v1.0.14
Dependency & base-image maintenance release — no functional changes. Batches the merged Dependabot updates.
- Frontend libraries (#81): TipTap 3.27.3, lucide-react 1.24.0, Recharts 3.9.2, Vite 8.1.4, plus axios/i18next/other minor & patch bumps. TypeScript is intentionally held at 6.x — the 7.0 native rewrite moves the compiler API to unstable entrypoints and breaks our i18n scanner + typecheck, so it is deferred to a dedicated migration (Dependabot now ignores the TypeScript major).
- Base-image security (#59, #82): frontend
nodebuild image andnginx:alpineruntime image bumped to current digests; the nginx digest picks uplibexpat,c-aresandcurl/libcurlCVE fixes. - Backend (#60):
commons-compress1.26.0 → 1.28.0. - CI actions (#62): harden-runner 2.20.0, setup-java 5.5.0, setup-node 7.0.0, codeql-action 4.37.0.
Docker images: kwolfgang/taskowolf-backend:1.0.14 and kwolfgang/taskowolf-frontend:1.0.14.