chore: release v1.4.0

[JoachimLK]

🤖 I have created a release beep boop

1.4.0 (2026-04-30)

✨ Features

• add AI chatbot feature with configuration, access control, and attachment management (e139b72)
• add AI chatbot feature with configuration, access control, and attachment management (912d55d)
• add ApplicationDetailDrawer and CandidateDetailDrawer components (1371e7d)
• add column visibility management to Applications and Candidates views (a5237a5)
• add docker entrypoint script to derive NUXT_PUBLIC_* flags from environment variables (39e098e)
• add Docker support with pre-built image instructions and CI workflow (753b37e)
• add Docker support with pre-built image instructions and CI workflow (6f9223d)
• add document re-parsing functionality and improve error handling in candidate analysis (8842c6f)
• add experience level and quick notes fields to job and candidate schemas (d36b5a0)
• add new migration entries for candidate demographics organization settings and salary negotiable (36e3e81)
• add Nitro plugin to recompute public auth-provider flags at server startup (6b7b699)
• add OIDC SSO environment validation and unit tests (1b23af3)
• add organization localization settings and candidate demographics (f828877)
• add property management utilities and schemas (a62eea1)
• add property management utilities and schemas (4dc5aad)
• add raw tag support for Docker image publishing (29775cb)
• add salary input change handlers and update permissions for organization (6c238c2)
• add site origin computation for dynamic redirect URI in SSO setup (9e5aa68)
• add SSO provider schema and relations for better authentication integration (62fdf39)
• ai-config: add connection test functionality and update AI settings UI (c9f4afd)
• enhance authentication security with stricter password policy, email verification, and session management (aaae17f)
• enhance forgot password functionality and improve SSRF protection (8e0abd6)
• enhance OIDC endpoint origin fetching to directly inject discovered origins into trusted-origins list (ee34d86)
• Enhance PostHog proxy handling with explicit header management and error handling (8b9ea20)
• enhance property management with new color variables and update component interactions (349ec6a)
• enhance PropertyFilterBar and PropertySchemaEditor with improved element references and state management (cd7524e)
• enhance SSO sign-in and sign-up error handling, and enforce email requirement in profile mapping (76c54b4)
• enhance trusted origins resolution for CSRF checks and OIDC discovery (3c24417)
• enhance trusted origins resolution for SSO provider registration (b5832b6)
• enhance workflows and documentation for release process, including PR title linting and release verification (4785db5)
• implement forgot password and reset password functionality (aa00e89)
• implement forgot password and reset password functionality (ad864ef)
• implement OIDC endpoint origin prefetching for trusted origins resolution (9c355ab)
• implement social sign-in for Google, GitHub, and Microsoft with configuration support (d4ceaf8)
• implement social sign-in for Google, GitHub, and Microsoft with configuration support (0e4d4bd)
• Implement two-tier consent model for PostHog analytics (0d51cd5)
• Implement two-tier consent model for PostHog analytics (ef7fee5)
• implement unique default chatbot agent constraint and enhance related logic for attachment management (f11a78f)
• improve edit element reference handling in PropertyFilterBar (486d0e1)
• refactor authentication handling to use runtime-config for providers and remove entrypoint script (ad91cc9)
• streamline authentication configuration by removing deprecated social sign-in options and enhancing OAuth token encryption (b94ffd9)
• update button styles for social sign-in and sign-up to improve user interaction (d8d0e6e)
• update color classes for property options to enhance visual consistency (c827d56)
• Update PostHog consent model to use sessionStorage for cookieless tracking (1368dbb)

🐛 Bug Fixes

• address CodeRabbit review comments on PR #166 (3b9e52b)
• correct syntax error in prefetchOidcEndpointOrigins function (3f6a56b)
• register migrations 0023 and 0024 in drizzle journal (93ed4b1)
• remove orphaned code after </template> in candidates/new.vue (a976d8d)
• resolve esbuild and typecheck errors in PR validation (e3d9994)
• Rewrite Host headers in proxyRequest to prevent Cloudflare errors (fee0be6)
• update token reference in release-please workflow to prioritize RELEASE_PLEASE_TOKEN (7a57891)
• update token reference in release-please workflow to use GITHUB_TOKEN (b2733f8)

---

This PR was generated with Release Please. See documentation.

[coderabbitai]

Warning

Rate limit exceeded

@JoachimLK has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 26 minutes and 1 second before requesting another review.

To keep reviews running without waiting, you can enable usage-based add-on for your organization. This allows additional reviews beyond the hourly cap. Account admins can enable it under billing.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 7910975d-04c9-4071-8c7d-3e8a6e340668

📥 Commits

Reviewing files that changed from the base of the PR and between 7a57891 and 49f0d30.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (3)

• .release-please-manifest.json
• CHANGELOG.md
• package.json

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release-please--branches--main--components--reqcore

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Review rate limit: 0/1 reviews remaining, refill in 26 minutes and 1 second.}

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[railway-app]

🚅 Deployed to the reqcore-pr-167 environment in applirank

Service	Status	Web	Updated (UTC)
applirank	✅ Success (View Logs)		Apr 30, 2026 at 12:42 pm

[JoachimLK]

🤖 Created releases:

• v1.4.0

🌻