v0.2.0

Highlights

Changed

• Bumped the application version to 0.2.0.

Upgrade impact

None.

Commits in this release

• aece68e fix(rust): satisfy strict clippy checks (#158)
• c1a005c feat(app): show startup progress and failures inside the window (#157)
• d2ce10d fix(logging): redact connection strings when keeping the layout (#156)
• f7c2163 chore: bump version to 0.2.0 (#155)
• ea7a598 feat(notes): reusable note templates for note fields (#149)
• 55dfe71 build(deps): bump actions/configure-pages from 5.0.0 to 6.0.0 (#150)
• 8679284 build(deps): bump the docker group with 2 updates (#151)
• efdb657 build(deps-dev): bump the npm group with 2 updates (#152)
• 24cb4a2 build(deps): bump actions/upload-pages-artifact from 3.0.1 to 5.0.0 (#153)
• fc83b97 build(deps): bump actions/deploy-pages from 4.0.5 to 5.0.1 (#154)

Compare v0.1.0…v0.2.0

The full history is kept in CHANGELOG.md.

v0.1.0

Highlights

First public release: a local-first desktop work-time tracker that keeps every entry in a Postgres
database you control.

Added

• Dashboard with start, pause, resume, stop and project switching, day navigation, daily and weekly
  targets, a cumulative overtime balance and the time distribution per project.
• Retroactive time management through quick-add buttons or durations such as 2h 45m; entries land
  in the first free slot of the day and never overlap.
• Per-project hour budgets with a due date, including consumption and forecast in Reports.
• Working-time support: breaks as entries of their own, warnings for break, daily maximum and rest
  period limits, a monthly CSV or PDF record per employee, and an audit trail of every change.
• Absences for a day or a range as vacation, sick leave, unpaid leave or half day; a full-day
  absence drops that day's target to zero, a half day keeps half of it.
• Settings for the weekly working time and the working days, with working-time limits that default
  to the German ArbZG and can be adjusted or restored.
• Accounts with a strict password policy, Argon2id hashes, login lockout and per-user data
  isolation.
• Installers for Windows and macOS plus portable archives for machines where nothing may be
  installed.

Upgrade impact

None: this is the first release. Installing it is described in
docs/installation.md.

Commits in this release

• a376f90 ci(release): resolve tag SHA from local checkout instead of gh api (#147)
• b68eb57 docs: clarify logging behavior and file locations in documentation
• 95f7637 fix(logging): make redaction idempotent (#143)
• 5a56f0a ci: run release fuzzing beside bundling and gate publication on it (#145)
• 52b1860 ci: disable credential persistence in checkout steps (#144)
• 98c5a85 ci(release): publish human-readable release notes from the changelog (#141)
• 7074d83 docs: describe how to obtain, give feedback, and contribute (#139)
• 3d08734 docs(contributing): state the requirements for acceptable contributions (#140)
• ef70506 ci: gate releases on the fuzz targets (#142)
• 6854557 feat(db): log each migration step (#136)
• 3a7c8d8 chore: add codeowners file (#137)
• b29999a feat(dashboard): block tracking on days that have not happened yet (#135)
• 3770fcf fix(timer): apply the rounding rules when a session is stopped from the entry list (#131)
• d2d461f fix(timer): keep rounded sessions from blocking the next start (#129)
• ae43ccf fix(dashboard): show full project name as tooltip in Time by Project legend (#133)
• e781d1d Delete .github/workflows/pr-title.yml
• 0fdc77c ci(release): gate publish job on production environment approval (#127)
• b35939f ci: deploy docs/site to github pages via actions (#125)
• cfdb862 fix: remove hard-coded password literals in rust test fixtures (#122)
• df6a481 chore: add overrides for esbuild dependency in package.json (#121)
• 0a15331 fix: keep redacted log messages free of secrets (#120)
• aaa683c build(deps): bump codecov/codecov-action from 5.5.5 to 7.0.0 (#119)
• ed42af9 feat(security): enhance security checks with automated scans and reporting (#118)
• abed3a3 feat(security): implement row level security policies and create application role (#117)
• 488d9af feat(ci): integrate Codecov for coverage report uploads (#116)
• 7c9cc1c docs(architecture): keep the decision records short and unnumbered
• 2c269b1 docs: keep every rule in one document
• 4ddd3cb docs: bundle the installation instructions in one guide
• 5eed58d test(auth): count dummy verifications per thread
• 147cd7f feat(portable): ship portable Windows and macOS builds for users without admin privileges (#115)
• 2b71dfe fix: surface fatal startup errors in native dialog (#113)
• 1f74102 docs: state hosted EU database and author access in the legal texts (#111)
• 7d93fec feat(docs): add GitHub Pages landing site (#112)
• fd550ba refactor: move postgres tables into wtt schema (#110)
• c9d79bb test: speed up unit and e2e setup (#109)
• 222762a feat(projects): archive projects and warn about overdue budgets while tracking (#105)
• b06a04f feat: delete account from the settings menu (#107)
• 66c47a8 docs(skills): add the code-review-and-quality review skill (#108)
• 75eaeaa feat(ui): add terms of service and privacy policy to the burger menu (#102)
• d380288 docs: audit repository documentation and comments (#101)
• 418fd1d Support a remote Supabase Postgres for production images (#86)
• d5304a0 fix(db): answer not found when a delete names a foreign record (#94)
• 749aa83 fix(auth): end a session at its absolute lifetime (#95)
• adb7020 fix(tauri): keep the devtools out of a release build (#96)
• 2c8cc41 fix(auth): bind a session to the webview window that started it (#98)
• e8bd4df fix(auth): keep the session id out of the storage of the webview (#99)
• 1b0df8f fix(tauri): remove style-src 'unsafe-inline' and state the CSP directives explicitly (#100)
• 1f10646 fix(build): bind the dev server to loopback by default (#97)
• b762785 [WIP] Collapse all migration files into a single baseline migration (#84)
• [677908c](https://github.com/serious...