v5.0.0-alpha.42

What's Changed

• Sync: refuse a request from a page that holds another account's data by @jacgit18 in #456
• Fix main: policy test expects the water reminder's repeat field; update the privacy page by @jacgit18 in #458
• Bump vitest to 4.1.12 (clears two moderate advisories) by @jacgit18 in #455
• Bump pixelmatch from 7.2.0 to 8.0.0 by @dependabot[bot] in #452
• Bump @types/node from 20.19.43 to 26.6.5 by @dependabot[bot] in #454
• PR tracker: --tracker option and Definition-of-done line by @jacgit18 in #459
• Make three accessible names contain their visible text (axe 4.14) by @jacgit18 in #460
• Bump vite-plugin-pwa from 1.3.0 to 2.0.0 by @dependabot[bot] in #453
• Bump vitest from 4.1.11 to 5.0.5 by @dependabot[bot] in #451
• Bump the npm-minor-patch group with 17 updates by @dependabot[bot] in #450
• Set the Node floor to 22.12 by @jacgit18 in #461
• Always run the privacy policy test in the local check by @jacgit18 in #462
• Name three more buttons after their visible text by @jacgit18 in #463
• Lighthouse: lower the mobile floor to 82 and note the Chrome version by @jacgit18 in #464
• Claude review: report a failed review on the PR by @jacgit18 in #468
• Billing: Stripe webhook, Checkout and Portal, plan state (server, admin-only) by @jacgit18 in #465
• Billing: Settings section, Subscribe and Manage billing (UI, admin-only) by @jacgit18 in #466
• Deploy script: store and pass the Stripe billing settings by @jacgit18 in #469
• Server backup history: daily snapshots on the account (free 7 days, paid 30) by @jacgit18 in #470
• Owner tool: find-user, the account behind one email address (read-only) by @jacgit18 in #471
• New accounts start on free; beta-to-free owner tool (billing go-live, PR A) by @jacgit18 in #472
• Docs: Definition of done line for dependency upgrades by @jacgit18 in #473
• Environment parity report: daily check of production, staging and QA migrations against main by @jacgit18 in #474
• Secrets and keys hygiene, part 1: inventory, production owner URL from Secret Manager, read-only IAM audit by @jacgit18 in #475
• Merge the backup UI into one Backups & data panel by @jacgit18 in #476
• Secrets and keys hygiene, part 2: the parity job checks secret names against the inventory by @jacgit18 in #477
• PR script: label each PR by what the work is by @jacgit18 in #480
• Rest on a missed day: in-place rest, a date per rest day, date sheet by @jacgit18 in #478
• Grocery: show the store's split on To get rows, Collapse all covers bought rows by @jacgit18 in #479
• Grocery: a count typed on To get becomes the item's usual count by @jacgit18 in #481
• Rest days: store what an in-place rest displaced so unticking is exact by @jacgit18 in #482
• Parity run: read the job's exit code from gcloud's error text by @jacgit18 in #483
• Fix 404 for page routes when the build sits under a hidden folder by @jacgit18 in #484

New Contributors

• @dependabot[bot] made their first contribution in #452

Full Changelog: v5.0.0-alpha.41...v5.0.0-alpha.42