v0.4.0
Immutable
release. Only release title and notes can be modified.
0.4.0 (2026-08-24)
Features
- backend unit test scaffolding + coverage script + CI wiring (#73) (2a71836)
- Codecov integration with 85% patch + project gates (#75) (de88e32)
- forgot/reset password (#82) (62e04ed)
- frontend unit test scaffolding (Vitest) + coverage script + CI wiring (#74) (cbff7a8)
- invite data model and accept flow (backend) (#68) (ad4f629)
- invite UI (send + accept) (#69) (7131184)
- Playwright e2e scaffolding + core-flow coverage (#78) (64f888c)
- self-serve password set/change on existing profiles (#70) (63918e2)
- SMTP config and mailer service (#66) (f66f3aa)
- split admin into system-admin and household-owner (hoh) roles (#65) (21e3239)
- wire go_notify_yourself for admin notifications (#67) (10e4990)
Bug Fixes
- allow Docker backend build to fetch a newer Go toolchain (2e986ba)
- decouple auth cookie Secure flag from GIN_MODE via COOKIE_SECURE (#81) (3ce6f06)
- pin a distinct Compose project name for the e2e stack (a402c38)
- reject (not silently strip) CRLF in mailer To/Subject (89d1ed2)
- sanitize SMTP headers against email content injection (#84) (419fcb4)