Skip to content

v1.29.1 -- production fixes

Choose a tag to compare

View all tags
@mhightower932 mhightower932 released this 19 Jun 23:34
v1.29.1
1ca5b69
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

"Production fixes" release.

Mobile. Zero mobile/ diffs on this release. The current mobile build (version 1.29.0, versionCode 10) remains current; no new APK for v1.29.1.

Fixed

  • Login lockout keyed on (IP, username) (#422): the login rate-limiter keyed the lockout on the remote IP alone, so behind a shared NAT egress one person's five failed logins returned HTTP 429 to everyone behind that IP for 15 minutes, correct passwords included. The lockout is now keyed on (IP, username), so one user's failures lock only that user's attempts from that IP.
  • Show the actual carrier when the ship method contradicts it (#422): the Sales Order detail rendered ship_method verbatim, so an order that shipped on a different carrier (a USPS-named service moved onto a 1Z UPS label) read misleadingly above its tracking number. The Ship Method line now surfaces the carrier derived from the tracking-number format when it disagrees ("USPS Ground Advantage (shipped UPS)"). Display-only: ship_method and the outbound ship.confirmed service level are unchanged.
Assets 2
Loading