AhmedTawfik/planka
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,067 Commits 1 Branch 0 Tags
952a078aa1460dff84cabfa99a63246bb0929fb5
Commit Graph
119 Commits
Author SHA1 Message Date
dependabot[bot] 38a45c66e3 build(deps): Bump socket.io-parser from 4.2.5 to 4.2.6 in /server (#1588) 
Bumps [socket.io-parser](https://github.com/socketio/socket.io) from 4.2.5 to 4.2.6.
- [Release notes](https://github.com/socketio/socket.io/releases)
- [Changelog](https://github.com/socketio/socket.io/blob/main/CHANGELOG.md)
- [Commits](https://github.com/socketio/socket.io/compare/socket.io-parser@4.2.5...socket.io-parser@4.2.6)

---
updated-dependencies:
- dependency-name: socket.io-parser
  dependency-version: 4.2.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-19 10:29:00 +01:00
Maksim Eltyshev d9ae02899d chore: Update dependencies 2026-03-16 16:04:51 +01:00
Maksim Eltyshev 5ebe320396 chore: Update dependencies 2026-03-01 16:42:19 +01:00
Maksim Eltyshev 4e9e842e3d chore: Update server dependencies 2026-02-23 18:12:14 +01:00
Maksim Eltyshev 538280d197 feat: Add configurable proxy for outgoing traffic to prevent SSRF 2026-02-09 13:33:27 +01:00
Maksim Eltyshev f8cd7474d1 chore: Update client dependencies 2026-02-04 17:52:04 +01:00
Maksim Eltyshev 450bd875c1 chore: Update server dependencies 2026-02-04 12:53:15 +01:00
Maksim Eltyshev db99227f32 feat: Re-stream static files from S3, introduce protected static files 2026-01-30 21:45:18 +01:00
Maksim Eltyshev a5dc0a64ac build: Upgrade pip at build time, bump node-redis and apprise 2026-01-29 13:21:53 +01:00
Maksim Eltyshev ee917c545c chore: Update dependencies 2026-01-26 14:11:20 +01:00
dependabot[bot] 4200bfca3a build(deps): Bump lodash from 4.17.21 to 4.17.23 in /server (#1492) 
Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-22 10:06:44 +01:00
dependabot[bot] 5f8fde1354 build(deps): Bump tar and bcrypt in /server (#1484) 
Removes [tar](https://github.com/isaacs/node-tar). It's no longer used after updating ancestor dependency [bcrypt](https://github.com/kelektiv/node.bcrypt.js). These dependencies need to be updated together.


Removes `tar`

Updates `bcrypt` from 5.1.1 to 6.0.0
- [Release notes](https://github.com/kelektiv/node.bcrypt.js/releases)
- [Changelog](https://github.com/kelektiv/node.bcrypt.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kelektiv/node.bcrypt.js/compare/v5.1.1...v6.0.0)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 
  dependency-type: indirect
- dependency-name: bcrypt
  dependency-version: 6.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-19 20:45:50 +01:00
Maksim Eltyshev 5636c2bb79 chore: Update dependencies 2026-01-14 13:22:11 +01:00
Maksim Eltyshev 208e61a272 feat: Optimize and parallel image processing 2025-12-19 19:11:02 +01:00
Maksim Eltyshev fb5d5233bf feat: Improve mime type detection, limit image processing size 2025-12-19 17:24:22 +01:00
Maksim Eltyshev bd10a7fa5a chore: Update dependencies 2025-12-19 12:32:10 +01:00
Maksim Eltyshev 4f5f5ddad4 feat: Display last updates in About modal 2025-12-17 15:49:33 +01:00
dependabot[bot] d472da7523 build(deps): Bump jws from 3.2.2 to 3.2.3 in /server (#1449) 
Bumps [jws](https://github.com/brianloveswords/node-jws) from 3.2.2 to 3.2.3.
- [Release notes](https://github.com/brianloveswords/node-jws/releases)
- [Changelog](https://github.com/auth0/node-jws/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianloveswords/node-jws/compare/v3.2.2...v3.2.3)

---
updated-dependencies:
- dependency-name: jws
  dependency-version: 3.2.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-04 18:16:18 +01:00
Maksim Eltyshev f030b78f82 feat: Add object-path support to OIDC attribute mapping 
Closes #1359
 2025-12-04 17:38:39 +01:00
dependabot[bot] b94759d399 build(deps): Bump nodemailer from 7.0.10 to 7.0.11 in /server (#1448) 
Bumps [nodemailer](https://github.com/nodemailer/nodemailer) from 7.0.10 to 7.0.11.
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodemailer/nodemailer/compare/v7.0.10...v7.0.11)

---
updated-dependencies:
- dependency-name: nodemailer
  dependency-version: 7.0.11
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-12-04 16:23:31 +01:00
Maksim Eltyshev fedee157c7 build: Refine server build steps 2025-11-28 17:45:31 +01:00
Maksim Eltyshev bf2ab4649e fix: Create isolated i18n instances to prevent locale collision 2025-11-27 18:28:25 +01:00
Maksim Eltyshev 7be2343076 chore: Add Swagger generation script 2025-11-25 22:08:37 +01:00
Maksim Eltyshev 197ebc16db chore: Bump package lock files 2025-11-24 19:48:30 +01:00
Maksim Eltyshev 5c787d65a9 fix: Properly prevent shortcut events, update dependencies 
Closes #1440
 2025-11-24 19:21:07 +01:00
dependabot[bot] 4ed0f02657 build(deps-dev): Bump js-yaml from 4.1.0 to 4.1.1 in /server (#1429) 
Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-11-18 21:11:08 +01:00
dependabot[bot] f5000e8c40 build(deps): Bump validator from 13.15.15 to 13.15.20 in /server (#1402) 
Bumps [validator](https://github.com/validatorjs/validator.js) from 13.15.15 to 13.15.20.
- [Release notes](https://github.com/validatorjs/validator.js/releases)
- [Changelog](https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/validatorjs/validator.js/compare/13.15.15...13.15.20)

---
updated-dependencies:
- dependency-name: validator
  dependency-version: 13.15.20
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-10-31 12:53:41 +01:00
dependabot[bot] 1df346d590 build(deps): Bump tmp and patch-package in /server (#1376) 
Bumps [tmp](https://github.com/raszi/node-tmp) to 0.2.5 and updates ancestor dependency [patch-package](https://github.com/ds300/patch-package). These dependencies need to be updated together.


Updates `tmp` from 0.0.33 to 0.2.5
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](https://github.com/raszi/node-tmp/compare/v0.0.33...v0.2.5)

Updates `patch-package` from 8.0.0 to 8.0.1
- [Release notes](https://github.com/ds300/patch-package/releases)
- [Changelog](https://github.com/ds300/patch-package/blob/master/CHANGELOG.md)
- [Commits](https://github.com/ds300/patch-package/commits)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.5
  dependency-type: indirect
- dependency-name: patch-package
  dependency-version: 8.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-10-10 12:54:03 +02:00
dependabot[bot] 35f33a38ff build(deps): Bump nodemailer from 6.10.1 to 7.0.7 in /server (#1371) 
Bumps [nodemailer](https://github.com/nodemailer/nodemailer) from 6.10.1 to 7.0.7.
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodemailer/nodemailer/compare/v6.10.1...v7.0.7)

---
updated-dependencies:
- dependency-name: nodemailer
  dependency-version: 7.0.7
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-10-10 12:50:12 +02:00
Maksim Eltyshev 4d77a1f596 feat: Track storage usage 2025-08-23 00:03:20 +02:00
Maksim Eltyshev bb40a22563 chore: Update dependencies 2025-08-20 13:10:16 +02:00
Luis Chacón cbb00d1d59 feat: Add OAuth callback support for OIDC (#1290) 
Closes #593, closes #690, closes #1289
 2025-08-09 18:58:55 +02:00
Maksim Eltyshev e2a9b30f46 feat: Parse dates as UTC without relying on TZ environment variable 
Closes #1266
 2025-07-25 11:23:20 +02:00
dependabot[bot] df023439c1 build(deps-dev): Bump form-data from 4.0.3 to 4.0.4 in /server (#1264) 
Bumps [form-data](https://github.com/form-data/form-data) from 4.0.3 to 4.0.4.
- [Release notes](https://github.com/form-data/form-data/releases)
- [Changelog](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)
- [Commits](https://github.com/form-data/form-data/compare/v4.0.3...v4.0.4)

---
updated-dependencies:
- dependency-name: form-data
  dependency-version: 4.0.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-07-22 14:45:45 +02:00
Maksim Eltyshev e58a9f5d21 chore: Update dependencies 2025-06-30 12:43:06 +02:00
Maksim Eltyshev 04b97b66cb chore: Update dependencies 2025-06-03 13:02:16 +02:00
Maksim Eltyshev 2ee1166747 feat: Version 2 
Closes #627, closes #1047
 2025-05-10 02:09:06 +02:00
dependabot[bot] faf6e809a6 chore(deps): Bump path-to-regexp and @sailshq/router in /server (#1096) 
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) and [@sailshq/router](https://github.com/sailshq/router). These dependencies needed to be updated together.

Updates `path-to-regexp` from 0.1.11 to 1.9.0
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.11...v1.9.0)

Updates `@sailshq/router` from 1.3.9 to 1.3.10
- [Changelog](https://github.com/sailshq/router/blob/master/HISTORY.md)
- [Commits](https://github.com/sailshq/router/compare/v1.3.9...v1.3.10)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-version: 1.9.0
  dependency-type: indirect
- dependency-name: "@sailshq/router"
  dependency-version: 1.3.10
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-21 01:15:16 +02:00
dependabot[bot] ad48121b2f chore(deps): Bump cookie and sails-hook-sockets in /server (#1093) 
Bumps [cookie](https://github.com/jshttp/cookie) to 0.7.2 and updates ancestor dependency [sails-hook-sockets](https://github.com/balderdashy/sails-hook-sockets). These dependencies need to be updated together.


Updates `cookie` from 0.4.2 to 0.7.2
- [Release notes](https://github.com/jshttp/cookie/releases)
- [Commits](https://github.com/jshttp/cookie/compare/v0.4.2...v0.7.2)

Updates `sails-hook-sockets` from 3.0.1 to 3.0.2
- [Release notes](https://github.com/balderdashy/sails-hook-sockets/releases)
- [Changelog](https://github.com/balderdashy/sails-hook-sockets/blob/master/CHANGELOG.md)
- [Commits](https://github.com/balderdashy/sails-hook-sockets/compare/v3.0.1...v3.0.2)

---
updated-dependencies:
- dependency-name: cookie
  dependency-version: 0.7.2
  dependency-type: indirect
- dependency-name: sails-hook-sockets
  dependency-version: 3.0.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-04-21 01:14:48 +02:00
dependabot[bot] a01071b4fa chore(deps): Bump path-to-regexp and sails in /server (#1012) 
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp) to 1.9.0 and updates ancestor dependency [sails](https://github.com/balderdashy/sails). These dependencies need to be updated together.


Updates `path-to-regexp` from 0.1.11 to 1.9.0
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases)
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md)
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.11...v1.9.0)

Updates `sails` from 1.5.13 to 1.5.14
- [Release notes](https://github.com/balderdashy/sails/releases)
- [Changelog](https://github.com/balderdashy/sails/blob/master/CHANGELOG.md)
- [Commits](https://github.com/balderdashy/sails/compare/v1.5.13...v1.5.14)

---
updated-dependencies:
- dependency-name: path-to-regexp
  dependency-type: indirect
- dependency-name: sails
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-02-13 16:20:13 +01:00
dependabot[bot] 9a88051860 chore(deps): Bump cross-spawn and sails-generate in /server (#964) 
Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) and [sails-generate](https://github.com/balderdashy/sails-generate). These dependencies needed to be updated together.

Updates `cross-spawn` from 4.0.2 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/moxystudio/node-cross-spawn/compare/4.0.2...v7.0.6)

Updates `sails-generate` from 2.0.12 to 2.0.13
- [Release notes](https://github.com/balderdashy/sails-generate/releases)
- [Commits](https://github.com/balderdashy/sails-generate/compare/v2.0.12...v2.0.13)

---
updated-dependencies:
- dependency-name: cross-spawn
  dependency-type: indirect
- dependency-name: sails-generate
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-11-28 11:21:16 +01:00
Maksim Eltyshev e243e15043 chore: Update dependencies 2024-11-22 17:13:17 +01:00
Maksim Eltyshev 97f4c0ab0d fix: Secure S3 attachments, bump SDK, refactoring 
Closes #673
 2024-11-12 15:58:22 +01:00
Nguyễn Hải Quang f20a3d50f5 feat: Add S3 support for uploads (#938) 2024-11-11 14:59:18 +01:00
Maksim Eltyshev 13e0dde728 chore: Bump sails version 2024-10-22 21:00:37 +02:00
Maksim Eltyshev e75a17b0da chore: Update version 2024-09-20 20:41:54 +02:00
Matthew Stickney 37fc7847e8 feat: Configurable file storage locations (#886) 
* feat: Make logfile location customizable

It may be desirable to log to a more standard location (e.g. in /var/log/),
or in some cases to turn logging to file off. To support these, use a
custom config property to determine the location of the output log file,
and default to the previous location if it is unset.

* feat: Support alternate storage locations for uploaded files

This involves a couple primary changes:
1) to make Sails' temporary file-upload directory a configurable location
   by using a common file-upload-receiving helper;
2) to create custom static routes for the file-upload locations, so they
   can be outside the application's public directory; and
3) to use the file-uploading handler everywhere that receives files, so
   config for the helper is applied to all file uploads consistently.

This is sufficient to allow the application directory to be deployed read-
only, with writable storage used for file uploads. The new config property
for Sails' temporary upload directory, combined with the existing settings
for user-avatar and background-image locations are sufficient to handle
uploads; the new custom routes handle serving those files from external
locations.

The default behavior of the application should be unchanged, with files
uploaded to, and served from, the public directory if the relevant
config properties aren't set to other values.
 2024-09-20 20:29:11 +02:00
Maksim Eltyshev c43f828af4 chore: Update version 2024-09-16 21:21:30 +02:00
Maksim Eltyshev 4fb60e8c8e chore: Bump express and related dependencies 2024-09-16 13:26:29 +02:00
Maksim Eltyshev cefc3d66eb chore: Update dependencies 2024-09-16 12:04:56 +02:00