Marc-André Bombeck d18c574e04 chore(release): v1.4.1 — hardening + per-section admin + CI safety nets (#149) ...

CHANGELOG entry covers the three buckets of change between 1.4.0 and
1.4.1: security hardening from the audit pass (moodLog SSRF closed
+ centralised error redaction), citation-accuracy fixes (ESH 2023
label, Saint-Maurice attribution, steps source), and the CI safety
nets (executable Postgres testcontainers + Playwright/axe-core
foundation), plus the structural per-section admin extraction and
the in-tree docs sync. The deferred items from the audit pass land
in docs/ops/v141-followup-issues.md so they're discoverable for the
v1.4.2 cycle without re-running the audit.

package.json bumped 1.4.0 → 1.4.1.

No DB migration. No env-var change required. No API contract
change.

2026-05-08 16:35:05 +02:00

..

api

docs: sync README, AGENTS, CLAUDE, OpenAPI, migration guide for v1.4 (#147)

2026-05-08 16:15:30 +02:00

audit

docs(audit): add 2026-04-26 full-audit plan

2026-04-26 23:22:10 +02:00

migration

docs: sync README, AGENTS, CLAUDE, OpenAPI, migration guide for v1.4 (#147)

2026-05-08 16:15:30 +02:00

ops

chore(release): v1.4.1 — hardening + per-section admin + CI safety nets (#149)

2026-05-08 16:35:05 +02:00

self-hosting

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

doctor-report.md

feat(doctor-report): server-rendered PDF endpoint

2026-05-03 21:52:43 +02:00

ui-guidelines.md

v1.4 foundation: UI guidelines, primitives, AI test fix, autofill hardening (#122)

2026-05-08 12:05:15 +02:00