Skip to content

0.4.1

Choose a tag to compare

View all tags
@calebl calebl released this 05 Oct 02:19
0.4.1
5f9f140
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security: fixes GHSA-h64q-xp38-pgwr (high) in the self-hosted Cloudflare Worker deployment (0.2.0–0.4.0). Every sign-in now requires approval on a page showing the client and its redirect URI, OAuth state is stored server-side and bound to the browser session, and an optional ALLOWED_REDIRECT_URIS setting restricts redirects. Redeploy your Worker. The npm package does not include the Worker and was not affected. See CHANGELOG.md for details.

What's Changed

  • ci: run no-mistakes check on pull_request_target by @calebl in #56
  • fix: improve category suggestions with similar payee history by @calebl in #59
  • fix: update vulnerable development dependencies by @calebl in #58
  • chore: prepare 0.4.1 release by @calebl in #60

Full Changelog: 0.4.0...0.4.1

Contributors

calebl
Assets 2
Loading