v5.0.0-alpha.41

What's Changed

• Detail sheet: the history fits the sheet on a phone by @jacgit18 in #405
• Groceries: rows and the add bar wrap at a narrow phone and a large text size by @jacgit18 in #406
• Security: count sign-in tries per address on arrival, and keep only sign-in codes (review first) by @jacgit18 in #407
• Security: take a push subscription only on a push service's own host by @jacgit18 in #408
• Server: a request the database cannot store is a 422, and a refused write keeps a summary by @jacgit18 in #409
• Groceries: a store named like an object property, and an import into a full store list by @jacgit18 in #410
• Log sheet and Progress: tables, rows and tiles fit at a large text size by @jacgit18 in #411
• Program: a long program name wraps instead of widening the page by @jacgit18 in #412
• Security: Vite 8.3.1 to 8.3.4 (npm audit: high advisory in the dev server) by @jacgit18 in #413
• Safety: the QA and staging database scripts refuse production however its URL is spelled by @jacgit18 in #414
• Help: the Daily section is called Nutrition, and Medical is no longer mentioned by @jacgit18 in #415
• Database: cap refused_writes and row_history; a fixed issue reopens on a newer version by @jacgit18 in #416
• Groceries: changing an item's usual store keeps past months as they were by @jacgit18 in #417
• Groceries: an item bought with no price stays unpriced in that month by @jacgit18 in #418
• Groceries: arrows and Expand all on At home Edit and To get by @jacgit18 in #419
• Groceries: removing a bought item keeps its store, tax and split by @jacgit18 in #420
• Groceries: past months keep their split when a person or group changes by @jacgit18 in #421
• Groceries: four small fixes from the overnight audit by @jacgit18 in #422
• Groceries: mark owed amounts settled on the split card by @jacgit18 in #423
• Groceries: fold Splitting this month and open it from the money line by @jacgit18 in #424
• Groceries: a group that is gone still shows past months' money, and the server cap counts live groups by @jacgit18 in #427
• Small fixes from the overnight audit: Experiments Last, landing grids, injury text by @jacgit18 in #425
• Server: repair an unpaired surrogate in a request instead of failing with a 500 by @jacgit18 in #426
• Push: accept only the plain https://host form of an endpoint by @jacgit18 in #428
• Groceries: explain what a share set in a month ahead changes (M-03) by @jacgit18 in #429
• Groceries: importing a backup keeps purchases of removed items (X-6) by @jacgit18 in #430
• Groceries: a removed store that history uses is retired, not forgotten (G-3, M-06) by @jacgit18 in #431
• Groceries: closing audit 2 data fixes (N-1, N-3, N-7, N-9, N-10) by @jacgit18 in #432
• Closing audit 2: test gaps and flaky waits by @jacgit18 in #434
• Board: moved-card clash check and long program name test (O-4, O-7) by @jacgit18 in #436
• Groceries: leftover audit fixes (U-4 to U-7, U-9, X-8, Y-8, G-5) by @jacgit18 in #437
• Groceries: closing audit 2 UI fixes (N-2, N-4, N-11 to N-15) by @jacgit18 in #433
• Groceries: covered flag frozen per month, case-insensitive stores, reserved names (N-16, N-17, G-6) by @jacgit18 in #435
• Server: record_issue reopen rule, push task cap, rate-limit sweep, production guards (S-3 to S-7, C-2) by @jacgit18 in #438
• CI and tooling: aggregate check, lock, local check plan, PR kit, Lighthouse runs (C-1, C-4, C-5, C-7, C-8, C-10, C-11) by @jacgit18 in #439
• Deploy: refuse a commit that is not main's tip, roll back a failed promotion (C-3, C-9) by @jacgit18 in #440
• Water bars: accessible name contains the shown text (Lighthouse label-content-name-mismatch) by @jacgit18 in #441
• Water bars: a space between the spans so the accessible name matches (follow-up to #441) by @jacgit18 in #442
• PR checks: skip bot PRs by author, not actor by @jacgit18 in #443
• Process: one feature, one brief, one PR by @jacgit18 in #444
• Tests: production-guard test ignores a local .env by @jacgit18 in #445
• README: describe Groceries and Nutrition in the Features list by @jacgit18 in #446
• Check the table of contents of README.md and SETUP.md in npm run lint by @jacgit18 in #447
• Performance: load the spreadsheet reader, Stretches and sync cards on demand by @jacgit18 in #449
• Dependency scan: audit, review, new-package vetting, Dependabot by @jacgit18 in #448
• Add a repeating drink-water reminder push by @jacgit18 in #457

Full Changelog: v5.0.0-alpha.40...v5.0.0-alpha.41