Skip to content

v0.47.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 May 00:35
· 600 commits to main since this release
v0.47.0
578ce73
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • Password complexity requirements. New passwords must be at least 12 characters and are checked against the HaveIBeenPwned breach corpus via the k-anonymity API (only a 5-char SHA-1 prefix leaves the server). Enforced on registration, password reset, self password change, and admin user creation/update; no character-class rules per NIST SP 800-63B guidance. Existing accounts are grandfathered — short or breached passwords keep working at login until the next change. Disable the breach check by setting HIBP_CHECK_ENABLED=false in the backend env (e.g. for air-gapped deployments).
  • Task edit page shows who created the task and when. A small avatar + "Created by {name} · {relative time}" chip sits inline with the task title (right-aligned, out of the way of the edit form). Hovering reveals the absolute creation timestamp. Follows the existing avatar conventions (deterministic colour fallback, anonymized-user handling, User #<id> fallback when the creator is no longer in the guild).
  • Manual save button on document titles.
  • Version history for uploaded file documents. Uploaded files (PDFs, Office docs, images) now keep a version history instead of being a single replaceable blob. A "Version history" popover on the file viewer lists every version (newest first) with its upload time; selecting an older version views or downloads it, and an inline trash button on each row deletes it. Anyone with write access can upload a new version (it must match the original file type); only the document owner can delete versions. Deleting the current version rolls back to the previous one; the last remaining version can't be deleted (delete the document instead). Old version blobs are cleaned up when the document is purged.

Changed

  • Guild deletion is harder to trigger by accident. The delete control moved off the first guild-settings tab into its own dedicated "Danger zone" tab, which now spells out exactly what deletion removes (initiatives, projects, tasks, documents, members, invites, and settings). Confirming requires typing DELETE GUILD <NAME> (the whole phrase uppercased) and re-entering your password; OIDC-only accounts, which have no password, are asked only for the phrase.
  • Active Guild highlight. The active guild is now highlighted by a more subtle bottom pill when on a home page (My Tasks, My Documents, etc), to reduce confusion on where you are in the app.

Downloads

Android App

Download the APK from the assets below and install on your Android device.

Docker Image

docker pull morelitea/initiative:0.47.0

Or use latest tag. View on Docker Hub.

Assets 3
Loading