Karl Ludwig Weise
d04d87ed2e
Fix check
2026-04-20 09:37:22 +02:00
Karl Ludwig Weise
f6d50864fb
Only show onboarding notifications, when tenant is selected
2026-04-20 09:29:35 +02:00
Karl Ludwig Weise
374fe19121
Only get notifications/staff, if tenant is selected
2026-04-20 09:22:48 +02:00
Karl Ludwig Weise
093325dba1
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/sveltejs/kit-2.57.1' into feat/package-updates
2026-04-20 09:08:51 +02:00
Karl Ludwig Weise
26cfdfe60d
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/nodemailer-8.0.5' into feat/package-updates
2026-04-20 09:08:27 +02:00
Karl Ludwig Weise
b8d51b4c0c
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/drizzle-orm-0.45.2' into feat/package-updates
2026-04-20 09:08:17 +02:00
Karl Ludwig Weise
798af99f21
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/vite-6.4.2' into feat/package-updates
2026-04-20 09:08:09 +02:00
Karl Ludwig Weise
020afbfe53
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/picomatch-2.3.2' into feat/package-updates
2026-04-20 09:07:55 +02:00
Karl Ludwig Weise
c9c9cdc290
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/flatted-3.4.2' into feat/package-updates
2026-04-20 09:07:44 +02:00
Karl Ludwig Weise
99f55f1f0a
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/effect-3.21.0' into feat/package-updates
2026-04-20 09:07:36 +02:00
Karl Ludwig Weise
99400f6497
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/multi-2e149f5a3a' into feat/package-updates
2026-04-20 09:07:25 +02:00
Karl Ludwig Weise
06245ec224
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/devalue-5.6.4' into feat/package-updates
2026-04-20 09:07:14 +02:00
Karl Ludwig Weise
cb7764b459
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/multi-770cfcd984' into feat/package-updates
2026-04-20 09:06:30 +02:00
Karl Ludwig Weise
1e9dd1a65e
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/svelte-5.53.6' into feat/package-updates
2026-04-20 09:06:19 +02:00
Karl Ludwig Weise
a41646ef92
Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/rollup-4.59.0' into feat/package-updates
2026-04-20 09:06:09 +02:00
dependabot[bot] and GitHub
cab993b9c7
Bump @sveltejs/kit from 2.50.0 to 2.57.1
...
Bumps [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit ) from 2.50.0 to 2.57.1.
- [Release notes](https://github.com/sveltejs/kit/releases )
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md )
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.57.1/packages/kit )
---
updated-dependencies:
- dependency-name: "@sveltejs/kit"
dependency-version: 2.57.1
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-10 19:15:46 +00:00
dependabot[bot] and GitHub
3de31341bd
Bump nodemailer from 7.0.11 to 8.0.5
...
Bumps [nodemailer](https://github.com/nodemailer/nodemailer ) from 7.0.11 to 8.0.5.
- [Release notes](https://github.com/nodemailer/nodemailer/releases )
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodemailer/nodemailer/compare/v7.0.11...v8.0.5 )
---
updated-dependencies:
- dependency-name: nodemailer
dependency-version: 8.0.5
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-08 23:37:06 +00:00
dependabot[bot] and GitHub
bbac0eda91
Bump drizzle-orm from 0.44.2 to 0.45.2
...
Bumps [drizzle-orm](https://github.com/drizzle-team/drizzle-orm ) from 0.44.2 to 0.45.2.
- [Release notes](https://github.com/drizzle-team/drizzle-orm/releases )
- [Commits](https://github.com/drizzle-team/drizzle-orm/compare/0.44.2...0.45.2 )
---
updated-dependencies:
- dependency-name: drizzle-orm
dependency-version: 0.45.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-08 06:59:34 +00:00
a97d64f0e3
Secure staff public keys ( #231 )
...
* Do not apply shortname for system tenant generateBaseUrl
Do not remove domain name parts if hostname already is a subdomain
* Use domain instead of shortName for tenant domain
* Fixed tests
* Obfuscate error output
* Create access tokens for clients from the challenge.
* Bootstrap tokens for new clients. Use jti on client tokens.
Secure my-appointments with token.
* If client exists staff does not need to retrieve staff key shares (since tunnel is already encrypted)
* Lint and check fixes
* Format fixes
---------
Co-authored-by: Karl Ludwig Weise <ludwig@ludwigweise.de >
2026-04-07 18:34:17 +02:00
dependabot[bot] and GitHub
8efdc4f150
Bump vite from 6.4.1 to 6.4.2
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 6.4.1 to 6.4.2.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/v6.4.2/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v6.4.2/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 6.4.2
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-07 04:47:35 +00:00
Karl Ludwig Weise
d2b3e544bb
Added --ignore-scripts to all npm ci installs
2026-03-31 17:26:56 +02:00
dependabot[bot] and GitHub
7759510b21
Bump picomatch from 2.3.1 to 2.3.2
...
Bumps [picomatch](https://github.com/micromatch/picomatch ) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases )
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2 )
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 2.3.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-26 03:55:03 +00:00
Karl Ludwig Weise
a57b80281d
Removed trivy vunerability scanner due to their security issues
2026-03-25 10:36:49 +01:00
Karl Ludwig Weise
4d125dc59a
Fix calendar appointment positions coming in utc
2026-03-24 20:23:51 +01:00
Karl Ludwig Weise
cc4bc76f53
Added translation fixes
2026-03-24 20:23:51 +01:00
Karl Ludwig Weise
cc174eec68
Fix pausing/activating channels
2026-03-24 20:23:51 +01:00
Hendrik and GitHub
5ddb05d9f0
Update Trivy action version in release workflow
...
Due to info stealer mentioned in https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23
2026-03-23 09:46:08 +01:00
dependabot[bot] and GitHub
c6065a7a12
Bump flatted from 3.3.3 to 3.4.2
...
Bumps [flatted](https://github.com/WebReflection/flatted ) from 3.3.3 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2 )
---
updated-dependencies:
- dependency-name: flatted
dependency-version: 3.4.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-21 15:00:37 +00:00
dependabot[bot] and GitHub
9b652c69a3
Bump effect from 3.19.14 to 3.21.0
...
Bumps [effect](https://github.com/Effect-TS/effect/tree/HEAD/packages/effect ) from 3.19.14 to 3.21.0.
- [Release notes](https://github.com/Effect-TS/effect/releases )
- [Changelog](https://github.com/Effect-TS/effect/blob/main/packages/effect/CHANGELOG.md )
- [Commits](https://github.com/Effect-TS/effect/commits/effect@3.21.0/packages/effect )
---
updated-dependencies:
- dependency-name: effect
dependency-version: 3.21.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-20 21:58:10 +00:00
dependabot[bot] and GitHub
fec32c0dd4
Bump kysely and @inlang/paraglide-js
...
Bumps [kysely](https://github.com/kysely-org/kysely ) to 0.28.14 and updates ancestor dependency [@inlang/paraglide-js](https://github.com/opral/paraglide-js ). These dependencies need to be updated together.
Updates `kysely` from 0.27.6 to 0.28.14
- [Release notes](https://github.com/kysely-org/kysely/releases )
- [Commits](https://github.com/kysely-org/kysely/compare/0.27.6...v0.28.14 )
Updates `@inlang/paraglide-js` from 2.9.1 to 2.15.0
- [Changelog](https://github.com/opral/paraglide-js/blob/main/CHANGELOG.md )
- [Commits](https://github.com/opral/paraglide-js/commits )
---
updated-dependencies:
- dependency-name: kysely
dependency-version: 0.28.14
dependency-type: indirect
- dependency-name: "@inlang/paraglide-js"
dependency-version: 2.15.0
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-20 21:39:44 +00:00
Hendrik and Karl Ludwig Weise
48eed20c17
Update issue templates
2026-03-20 14:27:08 +01:00
Hendrik Belitz
77b81dc82c
Format fixes
2026-03-16 11:37:43 +01:00
Hendrik Belitz
37a02c84c9
Lint and check fixes
2026-03-16 11:37:33 +01:00
Hendrik Belitz
bda0862bcf
If client exists staff does not need to retrieve staff key shares (since tunnel is already encrypted)
2026-03-16 10:46:08 +01:00
Karl Ludwig Weise
0bd45cf342
Merge remote-tracking branch 'origin/main' into secure-staff-public-keys
2026-03-16 09:27:17 +01:00
Hendrik and GitHub
4622ad714c
Obfuscate error data from public endpoints ( #230 )
...
* Do not apply shortname for system tenant generateBaseUrl
Do not remove domain name parts if hostname already is a subdomain
* Use domain instead of shortName for tenant domain
* Fixed tests
* Obfuscate error output
2026-03-12 17:08:28 +01:00
dependabot[bot] and GitHub
1b5b81ce36
Bump devalue from 5.6.2 to 5.6.4
...
Bumps [devalue](https://github.com/sveltejs/devalue ) from 5.6.2 to 5.6.4.
- [Release notes](https://github.com/sveltejs/devalue/releases )
- [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md )
- [Commits](https://github.com/sveltejs/devalue/compare/v5.6.2...v5.6.4 )
---
updated-dependencies:
- dependency-name: devalue
dependency-version: 5.6.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-12 15:33:14 +00:00
Hendrik Belitz
17d4846b8d
Bootstrap tokens for new clients. Use jti on client tokens.
...
Secure my-appointments with token.
2026-03-11 13:28:07 +01:00
Hendrik Belitz
b4ca6680ea
Create access tokens for clients from the challenge.
2026-03-11 12:35:08 +01:00
Hendrik Belitz
0da63b1d2c
Obfuscate error output
2026-03-11 12:20:33 +01:00
010855efa8
Added deployment docs ( #228 )
...
* Added deployment docs
* Fix lint
---------
Co-authored-by: Karl Ludwig Weise <ludwig@ludwigweise.de >
2026-03-11 11:58:59 +01:00
Hendrik and GitHub
c710142295
Do not apply shortname for system tenant generateBaseUrl ( #223 )
...
* Do not apply shortname for system tenant generateBaseUrl
Do not remove domain name parts if hostname already is a subdomain
* Use domain instead of shortName for tenant domain
* Fixed tests
2026-03-11 06:20:22 +01:00
Hendrik Belitz
294581aa10
Fixed tests
2026-03-10 21:56:38 +01:00
Hendrik Belitz
1b883c7d06
Use domain instead of shortName for tenant domain
2026-03-10 21:51:30 +01:00
Hendrik and GitHub
bd6c10e160
224 remove sensitive information from logs ( #225 )
...
* Logging adapted
* Fix log mocks
* Lint fixes
2026-03-10 19:08:03 +01:00
Karl Ludwig Weise
fc385fc9cc
Only show empty slots in the future
2026-03-10 19:07:08 +01:00
Karl Ludwig Weise
8bfd80aa26
Use UTC times for slot templates
2026-03-10 10:55:27 +01:00
Karl Ludwig Weise
fe67e23dec
Set refresh interval to 5 minutes
2026-03-10 09:10:33 +01:00
Karl Ludwig Weise
9e0dc6b870
Fix appointment positions after change to UTC
2026-03-09 10:07:00 +01:00
09ffc21523
Added flow for staff members to create appointments ( #204 )
...
* Added flow for staff members to create appointments
* Add calendar page title
* Remove security check npm audit for pull-requests
* Fix docker build to be multi-platform
* Attempt to fix tests
* Remove obsolete test
* Refresh session every 3 minutes
---------
Co-authored-by: Karl Ludwig Weise <ludwig@ludwigweise.de >
2026-03-06 10:22:28 +01:00