Releases: apauldev/Yotara
Release list
v0.63.1
Changelog
All notable changes to this project will be documented in this file. See commit-and-tag-version for commit guidelines.
0.63.1 (2026-07-07)
Bug Fixes
- self-host Material Symbols class so icons don't break when Google Fonts is slow (3bff681)
0.63.0 (2026-07-07)
Features
- add marketing website (yotara-website) (d6ccfa5)
- rebuild homepage with comparison, 6 feature cards, three steps, CTA (9ca0212)
Bug Fixes
- add browser globals to eslint config for website JS files (cd02eaf)
- clear body scroll lock on desktop resize (04104d8)
- correct third-party services claim in privacy policy (ba8f54b)
- improve site copy, fix comparison card layout, update GDPR banner (6449253)
- use /privacy/ as canonical URL (served URL) (8dc6b1c)
- use clean URLs, remove _redirects, restructure privacy page (0e6d796)
Documentation
- add website link to README (d281496)
0.62.3 (2026-07-06)
Documentation
- add CONTRIBUTING.md, standardize refresh() naming, mark Sprint 4 complete (9d5a91a)
Tests
- add missing coverage for version() and saveProject() (ed59c83)
0.62.2 (2026-07-06)
Chores
- deps: bump fastify from 5.8.1 to 5.9.0 (fbe7dbd)
- deps: update non-Angular packages from dependabot (fbb1f5e)
- set minimum Node engine to >=22.22.1 for lint-staged v17 compatibility (b3e6eb5)
0.62.1 (2026-07-04)
Bug Fixes
- test: verify seeding via direct DB query to avoid false positive (2758272)
Documentation
- add Phase 1 backend route coverage plan (3ebfb5b)
Chores
- remove backendrouteplan.md (54aa0f9)
Tests
- api: add route-level coverage for /me, /health, and / (0d38595)
0.62.0 (2026-07-03)
Features
- server-side search with SQL relevance scoring (fc87667)
Bug Fixes
- api: include status in search WHERE pre-filter (4d00cf6)
- api: increase lockout window to 10s in recovery test to survive CI latency (738979d)
- api: use setLockoutConfig to prevent CI flakiness from concurrent env-var clobbering (4d33bda)
- e2e: create enough tasks to trigger pagination visibility (126623c)
- e2e: use correct page-1 expectation for pagination test (b938438)
- e2e: use count-based assertion for Tasks tab pagination (78971d8)
- e2e: wait for URL to confirm Tasks tab navigation (cb5c805)
- frontend: always fetch allTaskResults when query changes (8127bda)
- prevent pagination reset on tab switch and fix test assertions (fdfa076)
- test: use 1s lockout window + 60s timeout for CI reliability (73abe5e)
Tests
- api: add coverage for task-without-project search path (94bbf94)
- api: fix coverage test — tasks auto-assign to Inbox project (81f5133)
- api: poll for lockout expiry instead of fixed timeout (f28ffdf)
0.61.1 (2026-07-02)
Bug Fixes
- replace N+1 label queries with batch fetch in task listing (f823041)
Documentation
- added new issues + project instead of docs (cf0bed2)
0.61.0 (2026-06-27)
Features
- forgot/reset password flow with email rate limiting (d62d34c)
Documentation
- update ARCHITECTURE.md with password-reset hardening and e2e fix (82e1550)
- update PLAN.md with CI fixes and root causes (d3ba4cd), closes #9 #10
Tests
- cover auth.ts sendResetPassword and sendVerificationEmail callbacks (a6b685b)
- improve patch coverage for password-reset feature (8b1e0d5)
0.60.2 (2026-06-23)
Bug Fixes
- add @types/node, add e2e:wait script, fix CI wait-on invocation (5ec1f6e)
- use pnpm --filter exec wait-on instead of pnpm exec in CI (6866868)
- use pnpm exec wait-on instead of pnpm --filter wait-on in CI (9a2cfe7)
Tests
- add comprehensive e2e test suite (55 tests across 13 spec files) (c369cb3)
0.60.1 (2026-06-22)
Bug Fixes
- escape html in highlight pipe to prevent xss (8c983e7)
Documentation
- add admin and notifications implementation plan (2a43eea)
- fix SW location — must be in public/ not src/ for Angular build (4db49df)
- guard ALTER TABLE with PRAGMA table_info check (2d9711f)
- update Phase 4 to use per-request grace check in requireAuthenticatedUser (e5debcd)
0.60.0 (2026-06-19)
Features
- rate-limiting: add global rate limiting and per-email password lockout (e5c06eb)
Bug Fixes
v0.63.0
Changelog
All notable changes to this project will be documented in this file. See commit-and-tag-version for commit guidelines.
0.63.0 (2026-07-07)
Features
- add marketing website (yotara-website) (d6ccfa5)
- rebuild homepage with comparison, 6 feature cards, three steps, CTA (9ca0212)
Bug Fixes
- add browser globals to eslint config for website JS files (cd02eaf)
- clear body scroll lock on desktop resize (04104d8)
- correct third-party services claim in privacy policy (ba8f54b)
- improve site copy, fix comparison card layout, update GDPR banner (6449253)
- use /privacy/ as canonical URL (served URL) (8dc6b1c)
- use clean URLs, remove _redirects, restructure privacy page (0e6d796)
Documentation
- add website link to README (d281496)
0.62.3 (2026-07-06)
Documentation
- add CONTRIBUTING.md, standardize refresh() naming, mark Sprint 4 complete (9d5a91a)
Tests
- add missing coverage for version() and saveProject() (ed59c83)
0.62.2 (2026-07-06)
Chores
- deps: bump fastify from 5.8.1 to 5.9.0 (fbe7dbd)
- deps: update non-Angular packages from dependabot (fbb1f5e)
- set minimum Node engine to >=22.22.1 for lint-staged v17 compatibility (b3e6eb5)
0.62.1 (2026-07-04)
Bug Fixes
- test: verify seeding via direct DB query to avoid false positive (2758272)
Documentation
- add Phase 1 backend route coverage plan (3ebfb5b)
Chores
- remove backendrouteplan.md (54aa0f9)
Tests
- api: add route-level coverage for /me, /health, and / (0d38595)
0.62.0 (2026-07-03)
Features
- server-side search with SQL relevance scoring (fc87667)
Bug Fixes
- api: include status in search WHERE pre-filter (4d00cf6)
- api: increase lockout window to 10s in recovery test to survive CI latency (738979d)
- api: use setLockoutConfig to prevent CI flakiness from concurrent env-var clobbering (4d33bda)
- e2e: create enough tasks to trigger pagination visibility (126623c)
- e2e: use correct page-1 expectation for pagination test (b938438)
- e2e: use count-based assertion for Tasks tab pagination (78971d8)
- e2e: wait for URL to confirm Tasks tab navigation (cb5c805)
- frontend: always fetch allTaskResults when query changes (8127bda)
- prevent pagination reset on tab switch and fix test assertions (fdfa076)
- test: use 1s lockout window + 60s timeout for CI reliability (73abe5e)
Tests
- api: add coverage for task-without-project search path (94bbf94)
- api: fix coverage test — tasks auto-assign to Inbox project (81f5133)
- api: poll for lockout expiry instead of fixed timeout (f28ffdf)
0.61.1 (2026-07-02)
Bug Fixes
- replace N+1 label queries with batch fetch in task listing (f823041)
Documentation
- added new issues + project instead of docs (cf0bed2)
0.61.0 (2026-06-27)
Features
- forgot/reset password flow with email rate limiting (d62d34c)
Documentation
- update ARCHITECTURE.md with password-reset hardening and e2e fix (82e1550)
- update PLAN.md with CI fixes and root causes (d3ba4cd), closes #9 #10
Tests
- cover auth.ts sendResetPassword and sendVerificationEmail callbacks (a6b685b)
- improve patch coverage for password-reset feature (8b1e0d5)
0.60.2 (2026-06-23)
Bug Fixes
- add @types/node, add e2e:wait script, fix CI wait-on invocation (5ec1f6e)
- use pnpm --filter exec wait-on instead of pnpm exec in CI (6866868)
- use pnpm exec wait-on instead of pnpm --filter wait-on in CI (9a2cfe7)
Tests
- add comprehensive e2e test suite (55 tests across 13 spec files) (c369cb3)
0.60.1 (2026-06-22)
Bug Fixes
- escape html in highlight pipe to prevent xss (8c983e7)
Documentation
- add admin and notifications implementation plan (2a43eea)
- fix SW location — must be in public/ not src/ for Angular build (4db49df)
- guard ALTER TABLE with PRAGMA table_info check (2d9711f)
- update Phase 4 to use per-request grace check in requireAuthenticatedUser (e5debcd)
0.60.0 (2026-06-19)
Features
- rate-limiting: add global rate limiting and per-email password lockout (e5c06eb)
Bug Fixes
- login-lockout: merge stale-row test into main test to avoid module-caching conflict (c79e725)
- login-lockout: prune stale pre-lockout attempt rows (f240b19)
- rate-limiting: use trustProxy for authoritative client IP (bb1744f)
- test: increase recovery test lockout window to avoid CI timing flake (ae22d2c)
Documentation
- arch: mark rate limiting as completed ([530f526](530f526fa2e015b2775c6...
v0.62.3
Changelog
All notable changes to this project will be documented in this file. See commit-and-tag-version for commit guidelines.
0.62.3 (2026-07-06)
Documentation
- add CONTRIBUTING.md, standardize refresh() naming, mark Sprint 4 complete (9d5a91a)
Tests
- add missing coverage for version() and saveProject() (ed59c83)
0.62.2 (2026-07-06)
Chores
- deps: bump fastify from 5.8.1 to 5.9.0 (fbe7dbd)
- deps: update non-Angular packages from dependabot (fbb1f5e)
- set minimum Node engine to >=22.22.1 for lint-staged v17 compatibility (b3e6eb5)
0.62.1 (2026-07-04)
Bug Fixes
- test: verify seeding via direct DB query to avoid false positive (2758272)
Documentation
- add Phase 1 backend route coverage plan (3ebfb5b)
Chores
- remove backendrouteplan.md (54aa0f9)
Tests
- api: add route-level coverage for /me, /health, and / (0d38595)
0.62.0 (2026-07-03)
Features
- server-side search with SQL relevance scoring (fc87667)
Bug Fixes
- api: include status in search WHERE pre-filter (4d00cf6)
- api: increase lockout window to 10s in recovery test to survive CI latency (738979d)
- api: use setLockoutConfig to prevent CI flakiness from concurrent env-var clobbering (4d33bda)
- e2e: create enough tasks to trigger pagination visibility (126623c)
- e2e: use correct page-1 expectation for pagination test (b938438)
- e2e: use count-based assertion for Tasks tab pagination (78971d8)
- e2e: wait for URL to confirm Tasks tab navigation (cb5c805)
- frontend: always fetch allTaskResults when query changes (8127bda)
- prevent pagination reset on tab switch and fix test assertions (fdfa076)
- test: use 1s lockout window + 60s timeout for CI reliability (73abe5e)
Tests
- api: add coverage for task-without-project search path (94bbf94)
- api: fix coverage test — tasks auto-assign to Inbox project (81f5133)
- api: poll for lockout expiry instead of fixed timeout (f28ffdf)
0.61.1 (2026-07-02)
Bug Fixes
- replace N+1 label queries with batch fetch in task listing (f823041)
Documentation
- added new issues + project instead of docs (cf0bed2)
0.61.0 (2026-06-27)
Features
- forgot/reset password flow with email rate limiting (d62d34c)
Documentation
- update ARCHITECTURE.md with password-reset hardening and e2e fix (82e1550)
- update PLAN.md with CI fixes and root causes (d3ba4cd), closes #9 #10
Tests
- cover auth.ts sendResetPassword and sendVerificationEmail callbacks (a6b685b)
- improve patch coverage for password-reset feature (8b1e0d5)
0.60.2 (2026-06-23)
Bug Fixes
- add @types/node, add e2e:wait script, fix CI wait-on invocation (5ec1f6e)
- use pnpm --filter exec wait-on instead of pnpm exec in CI (6866868)
- use pnpm exec wait-on instead of pnpm --filter wait-on in CI (9a2cfe7)
Tests
- add comprehensive e2e test suite (55 tests across 13 spec files) (c369cb3)
0.60.1 (2026-06-22)
Bug Fixes
- escape html in highlight pipe to prevent xss (8c983e7)
Documentation
- add admin and notifications implementation plan (2a43eea)
- fix SW location — must be in public/ not src/ for Angular build (4db49df)
- guard ALTER TABLE with PRAGMA table_info check (2d9711f)
- update Phase 4 to use per-request grace check in requireAuthenticatedUser (e5debcd)
0.60.0 (2026-06-19)
Features
- rate-limiting: add global rate limiting and per-email password lockout (e5c06eb)
Bug Fixes
- login-lockout: merge stale-row test into main test to avoid module-caching conflict (c79e725)
- login-lockout: prune stale pre-lockout attempt rows (f240b19)
- rate-limiting: use trustProxy for authoritative client IP (bb1744f)
- test: increase recovery test lockout window to avoid CI timing flake (ae22d2c)
Documentation
- arch: mark rate limiting as completed (530f526)
Tests
- add coverage for login component validation, errors, and lockout (374d89a)
0.59.7 (2026-06-18)
Bug Fixes
- tasks: align calendar date handling (a4c8094)
- update test to match PATCH URL with tz query param (b6e233b)
- use timezone-aware date when restoring tasks to correct bucket (dfe4194)
Tests
- add coverage for tz-aware task restore path (89f06f7)
0.59.6 (2026-06-18)
Bug Fixes
v0.62.2
Changelog
All notable changes to this project will be documented in this file. See commit-and-tag-version for commit guidelines.
0.62.2 (2026-07-06)
Chores
- deps: bump fastify from 5.8.1 to 5.9.0 (fbe7dbd)
- deps: update non-Angular packages from dependabot (fbb1f5e)
- set minimum Node engine to >=22.22.1 for lint-staged v17 compatibility (b3e6eb5)
0.62.1 (2026-07-04)
Bug Fixes
- test: verify seeding via direct DB query to avoid false positive (2758272)
Documentation
- add Phase 1 backend route coverage plan (3ebfb5b)
Chores
- remove backendrouteplan.md (54aa0f9)
Tests
- api: add route-level coverage for /me, /health, and / (0d38595)
0.62.0 (2026-07-03)
Features
- server-side search with SQL relevance scoring (fc87667)
Bug Fixes
- api: include status in search WHERE pre-filter (4d00cf6)
- api: increase lockout window to 10s in recovery test to survive CI latency (738979d)
- api: use setLockoutConfig to prevent CI flakiness from concurrent env-var clobbering (4d33bda)
- e2e: create enough tasks to trigger pagination visibility (126623c)
- e2e: use correct page-1 expectation for pagination test (b938438)
- e2e: use count-based assertion for Tasks tab pagination (78971d8)
- e2e: wait for URL to confirm Tasks tab navigation (cb5c805)
- frontend: always fetch allTaskResults when query changes (8127bda)
- prevent pagination reset on tab switch and fix test assertions (fdfa076)
- test: use 1s lockout window + 60s timeout for CI reliability (73abe5e)
Tests
- api: add coverage for task-without-project search path (94bbf94)
- api: fix coverage test — tasks auto-assign to Inbox project (81f5133)
- api: poll for lockout expiry instead of fixed timeout (f28ffdf)
0.61.1 (2026-07-02)
Bug Fixes
- replace N+1 label queries with batch fetch in task listing (f823041)
Documentation
- added new issues + project instead of docs (cf0bed2)
0.61.0 (2026-06-27)
Features
- forgot/reset password flow with email rate limiting (d62d34c)
Documentation
- update ARCHITECTURE.md with password-reset hardening and e2e fix (82e1550)
- update PLAN.md with CI fixes and root causes (d3ba4cd), closes #9 #10
Tests
- cover auth.ts sendResetPassword and sendVerificationEmail callbacks (a6b685b)
- improve patch coverage for password-reset feature (8b1e0d5)
0.60.2 (2026-06-23)
Bug Fixes
- add @types/node, add e2e:wait script, fix CI wait-on invocation (5ec1f6e)
- use pnpm --filter exec wait-on instead of pnpm exec in CI (6866868)
- use pnpm exec wait-on instead of pnpm --filter wait-on in CI (9a2cfe7)
Tests
- add comprehensive e2e test suite (55 tests across 13 spec files) (c369cb3)
0.60.1 (2026-06-22)
Bug Fixes
- escape html in highlight pipe to prevent xss (8c983e7)
Documentation
- add admin and notifications implementation plan (2a43eea)
- fix SW location — must be in public/ not src/ for Angular build (4db49df)
- guard ALTER TABLE with PRAGMA table_info check (2d9711f)
- update Phase 4 to use per-request grace check in requireAuthenticatedUser (e5debcd)
0.60.0 (2026-06-19)
Features
- rate-limiting: add global rate limiting and per-email password lockout (e5c06eb)
Bug Fixes
- login-lockout: merge stale-row test into main test to avoid module-caching conflict (c79e725)
- login-lockout: prune stale pre-lockout attempt rows (f240b19)
- rate-limiting: use trustProxy for authoritative client IP (bb1744f)
- test: increase recovery test lockout window to avoid CI timing flake (ae22d2c)
Documentation
- arch: mark rate limiting as completed (530f526)
Tests
- add coverage for login component validation, errors, and lockout (374d89a)
0.59.7 (2026-06-18)
Bug Fixes
- tasks: align calendar date handling (a4c8094)
- update test to match PATCH URL with tz query param (b6e233b)
- use timezone-aware date when restoring tasks to correct bucket (dfe4194)
Tests
- add coverage for tz-aware task restore path (89f06f7)
0.59.6 (2026-06-18)
Bug Fixes
- exclude overdue tasks from view=today (49135e9)
- exclude today/overdue tasks from view=upcoming (7db0df2)
- increase max pageSize from 100 to 1000 for allActiveTasks query (613ccc8)
- restore task-load error reporting for network and 5xx failures (4df5786)
- stop subtasks from consuming per-view page rows (407177a)
Refactoring
v0.62.1
Changelog
All notable changes to this project will be documented in this file. See commit-and-tag-version for commit guidelines.
0.62.1 (2026-07-04)
Bug Fixes
- test: verify seeding via direct DB query to avoid false positive (2758272)
Documentation
- add Phase 1 backend route coverage plan (3ebfb5b)
Chores
- remove backendrouteplan.md (54aa0f9)
Tests
- api: add route-level coverage for /me, /health, and / (0d38595)
0.62.0 (2026-07-03)
Features
- server-side search with SQL relevance scoring (fc87667)
Bug Fixes
- api: include status in search WHERE pre-filter (4d00cf6)
- api: increase lockout window to 10s in recovery test to survive CI latency (738979d)
- api: use setLockoutConfig to prevent CI flakiness from concurrent env-var clobbering (4d33bda)
- e2e: create enough tasks to trigger pagination visibility (126623c)
- e2e: use correct page-1 expectation for pagination test (b938438)
- e2e: use count-based assertion for Tasks tab pagination (78971d8)
- e2e: wait for URL to confirm Tasks tab navigation (cb5c805)
- frontend: always fetch allTaskResults when query changes (8127bda)
- prevent pagination reset on tab switch and fix test assertions (fdfa076)
- test: use 1s lockout window + 60s timeout for CI reliability (73abe5e)
Tests
- api: add coverage for task-without-project search path (94bbf94)
- api: fix coverage test — tasks auto-assign to Inbox project (81f5133)
- api: poll for lockout expiry instead of fixed timeout (f28ffdf)
0.61.1 (2026-07-02)
Bug Fixes
- replace N+1 label queries with batch fetch in task listing (f823041)
Documentation
- added new issues + project instead of docs (cf0bed2)
0.61.0 (2026-06-27)
Features
- forgot/reset password flow with email rate limiting (d62d34c)
Documentation
- update ARCHITECTURE.md with password-reset hardening and e2e fix (82e1550)
- update PLAN.md with CI fixes and root causes (d3ba4cd), closes #9 #10
Tests
- cover auth.ts sendResetPassword and sendVerificationEmail callbacks (a6b685b)
- improve patch coverage for password-reset feature (8b1e0d5)
0.60.2 (2026-06-23)
Bug Fixes
- add @types/node, add e2e:wait script, fix CI wait-on invocation (5ec1f6e)
- use pnpm --filter exec wait-on instead of pnpm exec in CI (6866868)
- use pnpm exec wait-on instead of pnpm --filter wait-on in CI (9a2cfe7)
Tests
- add comprehensive e2e test suite (55 tests across 13 spec files) (c369cb3)
0.60.1 (2026-06-22)
Bug Fixes
- escape html in highlight pipe to prevent xss (8c983e7)
Documentation
- add admin and notifications implementation plan (2a43eea)
- fix SW location — must be in public/ not src/ for Angular build (4db49df)
- guard ALTER TABLE with PRAGMA table_info check (2d9711f)
- update Phase 4 to use per-request grace check in requireAuthenticatedUser (e5debcd)
0.60.0 (2026-06-19)
Features
- rate-limiting: add global rate limiting and per-email password lockout (e5c06eb)
Bug Fixes
- login-lockout: merge stale-row test into main test to avoid module-caching conflict (c79e725)
- login-lockout: prune stale pre-lockout attempt rows (f240b19)
- rate-limiting: use trustProxy for authoritative client IP (bb1744f)
- test: increase recovery test lockout window to avoid CI timing flake (ae22d2c)
Documentation
- arch: mark rate limiting as completed (530f526)
Tests
- add coverage for login component validation, errors, and lockout (374d89a)
0.59.7 (2026-06-18)
Bug Fixes
- tasks: align calendar date handling (a4c8094)
- update test to match PATCH URL with tz query param (b6e233b)
- use timezone-aware date when restoring tasks to correct bucket (dfe4194)
Tests
- add coverage for tz-aware task restore path (89f06f7)
0.59.6 (2026-06-18)
Bug Fixes
- exclude overdue tasks from view=today (49135e9)
- exclude today/overdue tasks from view=upcoming (7db0df2)
- increase max pageSize from 100 to 1000 for allActiveTasks query (613ccc8)
- restore task-load error reporting for network and 5xx failures (4df5786)
- stop subtasks from consuming per-view page rows (407177a)
Refactoring
- remove expand loop, stale signals, and client-side date helpers from TaskService (719e309)
Tests
- add coverage for timezone helpers, export endpoint, and per-view errors (d2b0c00)
0.59.5 (2026-06-17)
Bug Fixes
- decouple settings login-tips toggle from session-only dismissal (da93de4)
Chores
- add no-op test:coverage script to shared package ([f3c68ae](http...
v0.62.0
Changelog
All notable changes to this project will be documented in this file. See commit-and-tag-version for commit guidelines.
0.62.0 (2026-07-03)
Features
- server-side search with SQL relevance scoring (fc87667)
Bug Fixes
- api: include status in search WHERE pre-filter (4d00cf6)
- api: increase lockout window to 10s in recovery test to survive CI latency (738979d)
- api: use setLockoutConfig to prevent CI flakiness from concurrent env-var clobbering (4d33bda)
- e2e: create enough tasks to trigger pagination visibility (126623c)
- e2e: use correct page-1 expectation for pagination test (b938438)
- e2e: use count-based assertion for Tasks tab pagination (78971d8)
- e2e: wait for URL to confirm Tasks tab navigation (cb5c805)
- frontend: always fetch allTaskResults when query changes (8127bda)
- prevent pagination reset on tab switch and fix test assertions (fdfa076)
- test: use 1s lockout window + 60s timeout for CI reliability (73abe5e)
Tests
- api: add coverage for task-without-project search path (94bbf94)
- api: fix coverage test — tasks auto-assign to Inbox project (81f5133)
- api: poll for lockout expiry instead of fixed timeout (f28ffdf)
0.61.1 (2026-07-02)
Bug Fixes
- replace N+1 label queries with batch fetch in task listing (f823041)
Documentation
- added new issues + project instead of docs (cf0bed2)
0.61.0 (2026-06-27)
Features
- forgot/reset password flow with email rate limiting (d62d34c)
Documentation
- update ARCHITECTURE.md with password-reset hardening and e2e fix (82e1550)
- update PLAN.md with CI fixes and root causes (d3ba4cd), closes #9 #10
Tests
- cover auth.ts sendResetPassword and sendVerificationEmail callbacks (a6b685b)
- improve patch coverage for password-reset feature (8b1e0d5)
0.60.2 (2026-06-23)
Bug Fixes
- add @types/node, add e2e:wait script, fix CI wait-on invocation (5ec1f6e)
- use pnpm --filter exec wait-on instead of pnpm exec in CI (6866868)
- use pnpm exec wait-on instead of pnpm --filter wait-on in CI (9a2cfe7)
Tests
- add comprehensive e2e test suite (55 tests across 13 spec files) (c369cb3)
0.60.1 (2026-06-22)
Bug Fixes
- escape html in highlight pipe to prevent xss (8c983e7)
Documentation
- add admin and notifications implementation plan (2a43eea)
- fix SW location — must be in public/ not src/ for Angular build (4db49df)
- guard ALTER TABLE with PRAGMA table_info check (2d9711f)
- update Phase 4 to use per-request grace check in requireAuthenticatedUser (e5debcd)
0.60.0 (2026-06-19)
Features
- rate-limiting: add global rate limiting and per-email password lockout (e5c06eb)
Bug Fixes
- login-lockout: merge stale-row test into main test to avoid module-caching conflict (c79e725)
- login-lockout: prune stale pre-lockout attempt rows (f240b19)
- rate-limiting: use trustProxy for authoritative client IP (bb1744f)
- test: increase recovery test lockout window to avoid CI timing flake (ae22d2c)
Documentation
- arch: mark rate limiting as completed (530f526)
Tests
- add coverage for login component validation, errors, and lockout (374d89a)
0.59.7 (2026-06-18)
Bug Fixes
- tasks: align calendar date handling (a4c8094)
- update test to match PATCH URL with tz query param (b6e233b)
- use timezone-aware date when restoring tasks to correct bucket (dfe4194)
Tests
- add coverage for tz-aware task restore path (89f06f7)
0.59.6 (2026-06-18)
Bug Fixes
- exclude overdue tasks from view=today (49135e9)
- exclude today/overdue tasks from view=upcoming (7db0df2)
- increase max pageSize from 100 to 1000 for allActiveTasks query (613ccc8)
- restore task-load error reporting for network and 5xx failures (4df5786)
- stop subtasks from consuming per-view page rows (407177a)
Refactoring
- remove expand loop, stale signals, and client-side date helpers from TaskService (719e309)
Tests
- add coverage for timezone helpers, export endpoint, and per-view errors (d2b0c00)
0.59.5 (2026-06-17)
Bug Fixes
- decouple settings login-tips toggle from session-only dismissal (da93de4)
Chores
- add no-op test:coverage script to shared package (f3c68ae)
Refactoring
- migrate application preferences to signal-based store (1c0f694)
Tests
- fix regressions in PersonalShellComponent and PreferencesStore (7243c8d)
0.59.4 (2026-06-16)
Bug Fixes
v0.61.1
Changelog
All notable changes to this project will be documented in this file. See commit-and-tag-version for commit guidelines.
0.61.1 (2026-07-02)
Bug Fixes
- replace N+1 label queries with batch fetch in task listing (f823041)
Documentation
- added new issues + project instead of docs (cf0bed2)
0.61.0 (2026-06-27)
Features
- forgot/reset password flow with email rate limiting (d62d34c)
Documentation
- update ARCHITECTURE.md with password-reset hardening and e2e fix (82e1550)
- update PLAN.md with CI fixes and root causes (d3ba4cd), closes #9 #10
Tests
- cover auth.ts sendResetPassword and sendVerificationEmail callbacks (a6b685b)
- improve patch coverage for password-reset feature (8b1e0d5)
0.60.2 (2026-06-23)
Bug Fixes
- add @types/node, add e2e:wait script, fix CI wait-on invocation (5ec1f6e)
- use pnpm --filter exec wait-on instead of pnpm exec in CI (6866868)
- use pnpm exec wait-on instead of pnpm --filter wait-on in CI (9a2cfe7)
Tests
- add comprehensive e2e test suite (55 tests across 13 spec files) (c369cb3)
0.60.1 (2026-06-22)
Bug Fixes
- escape html in highlight pipe to prevent xss (8c983e7)
Documentation
- add admin and notifications implementation plan (2a43eea)
- fix SW location — must be in public/ not src/ for Angular build (4db49df)
- guard ALTER TABLE with PRAGMA table_info check (2d9711f)
- update Phase 4 to use per-request grace check in requireAuthenticatedUser (e5debcd)
0.60.0 (2026-06-19)
Features
- rate-limiting: add global rate limiting and per-email password lockout (e5c06eb)
Bug Fixes
- login-lockout: merge stale-row test into main test to avoid module-caching conflict (c79e725)
- login-lockout: prune stale pre-lockout attempt rows (f240b19)
- rate-limiting: use trustProxy for authoritative client IP (bb1744f)
- test: increase recovery test lockout window to avoid CI timing flake (ae22d2c)
Documentation
- arch: mark rate limiting as completed (530f526)
Tests
- add coverage for login component validation, errors, and lockout (374d89a)
0.59.7 (2026-06-18)
Bug Fixes
- tasks: align calendar date handling (a4c8094)
- update test to match PATCH URL with tz query param (b6e233b)
- use timezone-aware date when restoring tasks to correct bucket (dfe4194)
Tests
- add coverage for tz-aware task restore path (89f06f7)
0.59.6 (2026-06-18)
Bug Fixes
- exclude overdue tasks from view=today (49135e9)
- exclude today/overdue tasks from view=upcoming (7db0df2)
- increase max pageSize from 100 to 1000 for allActiveTasks query (613ccc8)
- restore task-load error reporting for network and 5xx failures (4df5786)
- stop subtasks from consuming per-view page rows (407177a)
Refactoring
- remove expand loop, stale signals, and client-side date helpers from TaskService (719e309)
Tests
- add coverage for timezone helpers, export endpoint, and per-view errors (d2b0c00)
0.59.5 (2026-06-17)
Bug Fixes
- decouple settings login-tips toggle from session-only dismissal (da93de4)
Chores
- add no-op test:coverage script to shared package (f3c68ae)
Refactoring
- migrate application preferences to signal-based store (1c0f694)
Tests
- fix regressions in PersonalShellComponent and PreferencesStore (7243c8d)
0.59.4 (2026-06-16)
Bug Fixes
- drop explicit version from pnpm/action-setup (fae438b)
- pin pnpm version and fix prettier formatting (af305ee)
Chores
- deps-dev: bump drizzle-kit from 0.31.9 to 0.31.10 (818ec14)
- deps-dev: bump prettier from 3.8.1 to 3.8.4 (124de94)
- deps-dev: bump the commitlint group across 1 directory with 2 updates (89c532b)
- deps-dev: bump the eslint group across 1 directory with 2 updates (2639724)
- deps: bump dompurify from 3.4.7 to 3.4.8 (7edffa6)
- deps: bump tailwind-merge from 3.5.0 to 3.6.0 (dd08189)
- regenerate lockfile after dependabot bumps (825d829)
0.59.3 (2026-06-16)
Bug Fixes
- use absolute URL for CLA link in PR template and contributing guide (198a973)
Chores
0.59.2 (2026-06-15)
Documentation
0.59.1 (2026-06-15)
Bug Fixes
v0.61.0
Changelog
All notable changes to this project will be documented in this file. See commit-and-tag-version for commit guidelines.
0.61.0 (2026-06-27)
Features
- forgot/reset password flow with email rate limiting (d62d34c)
Documentation
- update ARCHITECTURE.md with password-reset hardening and e2e fix (82e1550)
- update PLAN.md with CI fixes and root causes (d3ba4cd), closes #9 #10
Tests
- cover auth.ts sendResetPassword and sendVerificationEmail callbacks (a6b685b)
- improve patch coverage for password-reset feature (8b1e0d5)
0.60.2 (2026-06-23)
Bug Fixes
- add @types/node, add e2e:wait script, fix CI wait-on invocation (5ec1f6e)
- use pnpm --filter exec wait-on instead of pnpm exec in CI (6866868)
- use pnpm exec wait-on instead of pnpm --filter wait-on in CI (9a2cfe7)
Tests
- add comprehensive e2e test suite (55 tests across 13 spec files) (c369cb3)
0.60.1 (2026-06-22)
Bug Fixes
- escape html in highlight pipe to prevent xss (8c983e7)
Documentation
- add admin and notifications implementation plan (2a43eea)
- fix SW location — must be in public/ not src/ for Angular build (4db49df)
- guard ALTER TABLE with PRAGMA table_info check (2d9711f)
- update Phase 4 to use per-request grace check in requireAuthenticatedUser (e5debcd)
0.60.0 (2026-06-19)
Features
- rate-limiting: add global rate limiting and per-email password lockout (e5c06eb)
Bug Fixes
- login-lockout: merge stale-row test into main test to avoid module-caching conflict (c79e725)
- login-lockout: prune stale pre-lockout attempt rows (f240b19)
- rate-limiting: use trustProxy for authoritative client IP (bb1744f)
- test: increase recovery test lockout window to avoid CI timing flake (ae22d2c)
Documentation
- arch: mark rate limiting as completed (530f526)
Tests
- add coverage for login component validation, errors, and lockout (374d89a)
0.59.7 (2026-06-18)
Bug Fixes
- tasks: align calendar date handling (a4c8094)
- update test to match PATCH URL with tz query param (b6e233b)
- use timezone-aware date when restoring tasks to correct bucket (dfe4194)
Tests
- add coverage for tz-aware task restore path (89f06f7)
0.59.6 (2026-06-18)
Bug Fixes
- exclude overdue tasks from view=today (49135e9)
- exclude today/overdue tasks from view=upcoming (7db0df2)
- increase max pageSize from 100 to 1000 for allActiveTasks query (613ccc8)
- restore task-load error reporting for network and 5xx failures (4df5786)
- stop subtasks from consuming per-view page rows (407177a)
Refactoring
- remove expand loop, stale signals, and client-side date helpers from TaskService (719e309)
Tests
- add coverage for timezone helpers, export endpoint, and per-view errors (d2b0c00)
0.59.5 (2026-06-17)
Bug Fixes
- decouple settings login-tips toggle from session-only dismissal (da93de4)
Chores
- add no-op test:coverage script to shared package (f3c68ae)
Refactoring
- migrate application preferences to signal-based store (1c0f694)
Tests
- fix regressions in PersonalShellComponent and PreferencesStore (7243c8d)
0.59.4 (2026-06-16)
Bug Fixes
- drop explicit version from pnpm/action-setup (fae438b)
- pin pnpm version and fix prettier formatting (af305ee)
Chores
- deps-dev: bump drizzle-kit from 0.31.9 to 0.31.10 (818ec14)
- deps-dev: bump prettier from 3.8.1 to 3.8.4 (124de94)
- deps-dev: bump the commitlint group across 1 directory with 2 updates (89c532b)
- deps-dev: bump the eslint group across 1 directory with 2 updates (2639724)
- deps: bump dompurify from 3.4.7 to 3.4.8 (7edffa6)
- deps: bump tailwind-merge from 3.5.0 to 3.6.0 (dd08189)
- regenerate lockfile after dependabot bumps (825d829)
0.59.3 (2026-06-16)
Bug Fixes
- use absolute URL for CLA link in PR template and contributing guide (198a973)
Chores
0.59.2 (2026-06-15)
Documentation
0.59.1 (2026-06-15)
Bug Fixes
- make docker-compose.yml respect .env overrides via variable interpolation (099b63d)
- remove root .env.example — no auto-load mechanism exists (2b99c23)
Documentation
v0.60.2
Changelog
All notable changes to this project will be documented in this file. See commit-and-tag-version for commit guidelines.
0.60.2 (2026-06-23)
Bug Fixes
- add @types/node, add e2e:wait script, fix CI wait-on invocation (5ec1f6e)
- use pnpm --filter exec wait-on instead of pnpm exec in CI (6866868)
- use pnpm exec wait-on instead of pnpm --filter wait-on in CI (9a2cfe7)
Tests
- add comprehensive e2e test suite (55 tests across 13 spec files) (c369cb3)
0.60.1 (2026-06-22)
Bug Fixes
- escape html in highlight pipe to prevent xss (8c983e7)
Documentation
- add admin and notifications implementation plan (2a43eea)
- fix SW location — must be in public/ not src/ for Angular build (4db49df)
- guard ALTER TABLE with PRAGMA table_info check (2d9711f)
- update Phase 4 to use per-request grace check in requireAuthenticatedUser (e5debcd)
0.60.0 (2026-06-19)
Features
- rate-limiting: add global rate limiting and per-email password lockout (e5c06eb)
Bug Fixes
- login-lockout: merge stale-row test into main test to avoid module-caching conflict (c79e725)
- login-lockout: prune stale pre-lockout attempt rows (f240b19)
- rate-limiting: use trustProxy for authoritative client IP (bb1744f)
- test: increase recovery test lockout window to avoid CI timing flake (ae22d2c)
Documentation
- arch: mark rate limiting as completed (530f526)
Tests
- add coverage for login component validation, errors, and lockout (374d89a)
0.59.7 (2026-06-18)
Bug Fixes
- tasks: align calendar date handling (a4c8094)
- update test to match PATCH URL with tz query param (b6e233b)
- use timezone-aware date when restoring tasks to correct bucket (dfe4194)
Tests
- add coverage for tz-aware task restore path (89f06f7)
0.59.6 (2026-06-18)
Bug Fixes
- exclude overdue tasks from view=today (49135e9)
- exclude today/overdue tasks from view=upcoming (7db0df2)
- increase max pageSize from 100 to 1000 for allActiveTasks query (613ccc8)
- restore task-load error reporting for network and 5xx failures (4df5786)
- stop subtasks from consuming per-view page rows (407177a)
Refactoring
- remove expand loop, stale signals, and client-side date helpers from TaskService (719e309)
Tests
- add coverage for timezone helpers, export endpoint, and per-view errors (d2b0c00)
0.59.5 (2026-06-17)
Bug Fixes
- decouple settings login-tips toggle from session-only dismissal (da93de4)
Chores
- add no-op test:coverage script to shared package (f3c68ae)
Refactoring
- migrate application preferences to signal-based store (1c0f694)
Tests
- fix regressions in PersonalShellComponent and PreferencesStore (7243c8d)
0.59.4 (2026-06-16)
Bug Fixes
- drop explicit version from pnpm/action-setup (fae438b)
- pin pnpm version and fix prettier formatting (af305ee)
Chores
- deps-dev: bump drizzle-kit from 0.31.9 to 0.31.10 (818ec14)
- deps-dev: bump prettier from 3.8.1 to 3.8.4 (124de94)
- deps-dev: bump the commitlint group across 1 directory with 2 updates (89c532b)
- deps-dev: bump the eslint group across 1 directory with 2 updates (2639724)
- deps: bump dompurify from 3.4.7 to 3.4.8 (7edffa6)
- deps: bump tailwind-merge from 3.5.0 to 3.6.0 (dd08189)
- regenerate lockfile after dependabot bumps (825d829)
0.59.3 (2026-06-16)
Bug Fixes
- use absolute URL for CLA link in PR template and contributing guide (198a973)
Chores
0.59.2 (2026-06-15)
Documentation
0.59.1 (2026-06-15)
Bug Fixes
- make docker-compose.yml respect .env overrides via variable interpolation (099b63d)
- remove root .env.example — no auto-load mechanism exists (2b99c23)
Documentation
- fix CI recovery — re-run the workflow, not pnpm release (22b7196)
- fix doc issues from review — broken links, wrong paths, incomplete lists (6b18a6a)
- fix documented task filters to match implementation (c69ed20)
- remove email verification claim — not implemented (4cf786b)
0.59.0 (2026-06-15)
Features
- frontend: add post-login tip popup with 30 productivity tips (40a3636)
0.58.4 (2026-06-14)
Bug Fixes
- frontend: preserve 250ms minimum loading-bar display interval (2753145)
- frontend: replace 4 setTimeout UI hacks with signal-driven state ([4a29052](https://github.com/a...
v0.60.1
Changelog
All notable changes to this project will be documented in this file. See commit-and-tag-version for commit guidelines.
0.60.1 (2026-06-22)
Bug Fixes
- escape html in highlight pipe to prevent xss (8c983e7)
Documentation
- add admin and notifications implementation plan (2a43eea)
- fix SW location — must be in public/ not src/ for Angular build (4db49df)
- guard ALTER TABLE with PRAGMA table_info check (2d9711f)
- update Phase 4 to use per-request grace check in requireAuthenticatedUser (e5debcd)
0.60.0 (2026-06-19)
Features
- rate-limiting: add global rate limiting and per-email password lockout (e5c06eb)
Bug Fixes
- login-lockout: merge stale-row test into main test to avoid module-caching conflict (c79e725)
- login-lockout: prune stale pre-lockout attempt rows (f240b19)
- rate-limiting: use trustProxy for authoritative client IP (bb1744f)
- test: increase recovery test lockout window to avoid CI timing flake (ae22d2c)
Documentation
- arch: mark rate limiting as completed (530f526)
Tests
- add coverage for login component validation, errors, and lockout (374d89a)
0.59.7 (2026-06-18)
Bug Fixes
- tasks: align calendar date handling (a4c8094)
- update test to match PATCH URL with tz query param (b6e233b)
- use timezone-aware date when restoring tasks to correct bucket (dfe4194)
Tests
- add coverage for tz-aware task restore path (89f06f7)
0.59.6 (2026-06-18)
Bug Fixes
- exclude overdue tasks from view=today (49135e9)
- exclude today/overdue tasks from view=upcoming (7db0df2)
- increase max pageSize from 100 to 1000 for allActiveTasks query (613ccc8)
- restore task-load error reporting for network and 5xx failures (4df5786)
- stop subtasks from consuming per-view page rows (407177a)
Refactoring
- remove expand loop, stale signals, and client-side date helpers from TaskService (719e309)
Tests
- add coverage for timezone helpers, export endpoint, and per-view errors (d2b0c00)
0.59.5 (2026-06-17)
Bug Fixes
- decouple settings login-tips toggle from session-only dismissal (da93de4)
Chores
- add no-op test:coverage script to shared package (f3c68ae)
Refactoring
- migrate application preferences to signal-based store (1c0f694)
Tests
- fix regressions in PersonalShellComponent and PreferencesStore (7243c8d)
0.59.4 (2026-06-16)
Bug Fixes
- drop explicit version from pnpm/action-setup (fae438b)
- pin pnpm version and fix prettier formatting (af305ee)
Chores
- deps-dev: bump drizzle-kit from 0.31.9 to 0.31.10 (818ec14)
- deps-dev: bump prettier from 3.8.1 to 3.8.4 (124de94)
- deps-dev: bump the commitlint group across 1 directory with 2 updates (89c532b)
- deps-dev: bump the eslint group across 1 directory with 2 updates (2639724)
- deps: bump dompurify from 3.4.7 to 3.4.8 (7edffa6)
- deps: bump tailwind-merge from 3.5.0 to 3.6.0 (dd08189)
- regenerate lockfile after dependabot bumps (825d829)
0.59.3 (2026-06-16)
Bug Fixes
- use absolute URL for CLA link in PR template and contributing guide (198a973)
Chores
0.59.2 (2026-06-15)
Documentation
0.59.1 (2026-06-15)
Bug Fixes
- make docker-compose.yml respect .env overrides via variable interpolation (099b63d)
- remove root .env.example — no auto-load mechanism exists (2b99c23)
Documentation
- fix CI recovery — re-run the workflow, not pnpm release (22b7196)
- fix doc issues from review — broken links, wrong paths, incomplete lists (6b18a6a)
- fix documented task filters to match implementation (c69ed20)
- remove email verification claim — not implemented (4cf786b)
0.59.0 (2026-06-15)
Features
- frontend: add post-login tip popup with 30 productivity tips (40a3636)
0.58.4 (2026-06-14)
Bug Fixes
- frontend: preserve 250ms minimum loading-bar display interval (2753145)
- frontend: replace 4 setTimeout UI hacks with signal-driven state (4a29052)
Documentation
- add Sprint 1a (setTimeout removal) to roadmap (994dcac)
0.58.3 (2026-06-09)
Tests
- frontend: update specs to use PreferencesStore instead of direct localStorage (1072907)
0.58.2 (2026-06-09)
Refactoring
- frontend: centralize localStorage access in PreferencesStore ([972d160](972d1606e6ea20241964...