Commit graph

102 commits

Author SHA1 Message Date
Lucas Smith
34b31c0d80
chore: deps upgrades (#2712)
Some checks are pending
Continuous Integration / Build App (push) Waiting to run
Continuous Integration / Build Docker Image (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
Playwright Tests / E2E Tests (push) Waiting to run
Extract and upload translations / Extract and upload translations (push) Waiting to run
2026-04-21 14:43:49 +10:00
Lucas Smith
198dafc8ec v2.9.0
Some checks failed
Continuous Integration / Build App (push) Has been cancelled
Continuous Integration / Build Docker Image (push) Has been cancelled
CodeQL / Analyze (push) Has been cancelled
Playwright Tests / E2E Tests (push) Has been cancelled
Extract and upload translations / Extract and upload translations (push) Has been cancelled
Publish Docker / Build and publish platform containers (push) Has been cancelled
Publish Docker / Create and publish manifest (push) Has been cancelled
2026-04-18 22:04:26 +10:00
Lucas Smith
de134afba1 v2.8.1 2026-03-17 01:30:28 +11:00
Ephraim Duncan
36bbd97514
feat: add organisation template type (#2611) 2026-03-17 01:29:34 +11:00
Lucas Smith
5ea4060fd7 v2.8.0 2026-03-10 21:43:01 +11:00
Ted Liang
11eb4dd2cd
fix: security CVE-2026-29045 (#2589) 2026-03-09 16:46:11 +11:00
Lucas Smith
db1087d76d v2.7.1 2026-03-05 15:16:45 +11:00
Lucas Smith
a05251d5ee v2.7.0 2026-03-03 16:19:38 +11:00
Lucas Smith
f8ac782f2e
deps: 2026-02-26 upgrades (#2545) 2026-02-26 14:17:08 +11:00
Lucas Smith
653ab3678a
feat: better ratelimiting (#2520)
Replace hono-rate-limiter with a Prisma/PostgreSQL bucketed counter
approach that works correctly across multiple instances without sticky
sessions.

- Add RateLimit model with composite PK (key, action, bucket) and atomic
upsert
- Create rate limit factory with window parsing, bucket computation, and
fail-open
- Define auth-tier and API-tier rate limit instances
- Add Hono middleware, rateLimitResponse helper, and tRPC
assertRateLimit helper
- Wire rate limit headers through AppError constructor (was declared but
never assigned)
- Apply rate limits to auth routes (email-password, passkey), tRPC
routes
  (2FA email, link org account), API routes, and file upload endpoints
- Add cleanup cron job for expired rate limit rows (batched delete every
15 min)
- Remove hono-rate-limiter dependency
2026-02-20 12:23:02 +11:00
Lucas Smith
f3ec8ddc57 v2.6.1 2026-02-18 21:57:10 +11:00
Lucas Smith
eaee0d4bc6 v2.6.0 2026-01-29 18:44:58 +11:00
Lucas Smith
d08049ed3b v2.5.1 2026-01-27 20:25:31 +11:00
Lucas Smith
7d38e18f93 v2.5.0 2026-01-26 15:59:30 +11:00
Ted Liang
158b36a9b7
fix: security CVE-2026-22817 CVE-2026-22818 (#2390) 2026-01-15 18:27:04 +11:00
Lucas Smith
fabd69bd62
build: upgrade simplewebauthn packages from v9 to v13 (#2389)
The v9 packages are deprecated. This updates to v13 which includes
breaking API changes: optionsJSON wrapper for auth functions,
renamed properties (authenticator→credential), and base64 encoding
for credential IDs via isoBase64URL helper.
2026-01-15 14:22:37 +11:00
Lucas Smith
5bc73a7471
chore: npm audit fix (#2367) 2026-01-13 16:39:10 +11:00
Lucas Smith
6b041c23b4 v2.4.0 2026-01-08 15:16:57 +11:00
Lucas Smith
1e20561e91 v2.3.2 2025-12-24 16:20:23 +11:00
Lucas Smith
eeeee2fa0e v2.3.1 2025-12-18 12:02:04 +11:00
Lucas Smith
df678d7d69 v2.3.0 2025-12-17 22:10:47 +11:00
Lucas Smith
b0248c20eb v2.2.8 2025-12-16 16:04:07 +11:00
Lucas Smith
c5c87e3fd1 v2.2.7 2025-12-16 12:38:53 +11:00
Lucas Smith
43486d8448 v2.2.6 2025-12-09 21:11:01 +11:00
Ted Liang
c5032d0c43
refactor: extract image-helpers (#2261) 2025-12-09 09:19:49 +11:00
Lucas Smith
bac2bf11f4 v2.2.5 2025-12-08 14:33:00 +11:00
Lucas Smith
9238f759a6 v2.2.4 2025-12-05 12:23:23 +11:00
Lucas Smith
3f70082146 v2.2.3 2025-12-05 09:53:40 +11:00
Lucas Smith
08a9ab3aaf v2.2.2 2025-12-04 14:50:09 +11:00
Lucas Smith
22d99c7410 v2.2.1 2025-12-04 11:39:19 +11:00
Lucas Smith
f70e6ac50a v2.2.0 2025-12-04 00:31:11 +11:00
Lucas Smith
6ae672c16b v2.1.0 2025-11-25 16:38:06 +11:00
Lucas Smith
11a56f3228
chore: telemetry (#2240) 2025-11-25 16:01:31 +11:00
Lucas Smith
d2176627ca
chore: dependency updates (#2229) 2025-11-22 20:28:20 +11:00
Lucas Smith
17c6098638 v2.0.14 2025-11-20 15:12:40 +11:00
Lucas Smith
fa1680aaf1 v2.0.13 2025-11-18 16:59:02 +11:00
Lucas Smith
a07f3090cf v2.0.12 2025-11-15 00:48:27 +11:00
Lucas Smith
ce53bcea8c v2.0.11 2025-11-13 10:56:58 +11:00
Lucas Smith
1772c3ee36 v2.0.10 2025-11-12 18:57:24 +11:00
Lucas Smith
50db4e39be v2.0.9 2025-11-12 18:22:46 +11:00
Lucas Smith
29d40f1cca v2.0.8 2025-11-12 17:19:53 +11:00
Lucas Smith
378dd605b9 v2.0.7 2025-11-12 13:09:18 +11:00
Lucas Smith
ff44ffbc03 v2.0.6 2025-11-10 19:08:43 +11:00
Lucas Smith
0977c16e33 v2.0.5 2025-11-08 16:03:59 +11:00
Lucas Smith
1e6292b1d9 v2.0.4 2025-11-08 13:58:11 +11:00
Lucas Smith
fe8915162f v2.0.3 2025-11-08 12:53:50 +11:00
Lucas Smith
eff7d90f43 v2.0.2 2025-11-08 00:48:31 +11:00
Lucas Smith
3d539b20ad v2.0.1 2025-11-07 23:42:03 +11:00
Lucas Smith
48626b9169
fix: support utf8 filenames download (#2145) 2025-11-07 23:41:31 +11:00
Lucas Smith
1650c55b19 v2.0.0 2025-11-07 15:40:24 +11:00