Skip to content

Tribu v2026-04-27

Choose a tag to compare

View all tags
@itsDNNS itsDNNS released this 27 Apr 17:52
v2026-04-27
9d9bbfd
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

  • Adds Shared Home Display mode for wall tablets and dashboards, including secure display sessions and a dedicated display route.
  • Adds the Shared Display layout composer with home-focused presets, live previews, and controlled slot editing.
  • Polishes the display composer and dashboard presentation for a cleaner setup and day-to-day display experience.
  • Adds managed calendar subscription feeds, manual ICS subscriptions, and an import preview flow.

Security and hardening

  • Separates instance-level admin actions from family admin permissions.
  • Blocks open registration after initial setup unless it is explicitly enabled.
  • Hardens initial setup restore with a dedicated restore token and upload size limit.
  • Enforces CalDAV and CardDAV scopes per collection type.
  • Prevents the service worker from caching tokenized and sensitive runtime routes.
  • Validates recipe source URL schemes and avoids rendering unsafe legacy URLs as links.
  • Uses proxy-safe shopping WebSocket URLs.
  • Hardens the frontend Docker image with deterministic installs, Next standalone output, and a smaller runtime dependency surface.
  • Removes production stack trace and error detail exposure from the top-level client error boundary.

Fixes and reliability

  • Improves household onboarding flow.
  • Improves reminder delivery reliability.
  • Strengthens calendar import provenance.
  • Improves admin section navigation.

Validation

  • Main branch checks passed for the release commit.
  • E2E checks passed.
  • Docker image build passed for backend and frontend.
  • Production dependency audit for the frontend passed with no moderate-or-higher findings.
Assets 2
Loading