v0.54.2

Fixed

• Notifications work again. The 0.54.0 least-privilege database refactor revoked the bare login role's access to the notifications and push_tokens tables, but the notification and push-token endpoints still ran on that role — every request failed, so the bell showed no notifications (the backlog looked cleared; it was never deleted and reappears with this fix), nothing could be marked read, and mobile push registration failed. These endpoints now run on the authenticated platform path like the rest of the API, and unregistering a push token is scoped to the calling user's own tokens.
• Permanently purging a document (manual trash purge or the retention worker) now unresolves wikilinks pointing at it in every other document — including trashed ones — instead of leaving links that reference a document that no longer exists.
• Expired sign-in and verification tokens are now cleaned up automatically by an hourly background sweep; previously expired rows accumulated indefinitely.
• Deleted (anonymized) users now display consistently as "Deleted user" everywhere; several screens previously showed a raw email or "Anonymous".
• Anonymizing a user now scrubs their display name out of content that embedded it as text — @-mentions in comments, mention nodes in documents, and pending assignment-digest emails — instead of leaving the name readable after the account was "forgotten".
• Hard-deleting an already-anonymized user now removes their guild-scoped data (task assignments, sharing grants, authored-content reassignment, …). Anonymizing drops guild memberships, and the deletion sweep only visited membership guilds, so it silently skipped everything.

---

Downloads

Android App

No new app build this release — installed apps update automatically over the air on next launch.

Docker Image

docker pull morelitea/initiative:0.54.2

Or use latest tag. View on Docker Hub.