3712 Commits

Author	SHA1	Message	Date
shamoon	5f26c01c6f	Bump version to 2.20.11	2026-03-15 17:16:11 -07:00
shamoon	06b2d5102c	Fix GHSA-59xh-5vwx-4c4q	2026-03-15 17:13:08 -07:00
shamoon	60319c6d37	Fix: prevent stale db filename during workflow actions (#12289)	2026-03-09 19:32:46 -07:00
shamoon	8f311c4b6b	Bump version to 2.20.10	2026-03-04 10:38:14 -08:00
shamoon	f25322600d	Merge branch 'release/v2.20.x'	2026-03-04 10:09:01 -08:00
shamoon	615f27e6fb	Fix: support string coercion in filepath jinja templates (#12244)	2026-03-04 08:32:34 -08:00
shamoon	5b809122b5	Fix: apply ordering after annotating tag document count (#12238)	2026-03-04 00:33:13 -08:00
shamoon	8b8307571a	Fix: enforce path limit for db filename fields (#12235)	2026-03-03 13:19:56 -08:00
shamoon	47f9f642a9	Bump version to 2.20.9	2026-02-28 01:35:26 -08:00
shamoon	c7f83212a3	Enforce on selection_data too	2026-02-28 01:27:40 -08:00
shamoon	b010f65ae7	Fix GHSA-386h-chg4-cfw9	2026-02-28 01:16:53 -08:00
shamoon	35be0850ec	Bump version to 2.20.8	2026-02-21 16:49:52 -08:00
shamoon	1bb4b9b473	More permissions on mail account test endpoint	2026-02-21 16:47:55 -08:00
shamoon	f85094dc2b	Set owner on OAuth mail credentials	2026-02-21 16:37:32 -08:00
shamoon	65ca78e9e7	Security: fix/GHSA-7qqc-wrcw-2fj9	2026-02-21 16:34:33 -08:00
shamoon	e63b62d531	Bump version to 2.20.7	2026-02-16 07:26:59 -08:00
shamoon	afaf39e43a	Fix/GHSA-x395-6h48-wr8v	2026-02-16 00:02:15 -08:00
shamoon	5b45b89d35	Performance fix: use subqueries to improve object retrieval in large installs (#11950)	2026-02-05 08:46:32 -08:00
shamoon	3e41d99a82	Bump version to 2.20.6	2026-01-30 17:59:55 -08:00
shamoon	5cc3c087d9	Security: enforce ownership for permission updates	2026-01-30 13:55:55 -08:00
shamoon	c8c4c7c749	Security: enforce permissions for post_document	2026-01-30 12:14:18 -08:00
shamoon	e4b861d76f	Fix: prevent note deletion outside doc	2026-01-29 13:35:01 -08:00
shamoon	891f4a2faf	Fix: correctly extract all ids for nested tags (#11888)	2026-01-26 09:12:03 -08:00
shamoon	2312314aa7	Performance: improve treenode inefficiencies (#11606)	2026-01-25 21:47:08 -08:00
shamoon	72e8b73108	Fix test	2026-01-25 17:08:15 -08:00
shamoon	5c9ff367e3	Fixhancement: change date calculation for 'this year' to include future documents (#11884)	2026-01-25 16:56:51 -08:00
shamoon	32d04e1fd3	Fix: use correct field id for overrides (#11869)	2026-01-23 15:49:22 -08:00
shamoon	771f3f150a	Bump version to 2.20.5	2026-01-19 09:18:23 -08:00
shamoon	ecfeff5054	Chore: reverse migration order (#11813)	2026-01-18 11:21:35 -08:00
shamoon	742c136773	Fix: use explicit order field for workflow actions (#11781)	2026-01-16 07:39:00 -08:00
shamoon	3618c50b62	Bump version to 2.20.4	2026-01-13 10:01:42 -08:00
shamoon	6f4497185e	Fix merge conflict	2026-01-13 10:01:41 -08:00
shamoon	e816269db5	Fix: recurring workflow to respect latest run time (#11735)	2026-01-13 09:36:53 -08:00
shamoon	d4e60e13bf	Fixhancement: add error handling and retry when opening index (#11731)	2026-01-13 09:36:44 -08:00
shamoon	cb091665e2	Fix: validate cf integer values within PostgreSQL range (#11666)	2026-01-13 09:36:29 -08:00
shamoon	00bb92e3e1	Fix: support ordering by storage path name (#11661)	2026-01-13 09:36:14 -08:00
shamoon	11ec676909	Fix: propagate metadata override created value (#11659)	2026-01-13 09:36:07 -08:00
shamoon	7c457466b7	Security: prevent path traversal in storage paths	2026-01-13 09:29:48 -08:00
shamoon	eca2ba3657	Bump version to 2.20.3	2025-12-18 07:29:56 -08:00
shamoon	220c70b27d	Merge branch 'dev'	2025-12-18 07:29:04 -08:00
github-actions[bot]	ccaebabe0a	New Crowdin translations by GitHub Action (#11596)	2025-12-18 07:21:46 -08:00
shamoon	598540fda0	Chore: mark another test flaky	2025-12-18 07:17:50 -08:00
shamoon	f96a29db5d	Bump version to 2.20.2	2025-12-12 15:10:55 -08:00
shamoon	078cba4bd1	Fix: allow safe <style> tags in SVG uploads (#11593)	2025-12-12 22:01:56 +00:00
shamoon	43e29598b3	Add more allowed SVG attributes to validator	2025-12-12 13:18:38 -08:00
Trenton H	d9a596d67a	Fix: Expanded SVG validation whitelist and additional checks (#11590)	2025-12-12 20:04:04 +00:00
shamoon	a1026f03db	Fix: use request.stream instead of request.content (#11591)	2025-12-12 19:50:14 +00:00
github-actions[bot]	6c8a9b0373	New Crowdin translations by GitHub Action (#11520)	2025-12-12 18:12:29 +00:00
GitHub Actions	7130c0bd06	Auto translate strings	2025-12-12 17:42:19 +00:00
shamoon	d391fdec64	Resolve CodeQL warning	2025-12-12 09:39:56 -08:00