3711 Commits

Author SHA1 Message Date
shamoon
06b2d5102c
Fix GHSA-59xh-5vwx-4c4q 2026-03-15 17:13:08 -07:00
shamoon
60319c6d37
Fix: prevent stale db filename during workflow actions (#12289) 2026-03-09 19:32:46 -07:00
shamoon
8f311c4b6b
Bump version to 2.20.10 2026-03-04 10:38:14 -08:00
shamoon
f25322600d
Merge branch 'release/v2.20.x' 2026-03-04 10:09:01 -08:00
shamoon
615f27e6fb
Fix: support string coercion in filepath jinja templates (#12244) 2026-03-04 08:32:34 -08:00
shamoon
5b809122b5
Fix: apply ordering after annotating tag document count (#12238) 2026-03-04 00:33:13 -08:00
shamoon
8b8307571a
Fix: enforce path limit for db filename fields (#12235) 2026-03-03 13:19:56 -08:00
shamoon
47f9f642a9
Bump version to 2.20.9 2026-02-28 01:35:26 -08:00
shamoon
c7f83212a3
Enforce on selection_data too 2026-02-28 01:27:40 -08:00
shamoon
b010f65ae7
Fix GHSA-386h-chg4-cfw9 2026-02-28 01:16:53 -08:00
shamoon
35be0850ec
Bump version to 2.20.8 2026-02-21 16:49:52 -08:00
shamoon
1bb4b9b473
More permissions on mail account test endpoint 2026-02-21 16:47:55 -08:00
shamoon
f85094dc2b
Set owner on OAuth mail credentials 2026-02-21 16:37:32 -08:00
shamoon
65ca78e9e7
Security: fix/GHSA-7qqc-wrcw-2fj9 2026-02-21 16:34:33 -08:00
shamoon
e63b62d531
Bump version to 2.20.7 2026-02-16 07:26:59 -08:00
shamoon
afaf39e43a
Fix/GHSA-x395-6h48-wr8v 2026-02-16 00:02:15 -08:00
shamoon
5b45b89d35
Performance fix: use subqueries to improve object retrieval in large installs (#11950) 2026-02-05 08:46:32 -08:00
shamoon
3e41d99a82
Bump version to 2.20.6 2026-01-30 17:59:55 -08:00
shamoon
5cc3c087d9
Security: enforce ownership for permission updates 2026-01-30 13:55:55 -08:00
shamoon
c8c4c7c749
Security: enforce permissions for post_document 2026-01-30 12:14:18 -08:00
shamoon
e4b861d76f
Fix: prevent note deletion outside doc 2026-01-29 13:35:01 -08:00
shamoon
891f4a2faf
Fix: correctly extract all ids for nested tags (#11888) 2026-01-26 09:12:03 -08:00
shamoon
2312314aa7
Performance: improve treenode inefficiencies (#11606) 2026-01-25 21:47:08 -08:00
shamoon
72e8b73108
Fix test 2026-01-25 17:08:15 -08:00
shamoon
5c9ff367e3
Fixhancement: change date calculation for 'this year' to include future documents (#11884) 2026-01-25 16:56:51 -08:00
shamoon
32d04e1fd3
Fix: use correct field id for overrides (#11869) 2026-01-23 15:49:22 -08:00
shamoon
771f3f150a
Bump version to 2.20.5 2026-01-19 09:18:23 -08:00
shamoon
ecfeff5054
Chore: reverse migration order (#11813) 2026-01-18 11:21:35 -08:00
shamoon
742c136773 Fix: use explicit order field for workflow actions (#11781) 2026-01-16 07:39:00 -08:00
shamoon
3618c50b62
Bump version to 2.20.4 2026-01-13 10:01:42 -08:00
shamoon
6f4497185e
Fix merge conflict 2026-01-13 10:01:41 -08:00
shamoon
e816269db5
Fix: recurring workflow to respect latest run time (#11735) 2026-01-13 09:36:53 -08:00
shamoon
d4e60e13bf
Fixhancement: add error handling and retry when opening index (#11731) 2026-01-13 09:36:44 -08:00
shamoon
cb091665e2
Fix: validate cf integer values within PostgreSQL range (#11666) 2026-01-13 09:36:29 -08:00
shamoon
00bb92e3e1
Fix: support ordering by storage path name (#11661) 2026-01-13 09:36:14 -08:00
shamoon
11ec676909
Fix: propagate metadata override created value (#11659) 2026-01-13 09:36:07 -08:00
shamoon
7c457466b7
Security: prevent path traversal in storage paths 2026-01-13 09:29:48 -08:00
shamoon
eca2ba3657
Bump version to 2.20.3 2025-12-18 07:29:56 -08:00
shamoon
220c70b27d
Merge branch 'dev' 2025-12-18 07:29:04 -08:00
github-actions[bot]
ccaebabe0a
New Crowdin translations by GitHub Action (#11596) 2025-12-18 07:21:46 -08:00
shamoon
598540fda0
Chore: mark another test flaky 2025-12-18 07:17:50 -08:00
shamoon
f96a29db5d
Bump version to 2.20.2 2025-12-12 15:10:55 -08:00
shamoon
078cba4bd1
Fix: allow safe <style> tags in SVG uploads (#11593) 2025-12-12 22:01:56 +00:00
shamoon
43e29598b3
Add more allowed SVG attributes to validator 2025-12-12 13:18:38 -08:00
Trenton H
d9a596d67a
Fix: Expanded SVG validation whitelist and additional checks (#11590) 2025-12-12 20:04:04 +00:00
shamoon
a1026f03db
Fix: use request.stream instead of request.content (#11591) 2025-12-12 19:50:14 +00:00
github-actions[bot]
6c8a9b0373
New Crowdin translations by GitHub Action (#11520) 2025-12-12 18:12:29 +00:00
GitHub Actions
7130c0bd06 Auto translate strings 2025-12-12 17:42:19 +00:00
shamoon
d391fdec64
Resolve CodeQL warning 2025-12-12 09:39:56 -08:00
GitHub Actions
4d7aa8e1a2 Auto translate strings 2025-12-12 17:30:36 +00:00