Release v1.4.2

🎉 Release v1.4.2

📦 Docker Images

# Docker Hub
docker pull agigante80/actual-sync:1.4.2

# GitHub Container Registry
docker pull ghcr.io/agigante80/actual-sync:1.4.2

📝 Changelog

• ci: auto-publish GitHub release on every main push (2b8c7ae)
• chore: bump version to 1.4.2 (20da104)
• chore(ci)(deps): bump codecov/codecov-action from 5 to 6 (#43) (9078cb8)
• chore(ci)(deps): bump docker/build-push-action from 5 to 7 (#37) (dc2bc69)
• chore(ci)(deps): bump docker/setup-qemu-action from 3 to 4 (#36) (62e2fb9)
• chore(ci)(deps): bump docker/setup-buildx-action from 3 to 4 (#35) (c05ef57)
• chore(ci)(deps): bump docker/login-action from 3 to 4 (#34) (4ee49df)
• chore(deps): bump dotenv, jest, puppeteer; refresh lock file (819da67)
• chore(deps): bump ajv, express-rate-limit, and nodemailer (197bd97)
• fix(ci): rework dependency-update workflow to avoid PR creation permission (3ddb409)
• fix: retry downloadBudget once before clearing cache on failure (69bf6fa)
• docs: add NAS deployment command to CLAUDE.md (690d7bf)
• fix(tests): add actualApiError branch coverage + pre-push test gate (fb7724d)
• feat(agents): promote dep-auditor from command to structured agent (5445b66)
• docs: hardcode no-npm-overrides rule across project guidance files (1ed9563)
• chore(deps): bump @actual-app/api from 26.1.0 to 26.4.0 (d906d7c)
• fix: clear dataDir on download failure and call loadBudget explicitly for resetClock:true (ef0ca75)
• Revert "fix: explicitly load budget after download when resetClock:true" (348bf24)
• fix: explicitly load budget after download when resetClock:true (ff2c1e7)
• fix: downgrade GitHub Actions versions to stable releases (2f66037)
• docs: add Git workflow and merge policy to copilot instructions (eb34098)
• chore(deps)(deps): bump @actual-app/api from 25.12.0 to 26.1.0 (f65957f)
• fix: update qs dependency to resolve DoS vulnerability (GHSA-6rw7-vpxm-498p) (4e4e367)

🔒 Security

This release has been scanned for vulnerabilities. Check the Security tab for details.

What's Changed

• chore(deps)(deps): bump @actual-app/api from 25.12.0 to 26.1.0 by @dependabot[bot] in #18
• fix: clear dataDir on download failure and call loadBudget explicitly for resetClock:true (v1.4.1) by @agigante80 in #46
• chore(ci)(deps): bump docker/login-action from 3 to 4 by @dependabot[bot] in #34
• chore(ci)(deps): bump docker/setup-buildx-action from 3 to 4 by @dependabot[bot] in #35
• chore(ci)(deps): bump docker/setup-qemu-action from 3 to 4 by @dependabot[bot] in #36
• chore(ci)(deps): bump docker/build-push-action from 5 to 7 by @dependabot[bot] in #37
• chore(ci)(deps): bump codecov/codecov-action from 5 to 6 by @dependabot[bot] in #43
• chore(deps): security and dependency upgrades (session 2026-04-16) by @agigante80 in #58

New Contributors

• @agigante80 made their first contribution in #46

Full Changelog: v1.4.0...v1.4.2