dependabot[bot]
3cf7e15945
build(deps): Bump svgo from 3.3.4 to 3.3.5 in /client
...
Bumps [svgo](https://github.com/svg/svgo ) from 3.3.4 to 3.3.5.
- [Release notes](https://github.com/svg/svgo/releases )
- [Commits](https://github.com/svg/svgo/compare/v3.3.4...v3.3.5 )
---
updated-dependencies:
- dependency-name: svgo
dependency-version: 3.3.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-09 22:34:34 +00:00
Daniel Hiller
9069b24cfb
chore: Add a locale completeness check
...
An incomplete locale falls back to English at runtime, so a gap breaks nothing
and nobody notices it on their own. 2.2.1 shipped fifty-six user-facing strings
that existed only in English and German, and it took someone looking for
something else to find them. `npm run client:locales:check` compares every
locale against the reference and exits non-zero when one is behind.
It compares `login.js` and `core.js` separately and never merges them.
`login.js` is the embedded bundle and is all that exists until a session is
established, so a key present only in `core.js` is still missing from every
screen shown before login — the two-factor challenge among them. Merging the
two hides exactly that, which is how the six strings of the challenge stayed
English in thirty-three languages.
Keys are compared on their base name, with the CLDR plural category stripped,
because how many categories a language needs is a property of that language:
English has two, Japanese one, Arabic six. Comparing the suffixed names would
have demanded an English `_one` from Japanese, where i18next never reads it.
Each plural key is then checked against the categories the language itself
declares, through the same Intl.PluralRules that i18next resolves with — a
missing category falls back to `_other` silently, and Russian `few` and `many`
are reachable with counts a user really sees.
It is deliberately not part of `lint`: a pull request that adds a string is
expected to leave the other locales behind for a while, and a check that fails
every such request would only be switched off. This one belongs before a
release.
2026-09-08 19:54:27 +02:00
Daniel Hiller
2e4904f77d
feat: Add two-factor authentication via TOTP
...
Adds TOTP setup with QR code, login challenge, recovery codes and
trusted devices that let a browser skip the second factor for 30
days. Admins can reset another user's second factor by confirming
with their own password.
2026-08-07 20:11:55 +02:00
Daniel Hiller
bec5dd1597
chore: Update dependencies
...
Bump Node to 24 in Dockerfile and Dockerfile.dev.
Bump sharp to 0.35, nodemailer to 9 and concurrently to 10.
Add overrides for body-parser, qs, multiparty, uuid, diff,
serialize-javascript, linkify-it and svgo to pull in security fixes
that upstream pins block.
Rename the sails patch to match 1.5.18.
2026-08-07 16:17:24 +02:00
Daniel Hiller
20eb57de4c
Merge pull request #1635 from HannesOberreiter/fix/unicode-initials
...
fix: unicode/emoji characters in user avatar initials
2026-04-18 15:28:06 +02:00
Daniel Hiller
4fd164c81a
Merge pull request #1627 from plankanban/dependabot/npm_and_yarn/client/vite-7.3.2
...
build(deps): Bump vite from 7.3.1 to 7.3.2 in /client
2026-04-18 15:27:55 +02:00
HannesOberreiter
3bf6e6fa19
fix: allow unicodes in initials
2026-04-16 14:21:13 +02:00
dependabot[bot]
7a3873cbeb
build(deps): Bump lodash from 4.17.23 to 4.18.1 in /client
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.18.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-08 08:29:03 +00:00
dependabot[bot]
f61299fde8
build(deps): Bump vite from 7.3.1 to 7.3.2 in /client
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 7.3.1 to 7.3.2.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 7.3.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-06 21:38:57 +00:00
Maksim Eltyshev
d9ae02899d
chore: Update dependencies
2026-03-16 16:04:51 +01:00
Maksim Eltyshev
5ebe320396
chore: Update dependencies
2026-03-01 16:42:19 +01:00
Maksim Eltyshev
f8cd7474d1
chore: Update client dependencies
2026-02-04 17:52:04 +01:00
Maksim Eltyshev
ee917c545c
chore: Update dependencies
2026-01-26 14:11:20 +01:00
dependabot[bot]
7b1be0db27
build(deps): Bump lodash from 4.17.21 to 4.17.23 in /client ( #1491 )
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.17.23
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-22 10:06:36 +01:00
Maksim Eltyshev
5636c2bb79
chore: Update dependencies
2026-01-14 13:22:11 +01:00
dependabot[bot]
f4a24a3c1f
build(deps): Bump @remix-run/router and react-router-dom in /client ( #1479 )
...
Bumps [@remix-run/router](https://github.com/remix-run/react-router/tree/HEAD/packages/router ) to 1.23.2 and updates ancestor dependency [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom ). These dependencies need to be updated together.
Updates `@remix-run/router` from 1.23.1 to 1.23.2
- [Release notes](https://github.com/remix-run/react-router/releases )
- [Changelog](https://github.com/remix-run/react-router/blob/@remix-run/router@1.23.2/packages/router/CHANGELOG.md )
- [Commits](https://github.com/remix-run/react-router/commits/@remix-run/router@1.23.2/packages/router )
Updates `react-router-dom` from 6.30.2 to 6.30.3
- [Release notes](https://github.com/remix-run/react-router/releases )
- [Changelog](https://github.com/remix-run/react-router/blob/main/CHANGELOG.md )
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@6.30.3/packages/react-router-dom )
---
updated-dependencies:
- dependency-name: "@remix-run/router"
dependency-version: 1.23.2
dependency-type: indirect
- dependency-name: react-router-dom
dependency-version: 6.30.3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-09 05:42:39 +01:00
Maksim Eltyshev
bd10a7fa5a
chore: Update dependencies
2025-12-19 12:32:10 +01:00
Maksim Eltyshev
4f5f5ddad4
feat: Display last updates in About modal
2025-12-17 15:49:33 +01:00
Maksim Eltyshev
5c787d65a9
fix: Properly prevent shortcut events, update dependencies
...
Closes #1440
2025-11-24 19:21:07 +01:00
dependabot[bot]
d99e949d07
build(deps): Bump validator from 13.15.15 to 13.15.20 in /client ( #1403 )
...
Bumps [validator](https://github.com/validatorjs/validator.js ) from 13.15.15 to 13.15.20.
- [Release notes](https://github.com/validatorjs/validator.js/releases )
- [Changelog](https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md )
- [Commits](https://github.com/validatorjs/validator.js/compare/13.15.15...13.15.20 )
---
updated-dependencies:
- dependency-name: validator
dependency-version: 13.15.20
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-31 12:57:38 +01:00
dependabot[bot]
d385a1c238
build(deps): Bump vite from 6.3.6 to 6.4.1 in /client ( #1395 )
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 6.3.6 to 6.4.1.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/create-vite@6.4.1/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 6.4.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-31 12:53:31 +01:00
dependabot[bot]
0d8edbbbc6
build(deps-dev): Bump playwright and @playwright/test in /client ( #1393 )
...
Bumps [playwright](https://github.com/microsoft/playwright ) and [@playwright/test](https://github.com/microsoft/playwright ). These dependencies needed to be updated together.
Updates `playwright` from 1.55.0 to 1.56.1
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.55.0...v1.56.1 )
Updates `@playwright/test` from 1.55.0 to 1.56.1
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.55.0...v1.56.1 )
---
updated-dependencies:
- dependency-name: playwright
dependency-version: 1.56.1
dependency-type: direct:development
- dependency-name: "@playwright/test"
dependency-version: 1.56.1
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-31 12:53:22 +01:00
dependabot[bot]
f968e1976b
build(deps): Bump tmp and patch-package in /client ( #1369 )
...
Bumps [tmp](https://github.com/raszi/node-tmp ) to 0.2.5 and updates ancestor dependency [patch-package](https://github.com/ds300/patch-package ). These dependencies need to be updated together.
Updates `tmp` from 0.0.33 to 0.2.5
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/raszi/node-tmp/compare/v0.0.33...v0.2.5 )
Updates `patch-package` from 8.0.0 to 8.0.1
- [Release notes](https://github.com/ds300/patch-package/releases )
- [Changelog](https://github.com/ds300/patch-package/blob/master/CHANGELOG.md )
- [Commits](https://github.com/ds300/patch-package/commits )
---
updated-dependencies:
- dependency-name: tmp
dependency-version: 0.2.5
dependency-type: indirect
- dependency-name: patch-package
dependency-version: 8.0.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-10 12:48:37 +02:00
dependabot[bot]
494800d131
build(deps): Bump vite from 6.3.5 to 6.3.6 in /client ( #1341 )
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 6.3.5 to 6.3.6.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/v6.3.6/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v6.3.6/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 6.3.6
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-10 11:47:26 +02:00
Maksim Eltyshev
6863f557a3
chore: Update dependencies
2025-08-30 17:25:25 +02:00
Maksim Eltyshev
bb40a22563
chore: Update dependencies
2025-08-20 13:10:16 +02:00
Maksim Eltyshev
0049ba2145
feat: Track navigation path when switching between cards
2025-07-31 16:59:16 +02:00
dependabot[bot]
c272a65015
build(deps): Bump linkifyjs from 4.3.1 to 4.3.2 in /client ( #1273 )
...
Bumps [linkifyjs](https://github.com/nfrasser/linkifyjs/tree/HEAD/packages/linkifyjs ) from 4.3.1 to 4.3.2.
- [Release notes](https://github.com/nfrasser/linkifyjs/releases )
- [Changelog](https://github.com/nfrasser/linkifyjs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/nfrasser/linkifyjs/commits/v4.3.2/packages/linkifyjs )
---
updated-dependencies:
- dependency-name: linkifyjs
dependency-version: 4.3.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-30 12:37:49 +02:00
Maksim Eltyshev
e58a9f5d21
chore: Update dependencies
2025-06-30 12:43:06 +02:00
Maksim Eltyshev
04b97b66cb
chore: Update dependencies
2025-06-03 13:02:16 +02:00
Maksim Eltyshev
a2495b664e
chore: Add missing things
2025-06-02 19:44:08 +02:00
Roman Zavarnitsyn
c0b0436851
feat: Add ability to mention users in comments ( #1162 )
2025-05-30 22:01:29 +02:00
Roman Zavarnitsyn
42817c5199
feat: Add CSV attachment viewer ( #1154 )
2025-05-27 14:19:44 +02:00
Maksim Eltyshev
2db75ed420
chore: Downgrade and pin i18next version
2025-05-21 13:25:54 +02:00
Maksim Eltyshev
dd8cd2f4fd
chore: Bump vite to version 6
2025-05-10 21:45:31 +02:00
Maksim Eltyshev
2ee1166747
feat: Version 2
...
Closes #627 , closes #1047
2025-05-10 02:09:06 +02:00
dependabot[bot]
98d1df7edb
chore(deps-dev): Bump axios from 1.7.7 to 1.8.2 in /client ( #1062 )
...
Bumps [axios](https://github.com/axios/axios ) from 1.7.7 to 1.8.2.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.7.7...v1.8.2 )
---
updated-dependencies:
- dependency-name: axios
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-21 01:04:52 +02:00
dependabot[bot]
b909d03997
chore(deps): Bump nanoid in /client ( #1011 )
...
Bumps and [nanoid](https://github.com/ai/nanoid ). These dependencies needed to be updated together.
Updates `nanoid` from 5.0.8 to 5.0.9
- [Release notes](https://github.com/ai/nanoid/releases )
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md )
- [Commits](https://github.com/ai/nanoid/compare/5.0.8...5.0.9 )
Updates `nanoid` from 3.3.7 to 5.0.9
- [Release notes](https://github.com/ai/nanoid/releases )
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md )
- [Commits](https://github.com/ai/nanoid/compare/5.0.8...5.0.9 )
---
updated-dependencies:
- dependency-name: nanoid
dependency-type: direct:production
- dependency-name: nanoid
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-13 16:20:04 +01:00
Maksim Eltyshev
ba632a8ab1
fix: Downgrade i18next to fix language change issue
2024-11-28 11:16:17 +01:00
Maksim Eltyshev
e243e15043
chore: Update dependencies
2024-11-22 17:13:17 +01:00
Nalem7
096feb35bb
test: Add BDD UI tests using Playwright ( #911 )
2024-10-17 22:06:48 +02:00
Amrita
4efc3be8d5
test: Setup UI test using BDD approach ( #152 )
2024-10-17 20:18:31 +02:00
Maksim Eltyshev
cefc3d66eb
chore: Update dependencies
2024-09-16 12:04:56 +02:00
Maksim Eltyshev
07e1903bb5
feat: Languages with country codes
2024-07-21 19:33:57 +02:00
Maksim Eltyshev
052ead4bad
chore: Update dependencies
2024-06-02 01:34:03 +02:00
Maksim Eltyshev
52fb86f9e9
chore: Update dependencies
...
Closes #726
2024-04-23 15:45:47 +02:00
HannesOberreiter
800d2d012d
feat: Display clickable links in tasks ( #694 )
...
Closes #330
2024-04-10 15:53:05 +02:00
Gilberto Vidal
8fbdf3365a
fix: Fix eslint rules for Windows ( #508 )
2023-12-11 00:13:04 +01:00
Maksim Eltyshev
8110b7f3a5
chore: Revert remark-gfm update
2023-11-23 14:40:44 +01:00
Maksim Eltyshev
22aa3c4adf
chore: Update dependencies
2023-11-17 14:34:10 +01:00