18 Commits

Author	SHA1	Message	Date
opencode	2f66fff993	chore(deps): upgrade all dependencies to latest and pin exact ... Policy: every direct dependency is now an exact pin; lockfile + --frozen-lockfile keep builds reproducible; save-exact=true enforced. Toolchain: - pnpm 10.26 -> 11.18 (lockfile migrated; supportedArchitectures moved to pnpm-workspace.yaml) - typescript 5.9 -> 7.0, vite 7 -> 8, @vitejs/plugin-react 5 -> 6 - esbuild override 0.27.3 -> 0.28.1 (closes GHSA-g7r4-m6w7-qqqr); added @esbuild/darwin-arm64 for local dev - orval 8.9 -> 8.23, regenerated clients Backend (prod image): - openid-client 5.7 -> 6.8 (rewritten OIDC flow in routes/auth.ts: discovery + functional API, PKCE/state, fetchUserInfo, buildEndSessionUrl) - pino 9 -> 10, pino-http 10 -> 11, thread-stream 3 -> 4 - zod 3.25 -> 4.4 (catalog; supported by drizzle-zod 0.8.3) - pg 8.20 -> 8.22; removed deprecated @types/bcryptjs Frontend: - react/react-dom 19.1.0 -> 19.2.8 (catalog pin lifted; expo note removed) - react-day-picker 9 -> 10 (table classname -> month_grid) - recharts 2 -> 3 (TooltipContentProps + DefaultLegendContentProps typing; safe keys) - react-resizable-panels 2 -> 4 (Group/Separator rename) - date-fns 3 -> 4, @hookform/resolvers 3 -> 5, lucide-react 0.545 -> 1.28 - all @radix-ui/*, tailwind, types, and remaining patch/minor deps bumped to latest Security/process: - overrides for body-parser >=2.3.0 (GHSA-v422-hmwv-36x6) + markdown-it/linkify-it/brace-expansion/fast-uri (dev tooling) - pnpm audit now reports 0 vulnerabilities (prod and full) - CI audit gate added to build.yaml; docs/dependency-policy.md; renovate.json - Dockerfile pins node:24.18.1-alpine and pnpm@11.18.0	2026-08-03 12:56:00 +02:00
opencode	803802a5b6	feat: show live build version in web UI ... - /api/version returns version, commitSha, buildDate, trashRetentionDays - CI passes COMMIT_SHA (full), BUILD_DATE and VERSION (git tag) as docker build args; Dockerfile bakes them as env - sidebar footer shows version/sha linked to the Gitea commit - admin System tab shows version, commit link, build date, trash retention	2026-08-02 02:13:27 +02:00
opencode	01c70085db	feat: tiered costs feature + admin tier management + tag selection ... - costs: nullable notes (fix create without notes), drop renewalDate (schema + API + UI), gate POST/PATCH/DELETE to admin + costs feature - feature middleware: admin-aware hasFeature + getEntitlements union; /auth/me and login return resolved entitlements - users: tier enum (free/premium/enterprise) in create/update/list, admin UI tier select + tier badge - tags: GET /tags/all, TagInput autocomplete in new/edit tool forms, feature suggestions on focus, query invalidation on create/update - openapi: nullable ToolUpdate urls, ToolUpdate tier fields, listAllTags - Dockerfile: push-force to drop renewal_date column	2026-08-02 01:10:47 +02:00
henry	2b5f074a63	Update Dockerfile	2026-07-31 18:11:46 +00:00
henry	bc9effd665	Update Dockerfile	2026-07-31 17:49:44 +00:00
henry	b4aaf23a75	Update Dockerfile	2026-07-31 12:19:09 +00:00
henry	6157e39c14	Update Dockerfile	2026-07-31 12:11:40 +00:00
henry	6031491347	Update Dockerfile	2026-07-31 12:08:11 +00:00
henry	bb6b739e37	Update Dockerfile	2026-07-31 11:59:14 +00:00
henry	0f611e8a44	Update Dockerfile	2026-07-31 11:55:13 +00:00
henry	634e7c633d	Update Dockerfile	2026-07-31 11:49:50 +00:00
henry	4c48e7b9f6	Update Dockerfile	2026-07-31 11:34:40 +00:00
henry	ec7c874d5b	Update Dockerfile	2026-07-30 21:26:23 +00:00
henry	2f6a3a05d6	Update Dockerfile	2026-07-30 21:12:55 +00:00
root	1b05645c15	fix: exclude mockup-sandbox from Docker build	2026-07-30 09:18:40 +02:00
root	e7727e78c4	fix: skip typecheck in Docker build, use pnpm -r build	2026-07-30 09:17:08 +02:00
root	8d3bd07efc	fix: copy scripts/package.json for typecheck in Docker build	2026-07-30 09:11:55 +02:00
root	5d71e60e7d	feat: Docker Compose support	2026-07-30 00:19:31 +02:00