v1.1.2

1.1.2 (2026-10-19)

Features

• mcp: submit daily entries and record feed, water, purchases and expenses (#1325) (f0df35f)
• oauth: let a person grant only some of the permissions a connected app asks for (#1327) (ce7807e)

Bug fixes

• deps: pin MessagePack 2.5.303 for GHSA-qhrr-8q5h-9q3h (#1321) (60f7e70)

Performance

• web: drop install icons from the precache and minify theme-init.js (#1323) (455ed0d)
• web: precache a currency-only Inter face instead of latin-ext (#1324) (39228ed)

Documentation

• specs: say who corrects locked daily entries and when archiving blocks it (#1312) (1683ce6)

Chores

• release 1.1.2 as a patch (e1d108d)

Container image

Deploy by digest — a tag can be moved, a digest cannot:

ghcr.io/mforce/cluckwork@sha256:51f3f5fa35df570f9c6557794105954abf083d96e7abd8f612f743c14cf59a50

Machine-readable: the image.json asset on this release.
Verify the bytes came from this repo's CI before deploying:

# requires a prior `docker login ghcr.io` — an oci:// subject
# needs registry credentials. Full recipe: README, "Deploying".
gh attestation verify oci://ghcr.io/mforce/cluckwork@sha256:51f3f5fa35df570f9c6557794105954abf083d96e7abd8f612f743c14cf59a50 \
  --repo mforce/cluckwork \
  --signer-workflow mforce/cluckwork/.github/workflows/ci.yml \
  --source-ref refs/heads/main \
  --bundle-from-oci