Skip to content

CHANGELOG.md

Latest commit

 

History

History
92 lines (80 loc) · 4.43 KB

CHANGELOG.md

File metadata and controls

92 lines (80 loc) · 4.43 KB
Raw

Changelog

Notable changes to tududi. Versions match the git tags and the chrisvel/tududi image tags (without the v).

Unreleased

Security

  • Sharing a project, task, or note now creates an invitation that the recipient accepts from a notification; nothing appears in their workspace before that. The share endpoint answers the same way for known and unknown emails (#1472).
  • GET /api/users is admin only; the share dialog takes an exact email (#1472).
  • Avatars are visible to their owner and collaborators only; Telegram polling status is per user (#1472).
  • Passwords must be at least 8 characters. Password logins are recorded in the auth audit log, and login is rate limited per email address as well as per IP (#1474).
  • CalDAV Basic auth is rate limited and no longer fails with 500 for accounts without a password. CalDAV endpoints are off unless FF_ENABLE_CALDAV=true (#1475).

Added

  • Self-service password reset by email (/forgot-password) (#1474).
  • Self-service account deletion (Profile > Security), with a complete erasure shared with admin deletion: attachments, backups, contacts, calendars, identities, audit log, sessions (#1475).
  • POST /api/resend-verification for unverified accounts (#1475).
  • TUDUDI_HOSTED_MODE for public multi-user instances: no implicit first admin, no bootstrap role assignment, SSO auto-provisioning respects the registration toggle, and the server refuses to start half-configured (#1473, #1476).
  • Several app processes can share one PostgreSQL database: schema and migrations run under an advisory lock, scheduled jobs and Telegram polling elect one runner, and rate limits are stored in the database (#1476).
  • GET /api/health/ready reports database reachability and pending migrations; GET /api/health stays a liveness probe.
  • Structured JSON logging (pino) with LOG_LEVEL and LOG_FORMAT; health probes are not logged.
  • Docker images are published by CI on release tags (.github/workflows/docker-publish.yml).
  • Plans and limits for hosted instances: a Free and a Pro tier defined in backend/config/plans.js and overridable with TUDUDI_PLANS_JSON. Only creating is ever limited; reading, editing, completing, deleting and exporting always work, so an account over its limits loses nothing (#1478, #1479).
  • Subscriptions, a billing tab in the profile, and an admin billing page with per-account plan overrides (#1482, #1483, #1484).
  • TUDUDI_REQUIRE_SUBSCRIPTION makes a hosted instance sell access rather than upgrades: without a subscription the app answers 402 SUBSCRIPTION_REQUIRED and the browser lands on a subscription page. Billing, the profile and data export stay reachable.
  • A public demo sandbox (TUDUDI_DEMO_ENABLED): one shared account, seeded and wiped on a timer, opened in a click with no password to publish.
  • A Cloud waitlist on the marketing page, stored on the instance itself, and an admin dashboard at /admin with users, billing, waitlist and content.
  • Cloudflare Turnstile captcha on registration, password reset and verification resend, on when TURNSTILE_SITE_KEY and TURNSTILE_SECRET_KEY are set.
  • Lemon Squeezy as a payment provider beside Stripe, chosen with BILLING_PROVIDER. The billing_accounts and billing_events columns that named Stripe are now provider_*.
  • Backup format 2: an export now carries goals, people, habit completions and the attachments themselves, and an import into another account rewires every reference (#1486).
  • The marketing page can be served by the same image: hostnames listed in TUDUDI_LANDING_HOSTS get it, in 25 languages, and product paths on those hosts redirect to FRONTEND_URL. Off unless the variable is set.

Fixed

  • The entrypoint no longer resets the bootstrap admin's password on every start; pass --update-password to scripts/user-create.js to do that (#1473).
  • The nightly token cleanup job had been failing on a wrong require path (#1476).
  • Owners can share tasks and notes directly, not only projects (#1472).
  • GET /api/tasks pages in the database instead of slicing in memory, so a large task list no longer loads in full on every request (#1487).
  • The login page rendered its password form twice (#1493).

Changed

  • Translations for all 24 non-English locales cover the new billing, password reset, share invitation and account deletion strings (#1488).

1.4.2

See the GitHub release notes for this and earlier versions.