Daniel Hiller
922d70e289
Merge pull request #1629 from plankanban/dependabot/npm_and_yarn/server/lodash-4.18.1
...
build(deps): Bump lodash from 4.17.23 to 4.18.1 in /server
2026-04-18 15:27:43 +02:00
dependabot[bot]
3d3c8f374c
build(deps): Bump nodemailer from 7.0.13 to 8.0.5 in /server
...
Bumps [nodemailer](https://github.com/nodemailer/nodemailer ) from 7.0.13 to 8.0.5.
- [Release notes](https://github.com/nodemailer/nodemailer/releases )
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodemailer/nodemailer/compare/v7.0.13...v8.0.5 )
---
updated-dependencies:
- dependency-name: nodemailer
dependency-version: 8.0.5
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-08 22:42:51 +00:00
dependabot[bot]
512b69080d
build(deps): Bump lodash from 4.17.23 to 4.18.1 in /server
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.18.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-08 08:21:34 +00:00
Maksim Eltyshev
d9ae02899d
chore: Update dependencies
2026-03-16 16:04:51 +01:00
Maksim Eltyshev
5ebe320396
chore: Update dependencies
2026-03-01 16:42:19 +01:00
Maksim Eltyshev
4e9e842e3d
chore: Update server dependencies
2026-02-23 18:12:14 +01:00
Maksim Eltyshev
52c96c6c8f
fix(platform): Make app compatible with Windows
2026-02-19 20:15:28 +01:00
Maksim Eltyshev
538280d197
feat: Add configurable proxy for outgoing traffic to prevent SSRF
2026-02-09 13:33:27 +01:00
Maksim Eltyshev
f8cd7474d1
chore: Update client dependencies
2026-02-04 17:52:04 +01:00
Maksim Eltyshev
450bd875c1
chore: Update server dependencies
2026-02-04 12:53:15 +01:00
Maksim Eltyshev
db99227f32
feat: Re-stream static files from S3, introduce protected static files
2026-01-30 21:45:18 +01:00
Maksim Eltyshev
a5dc0a64ac
build: Upgrade pip at build time, bump node-redis and apprise
2026-01-29 13:21:53 +01:00
Maksim Eltyshev
ee917c545c
chore: Update dependencies
2026-01-26 14:11:20 +01:00
dependabot[bot]
4200bfca3a
build(deps): Bump lodash from 4.17.21 to 4.17.23 in /server ( #1492 )
...
Bumps [lodash](https://github.com/lodash/lodash ) from 4.17.21 to 4.17.23.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23 )
---
updated-dependencies:
- dependency-name: lodash
dependency-version: 4.17.23
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-22 10:06:44 +01:00
dependabot[bot]
5f8fde1354
build(deps): Bump tar and bcrypt in /server ( #1484 )
...
Removes [tar](https://github.com/isaacs/node-tar ). It's no longer used after updating ancestor dependency [bcrypt](https://github.com/kelektiv/node.bcrypt.js ). These dependencies need to be updated together.
Removes `tar`
Updates `bcrypt` from 5.1.1 to 6.0.0
- [Release notes](https://github.com/kelektiv/node.bcrypt.js/releases )
- [Changelog](https://github.com/kelektiv/node.bcrypt.js/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kelektiv/node.bcrypt.js/compare/v5.1.1...v6.0.0 )
---
updated-dependencies:
- dependency-name: tar
dependency-version:
dependency-type: indirect
- dependency-name: bcrypt
dependency-version: 6.0.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-19 20:45:50 +01:00
Maksim Eltyshev
5636c2bb79
chore: Update dependencies
2026-01-14 13:22:11 +01:00
Maksim Eltyshev
208e61a272
feat: Optimize and parallel image processing
2025-12-19 19:11:02 +01:00
Maksim Eltyshev
fb5d5233bf
feat: Improve mime type detection, limit image processing size
2025-12-19 17:24:22 +01:00
Maksim Eltyshev
bd10a7fa5a
chore: Update dependencies
2025-12-19 12:32:10 +01:00
dependabot[bot]
b94759d399
build(deps): Bump nodemailer from 7.0.10 to 7.0.11 in /server ( #1448 )
...
Bumps [nodemailer](https://github.com/nodemailer/nodemailer ) from 7.0.10 to 7.0.11.
- [Release notes](https://github.com/nodemailer/nodemailer/releases )
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodemailer/nodemailer/compare/v7.0.10...v7.0.11 )
---
updated-dependencies:
- dependency-name: nodemailer
dependency-version: 7.0.11
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-04 16:23:31 +01:00
Maksim Eltyshev
fedee157c7
build: Refine server build steps
2025-11-28 17:45:31 +01:00
Maksim Eltyshev
bf2ab4649e
fix: Create isolated i18n instances to prevent locale collision
2025-11-27 18:28:25 +01:00
Maksim Eltyshev
7be2343076
chore: Add Swagger generation script
2025-11-25 22:08:37 +01:00
Maksim Eltyshev
5c787d65a9
fix: Properly prevent shortcut events, update dependencies
...
Closes #1440
2025-11-24 19:21:07 +01:00
dependabot[bot]
f5000e8c40
build(deps): Bump validator from 13.15.15 to 13.15.20 in /server ( #1402 )
...
Bumps [validator](https://github.com/validatorjs/validator.js ) from 13.15.15 to 13.15.20.
- [Release notes](https://github.com/validatorjs/validator.js/releases )
- [Changelog](https://github.com/validatorjs/validator.js/blob/master/CHANGELOG.md )
- [Commits](https://github.com/validatorjs/validator.js/compare/13.15.15...13.15.20 )
---
updated-dependencies:
- dependency-name: validator
dependency-version: 13.15.20
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-31 12:53:41 +01:00
dependabot[bot]
1df346d590
build(deps): Bump tmp and patch-package in /server ( #1376 )
...
Bumps [tmp](https://github.com/raszi/node-tmp ) to 0.2.5 and updates ancestor dependency [patch-package](https://github.com/ds300/patch-package ). These dependencies need to be updated together.
Updates `tmp` from 0.0.33 to 0.2.5
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md )
- [Commits](https://github.com/raszi/node-tmp/compare/v0.0.33...v0.2.5 )
Updates `patch-package` from 8.0.0 to 8.0.1
- [Release notes](https://github.com/ds300/patch-package/releases )
- [Changelog](https://github.com/ds300/patch-package/blob/master/CHANGELOG.md )
- [Commits](https://github.com/ds300/patch-package/commits )
---
updated-dependencies:
- dependency-name: tmp
dependency-version: 0.2.5
dependency-type: indirect
- dependency-name: patch-package
dependency-version: 8.0.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-10 12:54:03 +02:00
dependabot[bot]
35f33a38ff
build(deps): Bump nodemailer from 6.10.1 to 7.0.7 in /server ( #1371 )
...
Bumps [nodemailer](https://github.com/nodemailer/nodemailer ) from 6.10.1 to 7.0.7.
- [Release notes](https://github.com/nodemailer/nodemailer/releases )
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodemailer/nodemailer/compare/v6.10.1...v7.0.7 )
---
updated-dependencies:
- dependency-name: nodemailer
dependency-version: 7.0.7
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-10 12:50:12 +02:00
Maksim Eltyshev
4d77a1f596
feat: Track storage usage
2025-08-23 00:03:20 +02:00
Maksim Eltyshev
bb40a22563
chore: Update dependencies
2025-08-20 13:10:16 +02:00
Maksim Eltyshev
e2a9b30f46
feat: Parse dates as UTC without relying on TZ environment variable
...
Closes #1266
2025-07-25 11:23:20 +02:00
Maksim Eltyshev
e58a9f5d21
chore: Update dependencies
2025-06-30 12:43:06 +02:00
Maksim Eltyshev
04b97b66cb
chore: Update dependencies
2025-06-03 13:02:16 +02:00
Maksim Eltyshev
2ee1166747
feat: Version 2
...
Closes #627 , closes #1047
2025-05-10 02:09:06 +02:00
dependabot[bot]
ad48121b2f
chore(deps): Bump cookie and sails-hook-sockets in /server ( #1093 )
...
Bumps [cookie](https://github.com/jshttp/cookie ) to 0.7.2 and updates ancestor dependency [sails-hook-sockets](https://github.com/balderdashy/sails-hook-sockets ). These dependencies need to be updated together.
Updates `cookie` from 0.4.2 to 0.7.2
- [Release notes](https://github.com/jshttp/cookie/releases )
- [Commits](https://github.com/jshttp/cookie/compare/v0.4.2...v0.7.2 )
Updates `sails-hook-sockets` from 3.0.1 to 3.0.2
- [Release notes](https://github.com/balderdashy/sails-hook-sockets/releases )
- [Changelog](https://github.com/balderdashy/sails-hook-sockets/blob/master/CHANGELOG.md )
- [Commits](https://github.com/balderdashy/sails-hook-sockets/compare/v3.0.1...v3.0.2 )
---
updated-dependencies:
- dependency-name: cookie
dependency-version: 0.7.2
dependency-type: indirect
- dependency-name: sails-hook-sockets
dependency-version: 3.0.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-21 01:14:48 +02:00
dependabot[bot]
a01071b4fa
chore(deps): Bump path-to-regexp and sails in /server ( #1012 )
...
Bumps [path-to-regexp](https://github.com/pillarjs/path-to-regexp ) to 1.9.0 and updates ancestor dependency [sails](https://github.com/balderdashy/sails ). These dependencies need to be updated together.
Updates `path-to-regexp` from 0.1.11 to 1.9.0
- [Release notes](https://github.com/pillarjs/path-to-regexp/releases )
- [Changelog](https://github.com/pillarjs/path-to-regexp/blob/master/History.md )
- [Commits](https://github.com/pillarjs/path-to-regexp/compare/v0.1.11...v1.9.0 )
Updates `sails` from 1.5.13 to 1.5.14
- [Release notes](https://github.com/balderdashy/sails/releases )
- [Changelog](https://github.com/balderdashy/sails/blob/master/CHANGELOG.md )
- [Commits](https://github.com/balderdashy/sails/compare/v1.5.13...v1.5.14 )
---
updated-dependencies:
- dependency-name: path-to-regexp
dependency-type: indirect
- dependency-name: sails
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-13 16:20:13 +01:00
Maksim Eltyshev
e243e15043
chore: Update dependencies
2024-11-22 17:13:17 +01:00
Maksim Eltyshev
97f4c0ab0d
fix: Secure S3 attachments, bump SDK, refactoring
...
Closes #673
2024-11-12 15:58:22 +01:00
Nguyễn Hải Quang
f20a3d50f5
feat: Add S3 support for uploads ( #938 )
2024-11-11 14:59:18 +01:00
Maksim Eltyshev
13e0dde728
chore: Bump sails version
2024-10-22 21:00:37 +02:00
Matthew Stickney
37fc7847e8
feat: Configurable file storage locations ( #886 )
...
* feat: Make logfile location customizable
It may be desirable to log to a more standard location (e.g. in /var/log/),
or in some cases to turn logging to file off. To support these, use a
custom config property to determine the location of the output log file,
and default to the previous location if it is unset.
* feat: Support alternate storage locations for uploaded files
This involves a couple primary changes:
1) to make Sails' temporary file-upload directory a configurable location
by using a common file-upload-receiving helper;
2) to create custom static routes for the file-upload locations, so they
can be outside the application's public directory; and
3) to use the file-uploading handler everywhere that receives files, so
config for the helper is applied to all file uploads consistently.
This is sufficient to allow the application directory to be deployed read-
only, with writable storage used for file uploads. The new config property
for Sails' temporary upload directory, combined with the existing settings
for user-avatar and background-image locations are sufficient to handle
uploads; the new custom routes handle serving those files from external
locations.
The default behavior of the application should be unchanged, with files
uploaded to, and served from, the public directory if the relevant
config properties aren't set to other values.
2024-09-20 20:29:11 +02:00
Maksim Eltyshev
4fb60e8c8e
chore: Bump express and related dependencies
2024-09-16 13:26:29 +02:00
Maksim Eltyshev
cefc3d66eb
chore: Update dependencies
2024-09-16 12:04:56 +02:00
Maksim Eltyshev
e7b3612c2e
fix: Preserve extension for attachments with long filename
...
Closes #77
2024-09-16 00:45:53 +02:00
Maksim Eltyshev
052ead4bad
chore: Update dependencies
2024-06-02 01:34:03 +02:00
Maksim Eltyshev
52fb86f9e9
chore: Update dependencies
...
Closes #726
2024-04-23 15:45:47 +02:00
Edouard
e14ae09e47
feat: SMTP integration and email notifications ( #631 )
2024-03-22 00:14:09 +01:00
Maksim Eltyshev
50e580b921
fix: Fix images becoming black and white when resizing
...
Closes #574 , closes #585
2024-01-18 10:58:26 +01:00
Maksim Eltyshev
3bc9507f2f
chore: Bump sharp version
2024-01-03 13:59:14 +05:00
Maksim Eltyshev
0af96a21c8
build: Stop using base image
2023-12-01 18:02:19 +01:00
Maksim Eltyshev
22aa3c4adf
chore: Update dependencies
2023-11-17 14:34:10 +01:00