597 Commits

Author SHA1 Message Date
github-actions[bot]
891adcbecc chore(main): release 4.9.0 (#1055)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.9.0
2026-05-17 01:33:04 +02:00
Miguel Ribeiro
0fef9597ef fix: null array on empty subscription list
fix: don't use mbstring
feat: sort graphs on the statistics page by usage
feat: lifetime subscriptions
feat: allow multiple filters on the settings page
feat: filter by notification status
fix: migrations using double quotes
feat: rework icons
fix: open 3 dot menu abone for the subscriptions at the bottom
fix: ntfy notifications with strange chars
2026-05-17 00:54:14 +02:00
milletbig
e0ac8346f3 Update zh_cn translation strings (#1030) 2026-04-27 22:30:16 +02:00
github-actions[bot]
7a72e09044 chore(main): release 4.8.4 (#1049)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.8.4
2026-04-27 22:28:32 +02:00
Miguel Ribeiro
8d43623da9 fix: improve date formatting with IntlDateFormatter fallback (b2c565f) (#1048)
fix: missing year for subscription next payment display (ca5823d)
2026-04-27 22:26:19 +02:00
Mercury233
ca5823da6c missing year for subscription next payment display (#975) 2026-04-27 22:09:55 +02:00
Mercury233
b2c565f74c merge improve date formatting with IntlDateFormatter fallback (#974) 2026-04-27 18:38:55 +02:00
github-actions[bot]
4ec9b9b945 chore(main): release 4.8.3 (#1046)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.8.3
2026-04-26 14:05:45 +02:00
Miguel Ribeiro
d4725f36bd fix: cases on private endpoints where self-xss was possible (#1045) 2026-04-26 14:04:53 +02:00
github-actions[bot]
a9d3ba990f chore(main): release 4.8.2 (#1041)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.8.2
2026-04-18 18:29:41 +02:00
Miguel Ribeiro
a95aaadbcc fix: logo cut on registration page (#1040) 2026-04-18 18:27:11 +02:00
github-actions[bot]
1c8dbcd939 chore(main): release 4.8.1 (#1039)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.8.1
2026-04-18 17:02:09 +02:00
Miguel Ribeiro
e79f28be6b fix: ssrf vultenaribility on add subscription (#1038)
fix: only allow to use internal urls csrf validation bypass by admin user
fix: dns rebinding vulnerability
2026-04-18 16:57:46 +02:00
github-actions[bot]
8950e84125 chore(main): release 4.8.0 (#1029)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.8.0
2026-03-23 16:29:39 +00:00
Miguel Ribeiro
99c30e70c8 feat: add openai compatible host for ai recommendations
feat: move update banner to the dashboard
fix: handle some ai responses that come in a different format
chore: handle deprecation of curl_close
feat: enable ai recommendations at a schedule
2026-03-23 16:24:26 +00:00
github-actions[bot]
240d3eba00 chore(main): release 4.7.3 (#1024)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.7.3
2026-03-21 18:08:44 +00:00
Miguel Ribeiro
4fd87c3014 fix: session expiration on pwa on android (#1023)
fix: image search failing to save
2026-03-21 18:05:59 +00:00
github-actions[bot]
b39f0ae40f chore(main): release 4.7.2 (#1022)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.7.2
2026-03-19 17:57:37 +00:00
Miguel Ribeiro
90bb6186ee fix: vulnerability would allow to bypass 2fa (#1021)
fix: password reset tokens now expire after 60 minutes
2026-03-19 17:54:25 +00:00
github-actions[bot]
ed4876e49a chore(main): release 4.7.1 (#1020)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.7.1
2026-03-19 01:14:32 +00:00
Miguel Ribeiro
f5c9a3498e fix: remove extra line on languages.php causing headers already sent (#1019) 2026-03-19 01:12:42 +00:00
github-actions[bot]
6e52b68718 chore(main): release 4.7.0 (#1018)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.7.0
2026-03-19 00:46:01 +00:00
Miguel Ribeiro
e87387f0eb feat: add romanian translations (#1017)
fix: ai recommendation numbering when deleting a recommendation
feat: mask ai api key on the settings page
fix: unicode character on the css file
fix: retain first and last name when switching language during registration
fix: calendar ocurrences to respect subscriptions start date
fix: ssrf vulnerability on several endpoints
fix: logo search
fix: xss vulnerability on payment method rename endpoint
fix: set login cookie to httponly
2026-03-19 00:41:55 +00:00
mister-ben
69613766bc retain first and last names on language change during registration (#995) 2026-03-18 15:31:57 +00:00
Mercury233
74a515b865 unicode char in styles.css (#976) 2026-03-18 15:30:50 +00:00
g0b3x98
e4b66cb265 Add Romanian Translation (#1015) 2026-03-18 15:30:22 +00:00
LumiDev
f3ab48360c Add AI API key field visibility toggle (#998)
Co-authored-by: Lumi <LumiSnep@proton.me>
2026-03-18 15:29:11 +00:00
LumiDev
4bb69e7df6 update AI recommendation numbering after delete (#996)
Co-authored-by: Lumi <LumiSnep@proton.me>
2026-03-18 15:27:08 +00:00
github-actions[bot]
8f0b5d0a84 chore(main): release 4.6.2 (#1006)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.6.2
2026-03-05 23:17:41 +01:00
Miguel Ribeiro
e8a513591d fix: ssrf vulnerability on all test notifications endpoint
fix: xss vulnerability on password reset page
fix: vulnerability allowed to delete avatars from other users
chore: bump version
2026-03-05 23:13:51 +01:00
github-actions[bot]
44774d3673 chore(main): release 4.6.1 (#992)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.6.1
2026-02-10 22:06:25 +01:00
Albert Brugués
28e896ef56 fix typo in key (#978) 2026-02-10 22:05:59 +01:00
Miguel Ribeiro
76a53df9cb fix: vulnerabily on add subscription endpoint (#991) 2026-02-10 22:03:40 +01:00
github-actions[bot]
9c3948a2e7 chore(main): release 4.6.0 (#971)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.6.0
2025-12-20 15:57:23 +00:00
Miguel Ribeiro
f5746e76a5 feat: add catalan translation (#970)
feat: add robots.txt to disallow indexing.
feat: add serverchan notifications.
fix: use stable UID for iCal events to prevent duplicates.
fix: use RFC 5545 compliant date format in iCal exports.
feat: notifications for subscription can be triggered up to 180 days before payment date.
2025-12-20 15:50:53 +00:00
Easy
279ddf61ce add serverchan notification (#951)
* add serverchan notification

* Update endpoints/cronjobs/sendnotifications.php

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update endpoints/notifications/testserverchannotifications.php

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Miguel Ribeiro <k.d.mitnick@gmail.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-12-20 15:06:49 +00:00
Pedro Pombeiro
671763e78b use stable UID for iCal events to prevent duplicates (#966)
Changed UID generation from uniqid() to a stable format based on
subscription ID (wallos-subscription-{id}@wallos). This ensures that
calendar applications update existing events instead of creating
duplicates when the feed is refreshed.

According to RFC 5545 section 3.8.4.7, the UID property must be
globally unique and persistent for the lifetime of the event.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
2025-12-20 15:04:41 +00:00
Pedro Pombeiro
b6b0abed0d fix: use RFC 5545 compliant date format in iCal exports (#965)
* fix: use RFC 5545 compliant date format in iCal exports

Fixes iCal date format to comply with RFC 5545 specification by:
- Adding VALUE=DATE parameter to DTSTART and DTEND fields
- Using date-only format (YYYYMMDD) instead of datetime format
- Removing incorrect timezone handling in exportcalendar.php

This resolves issues with calendar applications that strictly validate
iCal format, as reported in gethomepage/homepage#6091.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

* fix: add required DTSTAMP property to iCal VEVENT components

According to RFC 5545 section 3.8.7.2, the DTSTAMP property is
required in VEVENT components. It specifies the date and time that
the calendar object was created.

Added DTSTAMP in UTC format (gmdate) to both iCal export endpoints.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
2025-12-20 15:03:55 +00:00
Albert Brugués
2a371a1a75 Added catalan translation (#960) 2025-12-20 15:01:33 +00:00
Albert Brugués
a01e446029 Added robots.txt file (#961) 2025-12-20 15:00:14 +00:00
github-actions[bot]
89a1fee77b chore(main): release 4.5.0 (#941)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.5.0
2025-10-19 00:00:17 +02:00
Miguel Ribeiro
3247ce2c87 feat: enforce CSRF protection and POST-only policy across endpoints (#940) 2025-10-18 23:58:50 +02:00
github-actions[bot]
8c46d2ea68 chore(main): release 4.4.1 (#938)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.4.1
2025-10-12 17:37:52 +02:00
Miguel Ribeiro
d6329a7af5 fix: get_subscriptions api endpoint was not returning subscriptions (#937) 2025-10-12 17:36:26 +02:00
github-actions[bot]
abf85d7d65 chore(main): release 4.4.0 (#935)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
v4.4.0
2025-10-12 15:53:50 +02:00
Miguel Ribeiro
5629a319bc feat: add mattermost notifications (#923) (#934)
feat: add openrouter ai endpoint (#922)
fix: add autocomplete attribute to inputes (#926)
feat: enhance get_subscriptions API with admin access (#928)
chore: update container to php8.3 (#933)
2025-10-12 15:52:08 +02:00
CodeShakingSheep
34bc004f06 Update container to php8.3 (#933) 2025-10-12 15:14:58 +02:00
JamesAdams
efd292fab3 Enhance get_subscriptions API with admin access (#928) 2025-10-12 13:02:25 +02:00
Dmitry
b99a07cc5c add autocomplete attribute for inputs (#926) 2025-10-12 12:52:10 +02:00
Dani Bento
75c94ad15c add support for mattermost notifications (#923)
Signed-off-by: Daniela Filipe Bento <danibento@overdestiny.com>
2025-10-12 12:42:39 +02:00