Marc-André Bombeck
5aa3f3346d
chore(release): v1.40.4
2026-10-05 17:46:26 +02:00
Marc-André Bombeck
25c34b0e7c
chore(release): v1.40.3
2026-10-05 12:53:40 +02:00
Marc-André Bombeck
fd895bfd5f
chore(release): v1.40.2
2026-10-05 08:44:10 +02:00
Marc-André Bombeck
5e5e387fab
chore(release): v1.40.1
2026-10-04 20:55:14 +02:00
Marc-André Bombeck
dc7061634e
Merge pull request #1152 from MBombeck/dependabot/npm_and_yarn/p-limit-7.3.3
...
chore(deps): bump p-limit from 7.3.1 to 7.3.3
2026-10-04 20:52:41 +02:00
Marc-André Bombeck
92b4a9c103
Merge pull request #1149 from MBombeck/dependabot/npm_and_yarn/testcontainers-12.2.0
...
chore(deps-dev): bump testcontainers from 12.1.0 to 12.2.0
2026-10-04 20:52:26 +02:00
Marc-André Bombeck
31b7fd0a45
Merge pull request #1148 from MBombeck/dependabot/npm_and_yarn/zod-openapi-6.0.2
...
chore(deps): bump zod-openapi from 6.0.1 to 6.0.2
2026-10-04 20:52:11 +02:00
Marc-André Bombeck
10e34bcab6
Merge pull request #1150 from MBombeck/dependabot/npm_and_yarn/eslint-config-next-16.3.8
...
chore(deps-dev): bump eslint-config-next from 16.3.6 to 16.3.8
2026-10-04 20:51:56 +02:00
dependabot[bot]
8fd58e9824
chore(deps): bump next from 16.3.6 to 16.3.8
...
Bumps [next](https://github.com/vercel/next.js ) from 16.3.6 to 16.3.8.
- [Release notes](https://github.com/vercel/next.js/releases )
- [Commits](https://github.com/vercel/next.js/compare/v16.3.6...v16.3.8 )
---
updated-dependencies:
- dependency-name: next
dependency-version: 16.3.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-04 17:33:27 +00:00
dependabot[bot]
c064210a34
chore(deps): bump p-limit from 7.3.1 to 7.3.3
...
Bumps [p-limit](https://github.com/sindresorhus/p-limit ) from 7.3.1 to 7.3.3.
- [Release notes](https://github.com/sindresorhus/p-limit/releases )
- [Commits](https://github.com/sindresorhus/p-limit/compare/v7.3.1...v7.3.3 )
---
updated-dependencies:
- dependency-name: p-limit
dependency-version: 7.3.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-04 17:33:00 +00:00
dependabot[bot]
ddb5c6462a
chore(deps-dev): bump eslint-config-next from 16.3.6 to 16.3.8
...
Bumps [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next ) from 16.3.6 to 16.3.8.
- [Release notes](https://github.com/vercel/next.js/releases )
- [Commits](https://github.com/vercel/next.js/commits/v16.3.8/packages/eslint-config-next )
---
updated-dependencies:
- dependency-name: eslint-config-next
dependency-version: 16.3.8
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-04 17:32:08 +00:00
dependabot[bot]
10d5b7334e
chore(deps): bump zod-openapi from 6.0.1 to 6.0.2
...
Bumps [zod-openapi](https://github.com/samchungy/zod-openapi ) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/samchungy/zod-openapi/releases )
- [Changelog](https://github.com/samchungy/zod-openapi/blob/master/CHANGELOG.md )
- [Commits](https://github.com/samchungy/zod-openapi/compare/zod-openapi@6.0.1...zod-openapi@6.0.2 )
---
updated-dependencies:
- dependency-name: zod-openapi
dependency-version: 6.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-04 17:31:50 +00:00
dependabot[bot]
d64cbbaebf
chore(deps-dev): bump testcontainers from 12.1.0 to 12.2.0
...
Bumps [testcontainers](https://github.com/testcontainers/testcontainers-node ) from 12.1.0 to 12.2.0.
- [Release notes](https://github.com/testcontainers/testcontainers-node/releases )
- [Commits](https://github.com/testcontainers/testcontainers-node/compare/v12.1.0...v12.2.0 )
---
updated-dependencies:
- dependency-name: testcontainers
dependency-version: 12.2.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-04 17:31:43 +00:00
Marc-André Bombeck
f685cbe460
chore(release): v1.40.0 — back up the encryption key, medication courses and categories, your own symptoms, document reads in the background
2026-10-04 01:26:37 +02:00
Marc-André Bombeck
e42b3f331f
chore(release): v1.39.9 — log a workout by hand, a page for body fat, and the AI response time everywhere
2026-10-03 00:35:27 +02:00
Marc-André Bombeck
fe9a94c853
chore(release): v1.39.8 — new ECGs from the iPhone get through, resting heart rate by hand, and ranges, decimals and dates as you read them
2026-10-02 00:06:09 +02:00
Marc-André Bombeck
9175aea316
chore(release): v1.39.7 — your units, your day and your phone, everywhere, and backups that keep your settings
2026-10-01 15:34:08 +02:00
Marc-André Bombeck
3e4f431373
chore(release): v1.39.6 — a critical framework fix, a workout token, a lab scan that keeps every reading, and an instant restore preview
2026-10-01 00:48:46 +02:00
Marc-André Bombeck
162ba62752
fix(deps): move next to 16.3.6 and raise the fast-uri, ip-address and dompurify floors
...
The production audit flags a critical advisory against next 16.2.0 to 16.3.5,
fixed in 16.3.6, and newer advisories against the transitive fast-uri (ajv),
ip-address (the MCP SDK's rate limiter) and dompurify (jspdf) copies. Next is
pinned to 16.3.6 rather than the newest patch so the install stays inside the
minimum release age without new exclusions.
2026-09-30 22:12:47 +02:00
Marc-André Bombeck
3f3bb0579a
chore(release): v1.39.5 — a dense heart-rate history within memory, and restores that hold less
2026-09-28 00:55:23 +02:00
Marc-André Bombeck
c2a1522634
Merge pull request #1049 from MBombeck/dependabot/npm_and_yarn/pg-boss-12.34.0
...
build(deps): bump pg-boss from 12.27.0 to 12.34.0
2026-09-27 20:14:27 +02:00
Marc-André Bombeck
1910a6f760
Merge pull request #1047 from MBombeck/dependabot/npm_and_yarn/types/node-26.6.2
...
build(deps-dev): bump @types/node from 26.5.1 to 26.6.2
2026-09-27 20:01:12 +02:00
Marc-André Bombeck
b9af05cf8d
Merge pull request #1046 from MBombeck/dependabot/npm_and_yarn/undici-8.11.2
...
build(deps): bump undici from 8.10.2 to 8.11.2
2026-09-27 19:52:25 +02:00
Marc-André Bombeck
7a21bb6787
Merge pull request #1045 from MBombeck/dependabot/npm_and_yarn/tanstack/react-query-5.103.2
...
build(deps): bump @tanstack/react-query from 5.102.8 to 5.103.2
2026-09-27 19:51:59 +02:00
dependabot[bot]
dfd0f2e6dd
build(deps-dev): bump prettier from 3.9.6 to 3.9.9 ( #1048 )
...
Bumps [prettier](https://github.com/prettier/prettier ) from 3.9.6 to 3.9.9.
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/3.9.6...3.9.9 )
---
updated-dependencies:
- dependency-name: prettier
dependency-version: 3.9.9
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-27 16:35:23 +00:00
dependabot[bot]
891db1753e
build(deps): bump pg-boss from 12.27.0 to 12.34.0
...
Bumps [pg-boss](https://github.com/timgit/pg-boss ) from 12.27.0 to 12.34.0.
- [Release notes](https://github.com/timgit/pg-boss/releases )
- [Commits](https://github.com/timgit/pg-boss/compare/12.27.0...12.34.0 )
---
updated-dependencies:
- dependency-name: pg-boss
dependency-version: 12.34.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-27 15:55:34 +00:00
dependabot[bot]
ddf685e2c9
build(deps-dev): bump @types/node from 26.5.1 to 26.6.2
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 26.5.1 to 26.6.2.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 26.6.2
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-27 15:54:38 +00:00
dependabot[bot]
5a5356fc14
build(deps): bump undici from 8.10.2 to 8.11.2
...
Bumps [undici](https://github.com/nodejs/undici ) from 8.10.2 to 8.11.2.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v8.10.2...v8.11.2 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 8.11.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-27 15:54:10 +00:00
dependabot[bot]
c5ed9e2296
build(deps): bump @tanstack/react-query from 5.102.8 to 5.103.2
...
Bumps [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query ) from 5.102.8 to 5.103.2.
- [Release notes](https://github.com/TanStack/query/releases )
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md )
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.103.2/packages/react-query )
---
updated-dependencies:
- dependency-name: "@tanstack/react-query"
dependency-version: 5.103.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-27 15:53:43 +00:00
Marc-André Bombeck
5ab157a908
chore(release): v1.39.4 — a Coach you can see working, encrypted routes and contacts, and restores that finish on large accounts
2026-09-27 15:12:37 +02:00
Marc-André Bombeck
45bae0013c
chore(release): v1.39.3 — documents from Paperless and Papra, confirmations that hold, the right day everywhere, and backups that delete what they should
2026-09-27 02:12:27 +02:00
Marc-André Bombeck
2c88acc5f7
fix(labs): serve the in-browser OCR engine from this origin
...
Local lab OCR reads a report photo on the device with tesseract.js, whose
defaults load the worker, the WebAssembly core and the language data
from cdn.jsdelivr.net. The production CSP allows workers and fetches only
from this origin, so the engine could not load; where it did load (dev),
the browser of anyone scanning a report contacted a third-party CDN.
The worker, the three LSTM core builds and the deu and eng best_int
language data (about 17 MB) are now copied from pinned packages into
public/tesseract/ at prebuild and predev, and createWorker is pointed at
them with the worker started from its URL rather than a blob. A test
holds the options against the staged file list.
2026-09-26 15:37:13 +02:00
Marc-André Bombeck
bd75c851f1
chore(release): v1.39.2 — document import, body sites, check-ups that stay due, and backups that fit in 1 GB
2026-09-26 11:25:03 +02:00
Marc-André Bombeck
76ca6bbb30
chore(deps): move to SimpleWebAuthn 14 and React 19.3
...
Bump @simplewebauthn/server 13.3.3 -> 14.0.2 and @simplewebauthn/browser
13.3.0 -> 14.0.0, and keep React on an exact pin at 19.3.0 with react-dom
and both type packages moved alongside.
SimpleWebAuthn 14 changes one default the server relied on: the verifier
used to accept every algorithm the library knew (EdDSA, ES256, ES512,
PS256/384/512, RS256/384/512, RS1) and now accepts only the three it
offers. Pass both lists explicitly so a registration that succeeded
before still succeeds, and so the offered list stays EdDSA/ES256/RS256
on a runtime that would otherwise prepend ML-DSA-44. The option JSON of
all four ceremonies, and verification against stored credentials, match
the 13.x snapshots unchanged.
2026-09-25 19:53:47 +02:00
Marc-André Bombeck
a46d0b41c8
chore(release): v1.39.1 — large accounts, restores in the background, and medications kept as a record
2026-09-25 13:12:34 +02:00
Marc-André Bombeck
ecfa837dea
chore(release): v1.39.0 — AI becomes optional, and a switched-off module leaves the whole app
2026-09-24 13:30:44 +02:00
dependabot[bot]
2c640683a7
chore(deps): bump undici from 8.10.0 to 8.10.2 ( #1018 )
...
Bumps [undici](https://github.com/nodejs/undici ) from 8.10.0 to 8.10.2.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v8.10.0...v8.10.2 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 8.10.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-20 19:00:31 +02:00
dependabot[bot]
fd8431ae47
chore(deps-dev): bump eslint-config-next from 16.2.12 to 16.3.5 ( #1015 )
...
Bumps [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next ) from 16.2.12 to 16.3.5.
- [Release notes](https://github.com/vercel/next.js/releases )
- [Commits](https://github.com/vercel/next.js/commits/v16.3.5/packages/eslint-config-next )
---
updated-dependencies:
- dependency-name: eslint-config-next
dependency-version: 16.3.5
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-09-20 18:24:50 +02:00
Marc-André Bombeck
4f31b4b025
chore(release): v1.38.25 — readings that never arrived, and an import that said no
2026-09-20 10:53:24 +02:00
Marc-André Bombeck
5188b28ea6
chore(release): v1.38.24 — Insights loads without the assistant, and the database stays current
2026-09-16 18:27:51 +02:00
Marc-André Bombeck
bf728ff552
Merge pull request #998 from MBombeck/dependabot/npm_and_yarn/types/node-26.5.1
...
chore(deps-dev): bump @types/node from 26.1.1 to 26.5.1
2026-09-16 15:47:54 +02:00
Marc-André Bombeck
c2ec2b76cf
Merge pull request #994 from MBombeck/dependabot/npm_and_yarn/sonner-2.0.8
...
chore(deps): bump sonner from 2.0.7 to 2.0.8
2026-09-16 15:47:26 +02:00
dependabot[bot]
34182cbb4f
chore(deps-dev): bump @types/node from 26.1.1 to 26.5.1
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 26.1.1 to 26.5.1.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 26.5.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-16 13:23:10 +00:00
dependabot[bot]
4ac11c71cb
chore(deps): bump sonner from 2.0.7 to 2.0.8
...
Bumps [sonner](https://github.com/emilkowalski/sonner ) from 2.0.7 to 2.0.8.
- [Release notes](https://github.com/emilkowalski/sonner/releases )
- [Commits](https://github.com/emilkowalski/sonner/compare/v2.0.7...v2.0.8 )
---
updated-dependencies:
- dependency-name: sonner
dependency-version: 2.0.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-16 13:10:36 +00:00
Marc-André Bombeck
629731120a
Merge pull request #997 from MBombeck/dependabot/npm_and_yarn/jose-6.2.12
...
chore(deps): bump jose from 6.2.10 to 6.2.12
2026-09-16 15:09:43 +02:00
Marc-André Bombeck
c33a88b282
Merge pull request #993 from MBombeck/dependabot/npm_and_yarn/napi-rs/canvas-1.0.9
...
chore(deps): bump @napi-rs/canvas from 1.0.7 to 1.0.9
2026-09-16 15:09:20 +02:00
dependabot[bot]
9db3770ea3
chore(deps): bump @napi-rs/canvas from 1.0.7 to 1.0.9
...
Bumps [@napi-rs/canvas](https://github.com/Brooooooklyn/canvas ) from 1.0.7 to 1.0.9.
- [Release notes](https://github.com/Brooooooklyn/canvas/releases )
- [Changelog](https://github.com/Brooooooklyn/canvas/blob/main/CHANGELOG.md )
- [Commits](https://github.com/Brooooooklyn/canvas/compare/v1.0.7...v1.0.9 )
---
updated-dependencies:
- dependency-name: "@napi-rs/canvas"
dependency-version: 1.0.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-16 12:06:47 +00:00
dependabot[bot]
fade5d467e
chore(deps): bump sax from 1.6.0 to 1.6.1
...
Bumps [sax](https://github.com/isaacs/sax-js ) from 1.6.0 to 1.6.1.
- [Commits](https://github.com/isaacs/sax-js/compare/v1.6.0...v1.6.1 )
---
updated-dependencies:
- dependency-name: sax
dependency-version: 1.6.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-16 12:06:47 +00:00
dependabot[bot]
453c1141a7
chore(deps): bump jose from 6.2.10 to 6.2.12
...
Bumps [jose](https://github.com/panva/jose ) from 6.2.10 to 6.2.12.
- [Release notes](https://github.com/panva/jose/releases )
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md )
- [Commits](https://github.com/panva/jose/compare/v6.2.10...v6.2.12 )
---
updated-dependencies:
- dependency-name: jose
dependency-version: 6.2.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-16 11:54:00 +00:00
Marc-André Bombeck
6f562c05ca
Merge pull request #992 from MBombeck/dependabot/npm_and_yarn/nodemailer-10.0.9
...
chore(deps): bump nodemailer from 9.1.1 to 10.0.9
2026-09-16 13:53:51 +02:00