FlyBudget v0.1.0-beta.1

What's Changed

• ci: add Dependabot, CI, and Dependabot auto-merge by @dtymoszenko in #1
• build(deps): bump the minor-and-patch group across 3 directories with 17 updates by @dependabot[bot] in #7
• fix: restrict API CORS to the app's own origins by @dtymoszenko in #16
• fix: packaged Electron app crashing on startup by @dtymoszenko in #17
• build(deps): apply open Dependabot updates by @dtymoszenko in #18
• build(deps-dev): bump tar from 7.5.13 to 7.5.22 by @dependabot[bot] in #20
• build(deps): bump undici from 6.25.0 to 6.29.0 by @dependabot[bot] in #19
• fix: npm install failing in server without a C++ toolchain by @dtymoszenko in #21
• fix: resolve remaining Dependabot alerts with npm overrides by @dtymoszenko in #22
• docs: add security policy by @dtymoszenko in #23
• docs: add README badges and OpenSSF Scorecard by @dtymoszenko in #24
• ci: pin actions to commit SHAs and scope token permissions by @dtymoszenko in #25
• test: property-based tests for money logic (+ 2 bug fixes) by @dtymoszenko in #26
• ci: signed release workflow for the Windows installer by @dtymoszenko in #27
• fix: electron:dev crashing with __dirname is not defined by @dtymoszenko in #28
• feat(security): guard the local API and add a strict CSP by @dtymoszenko in #29
• feat(security): lock down the Electron app by @dtymoszenko in #30
• feat(security): enable EXTRA encryption for bank credentials at rest in personal databases by @dtymoszenko in #31
• build(security): harden the dependency supply chain by @dtymoszenko in #32
• docs: describe normal releases first in the release workflow by @dtymoszenko in #33
• build(deps-dev): bump @types/better-sqlite3 from 7.6.13 to 9.6.0 in /server by @dependabot[bot] in #34
• feat(security): harden SimpleFIN and Plaid integrations by @dtymoszenko in #35
• fix(security): stop leaking stack traces, block CSV formula injection by @dtymoszenko in #36
• docs: document the security model and user guidance by @dtymoszenko in #37

New Contributors

• @dtymoszenko made their first contribution in #1
• @dependabot[bot] made their first contribution in #7

Full Changelog: https://github.com/dtymoszenko/FlyBudget/commits/v0.1.0-beta.1