Repository navigation
v1.7.1
A maintenance release with one real data fix, a new AI provider, and Docker
images that finally run what the project tests.
Your export now contains your whole family
"Export data" used to leave half of a family behind without saying so. It read
11 tables and silently skipped the rewards module (points, settings, savings
goals), family notes, recurring expenses and their monthly checks, Kakeibo,
shopping templates, family posts and who has read them, and the skipped or
edited occurrences of recurring appointments. It now covers all of them.
The file never contains passwords, tokens, invitations, integration or AI
credentials. A restore maps accounts by e-mail, checks that every reference
belongs to the family doing the import, and can be run twice without creating
duplicates. Exports made by earlier versions still import.
Along the way the import got harder to misuse: its large body is only read
after the login and parent checks, a single empty value no longer aborts a whole
restore, and restored posts follow the same rules as posts written in the app.
Designed and built by @thecybermacgyver (#100).
If you keep exports as backups, take a fresh one after upgrading: exports
made before 1.7.1 are missing the modules listed above.
Google Gemini
Gemini joins Ollama, OpenAI-compatible and Anthropic as an AI provider (#98),
also by @thecybermacgyver. The key travels in a header, never in the URL, and a
wrong key is reported as a wrong key.
Docker images match the lockfile
The Dockerfiles never copied package-lock.json, so every image resolved its
dependencies from the registry on the day it was built: a build of 1.7.0 today
ships express 4.22.3 and pg 8.23.0, versions the project never tested. Images
now install exactly what the lockfile pins (#101).
The same change fixes builds on hosting platforms that set NODE_ENV=production
while building, which used to stop at tsc: not found. Reported by
@WiserForHire in #99. The server image also shrinks from 72 MB to 61 MB.
The README now shows how to run the published images instead of building:
ghcr.io/nexaflowfrance/openfamily-server and openfamily-client, for amd64
and arm64.
Security
nodemailer 9.1.1 closes a moderate advisory about recipient-domain validation
and RFC 5322 comments (#97).
Upgrading
One migration (027) runs on startup and adds Gemini to the allowed AI providers.
Nothing to do by hand.
If you use the Android app with your own server, update the server as well:
selecting Gemini needs the new provider on the server side.
Full Changelog: v1.7.0...v1.7.1
What's Changed
- build(deps): bump nodemailer from 9.0.5 to 9.1.1 by @dependabot[bot] in #97
- feat(ai): Google Gemini as an AI provider (#85) by @QuentinCazier in #98
- feat(data): complete portable export and import (format 2.0) by @QuentinCazier in #100
- fix(docker): build from the lockfile, and survive NODE_ENV=production (#99) by @NexaFlowFrance in #101
- chore(release): 1.7.1 by @QuentinCazier in #102
New Contributors
- @QuentinCazier made their first contribution in #98
Full Changelog: v1.7.0...v1.7.1
What's Changed
- build(deps): bump nodemailer from 9.0.5 to 9.1.1 by @dependabot[bot] in #97
- feat(ai): Google Gemini as an AI provider (#85) by @QuentinCazier in #98
- feat(data): complete portable export and import (format 2.0) by @QuentinCazier in #100
- fix(docker): build from the lockfile, and survive NODE_ENV=production (#99) by @NexaFlowFrance in #101
- chore(release): 1.7.1 by @QuentinCazier in #102
New Contributors
- @QuentinCazier made their first contribution in #98
Full Changelog: v1.7.0...v1.7.1
