers/postgresql from 12.0.3 to 12.1.0
2026-08-16 19:25:17 +02:00
dependabot[bot]
73c3eff294
Bump @testcontainers/postgresql from 12.0.3 to 12.1.0
...
Bumps [@testcontainers/postgresql](https://github.com/testcontainers/testcontainers-node ) from 12.0.3 to 12.1.0.
- [Release notes](https://github.com/testcontainers/testcontainers-node/releases )
- [Commits](https://github.com/testcontainers/testcontainers-node/compare/v12.0.3...v12.1.0 )
---
updated-dependencies:
- dependency-name: "@testcontainers/postgresql"
dependency-version: 12.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-16 16:41:09 +00:00
dependabot[bot]
238d63f3b9
Bump pg-boss from 12.26.0 to 12.27.0
...
Bumps [pg-boss](https://github.com/timgit/pg-boss ) from 12.26.0 to 12.27.0.
- [Release notes](https://github.com/timgit/pg-boss/releases )
- [Commits](https://github.com/timgit/pg-boss/compare/12.26.0...12.27.0 )
---
updated-dependencies:
- dependency-name: pg-boss
dependency-version: 12.27.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-16 16:41:07 +00:00
dependabot[bot]
cc670633ff
Bump prettier from 3.9.1 to 3.9.6
...
Bumps [prettier](https://github.com/prettier/prettier ) from 3.9.1 to 3.9.6.
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/3.9.1...3.9.6 )
---
updated-dependencies:
- dependency-name: prettier
dependency-version: 3.9.6
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-16 16:41:05 +00:00
Marc-André Bombeck
23278318ef
chore(release): v1.37.24 — the card stops waiting for sleep that never comes
2026-08-16 09:33:42 +02:00
Marc-André Bombeck
370a7b3df8
chore(release): v1.37.23 — postpone reads as an action, not a menu row
2026-08-15 19:29:40 +02:00
Marc-André Bombeck
1a4cff11d2
chore(release): v1.37.22 — two deferred audit findings, closed
2026-08-15 00:36:30 +02:00
Marc-André Bombeck
548e94cc75
chore(release): v1.37.21 — every intake path resolves a dose the same way
2026-08-14 18:42:50 +02:00