Florian Sylvain ea98c5ec05 fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

..

accept_invitation.feature

feat: add Role (owner|admin) to the user domain, persistence model and mapper

2026-09-30 00:58:58 +02:00

accept_invitation.qa.md

refac: hardening pass with multiple overhauls

2026-09-29 10:55:23 +02:00

accept_invite_screen.feature

feat: invitation accept screen and api

2026-09-29 09:21:53 +02:00

accept_invite_screen.qa.md

feat: invitation accept screen and api

2026-09-29 09:21:53 +02:00

account_verification.feature

refac: reamaining auth surface rewrite, T0

2026-09-24 05:11:49 +02:00

account_verification.qa.md

refac: reamaining auth surface rewrite, T0

2026-09-24 05:11:49 +02:00

activity_filter_cards_and_export.feature

feat(activity): update summary cards to toggles and introduce export menu

2026-10-12 05:13:25 +02:00

activity_filter_cards_and_export.qa.md

feat(activity): update summary cards to toggles and introduce export menu

2026-10-12 05:13:25 +02:00

activity_home_card_and_retention.feature

feat: setup logs retention by max file size

2026-10-07 22:02:13 +02:00

activity_home_card_and_retention.qa.md

feat: setup logs retention by max file size

2026-10-07 22:02:13 +02:00

activity_screen.feature

feat(activity): update summary cards to toggles and introduce export menu

2026-10-12 05:13:25 +02:00

activity_screen.qa.md

feat(activity): update summary cards to toggles and introduce export menu

2026-10-12 05:13:25 +02:00

activity-log-backend.feature

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

activity-log-backend.qa.md

feat: activity log backend foundation

2026-10-06 20:35:03 +02:00

activity-log-producers.feature

feat: SEO backend data (1/4)

2026-10-15 19:30:29 +02:00

activity-log-producers.qa.md

feat: activity log producers

2026-10-06 22:25:23 +02:00

api_client_global_error_handling.feature

feat: typed API client (useApi) and session store (useSession) with the global 401, unverified-403, 429 and offline handling from states.md

2026-09-25 17:33:40 +02:00

api_client_global_error_handling.qa.md

feat: typed API client (useApi) and session store (useSession) with the global 401, unverified-403, 429 and offline handling from states.md

2026-09-25 17:33:40 +02:00

api_keys_screen.feature

feat(integration): add image variants section and standardize code snippets

2026-10-12 23:27:41 +02:00

api_keys_screen.qa.md

feat(integration): add image variants section and standardize code snippets

2026-10-12 23:27:41 +02:00

api_keys.feature

feat: integration v2 and API key PART 1/3

2026-10-04 21:56:14 +02:00

api_keys.qa.md

feat: integration v2 and API key PART 1/3

2026-10-04 21:56:14 +02:00

article_body_format.feature

feat: articles format option with markdown new default

2026-10-04 19:04:12 +02:00

article_body_format.qa.md

feat: articles format option with markdown new default

2026-10-04 19:04:12 +02:00

article_body_unlimited.feature

feat: remove the 10,000-character article body limit and make the New article body optional

2026-10-11 08:49:11 +02:00

article_body_unlimited.qa.md

feat: remove the 10,000-character article body limit and make the New article body optional

2026-10-11 08:49:11 +02:00

article_publishing.feature

refac: authenticated user can publish and unpublish an article; an unknown id returns 404

2026-09-23 22:54:44 +02:00

article_publishing.qa.md

refac: authenticated user can publish and unpublish an article; an unknown id returns 404

2026-09-23 22:54:44 +02:00

article_title_rules.feature

refac: article title rules are the same in the API request and the domain; an invalid title returns 400 instead of 500

2026-09-23 20:04:09 +02:00

article_title_rules.qa.md

refac: article title rules are the same in the API request and the domain; an invalid title returns 400 instead of 500

2026-09-23 20:04:09 +02:00

articles_list.feature

fix: deleted image wrongfully caching

2026-10-01 05:27:25 +02:00

articles_list.qa.md

fix: deleted image wrongfully caching

2026-10-01 05:27:25 +02:00

articles_page_size_memory.feature

fix(SPA): save article list pagination in query url

2026-10-13 16:20:37 +02:00

articles_page_size_memory.qa.md

fix(SPA): save article list pagination in query url

2026-10-13 16:20:37 +02:00

articles_pagination_api.feature

fix: technical debts left by the Sites, Authors and SEO slices, plus backend support for the new Sites and Authors pagination

2026-10-19 00:25:31 +02:00

articles_pagination_api.qa.md

fix: technical debts left by the Sites, Authors and SEO slices, plus backend support for the new Sites and Authors pagination

2026-10-19 00:25:31 +02:00

articles_pagination_screen.feature

feat: articles pagination

2026-10-11 19:14:37 +02:00

articles_pagination_screen.qa.md

feat: articles pagination

2026-10-11 19:14:37 +02:00

auth_shell_login_conformance.feature

fix: changed frontend workflow and fixed login reference matching for real

2026-09-25 22:31:44 +02:00

auth_shell_login_conformance.qa.md

fix: changed frontend workflow and fixed login reference matching for real

2026-09-25 22:31:44 +02:00

authors_backend.feature

fix: technical debts left by the Sites, Authors and SEO slices, plus backend support for the new Sites and Authors pagination

2026-10-19 00:25:31 +02:00

authors_backend.qa.md

fix: technical debts left by the Sites, Authors and SEO slices, plus backend support for the new Sites and Authors pagination

2026-10-19 00:25:31 +02:00

cancel_pending_registration.feature

refac: reamaining auth surface rewrite, T0

2026-09-24 05:11:49 +02:00

cancel_pending_registration.qa.md

refac: reamaining auth surface rewrite, T0

2026-09-24 05:11:49 +02:00

container_update_guidance.feature

feat: complete dockerization (optional)

2026-10-05 04:52:49 +02:00

container_update_guidance.qa.md

feat: complete dockerization (optional)

2026-10-05 04:52:49 +02:00

content_entry_editor.feature

feat: entry editor at /content/:key/new and /content/:key/:id

2026-10-21 00:12:34 +02:00

content_entry_editor.qa.md

feat: entry editor at /content/:key/new and /content/:key/:id

2026-10-21 00:12:34 +02:00

content_entry_list.feature

feat: entry editor at /content/:key/new and /content/:key/:id

2026-10-21 00:12:34 +02:00

content_entry_list.qa.md

feat: entry list at /content/:key

2026-10-20 21:05:03 +02:00

custom_content_types_support.feature

feat: custom content type icons, built-in types, user lookup

2026-10-19 18:22:55 +02:00

custom_content_types_support.qa.md

feat: custom content type icons, built-in types, user lookup

2026-10-19 18:22:55 +02:00

custom_content_types.feature

feat(API): media field type

2026-10-21 05:07:36 +02:00

custom_content_types.qa.md

feat: custom content type icons, built-in types, user lookup

2026-10-19 18:22:55 +02:00

dashboard_shell_branding.feature

feat: settings page, sidebar and drawer destination "Settings" (icon settings, after Integration), route /settings (verified), showing only the running build's Version

2026-09-30 00:19:29 +02:00

dashboard_shell_branding.qa.md

feat: home screen and navigation design

2026-09-26 17:46:42 +02:00

delete_article_keeps_images.feature

feat(API): media library

2026-09-30 18:35:28 +02:00

delete_article_keeps_images.qa.md

feat(API): media library

2026-09-30 18:35:28 +02:00

docker_image_publishing.feature

feat: complete dockerization (optional)

2026-10-05 04:52:49 +02:00

docker_image_publishing.qa.md

feat: complete dockerization (optional)

2026-10-05 04:52:49 +02:00

docker-deployment.feature

feat: complete dockerization (optional)

2026-10-05 04:52:49 +02:00

docker-deployment.qa.md

feat: complete dockerization (optional)

2026-10-05 04:52:49 +02:00

document_title.feature

feat(SPA): "<page> · RenewCMS" as pages titles, instead of being stuck on whatever lands on first loading

2026-10-13 03:19:25 +02:00

document_title.qa.md

feat(SPA): "<page> · RenewCMS" as pages titles, instead of being stuck on whatever lands on first loading

2026-10-13 03:19:25 +02:00

edit_article_body.feature

feat: remove the 10,000-character article body limit and make the New article body optional

2026-10-11 08:49:11 +02:00

edit_article_body.qa.md

feat: remove the 10,000-character article body limit and make the New article body optional

2026-10-11 08:49:11 +02:00

editor_core.feature

feat: remove the 10,000-character article body limit and make the New article body optional

2026-10-11 08:49:11 +02:00

editor_core.qa.md

feat: remove the 10,000-character article body limit and make the New article body optional

2026-10-11 08:49:11 +02:00

editor_image_crop_resize.feature

feat: media picker and image removal

2026-10-01 05:04:58 +02:00

editor_image_crop_resize.qa.md

feat: media picker and image removal

2026-10-01 05:04:58 +02:00

editor_image_removal.feature

feat: media picker and image removal

2026-10-01 05:04:58 +02:00

editor_image_removal.qa.md

feat: media picker and image removal

2026-10-01 05:04:58 +02:00

editor_image_upload.feature

feat: media picker and image removal

2026-10-01 05:04:58 +02:00

editor_image_upload.qa.md

feat(media): pagination

2026-10-13 19:54:59 +02:00

editor_insert_link.feature

feat(editor): link insertion full UI and flow

2026-10-12 17:12:36 +02:00

editor_insert_link.qa.md

feat(editor): link insertion full UI and flow

2026-10-12 17:12:36 +02:00

editor_media_picker.feature

feat(media): pagination

2026-10-13 19:54:59 +02:00

editor_media_picker.qa.md

feat(media): pagination

2026-10-13 19:54:59 +02:00

editor_seo.feature

fix: SEO SPA editor last fixes (3/4)

2026-10-16 16:31:17 +02:00

editor_seo.qa.md

fix: SEO SPA editor last fixes (3/4)

2026-10-16 16:31:17 +02:00

get_current_user.feature

feat: add Role (owner|admin) to the user domain, persistence model and mapper

2026-09-30 00:58:58 +02:00

get_current_user.qa.md

feat: add Role (owner|admin) to the user domain, persistence model and mapper

2026-09-30 00:58:58 +02:00

hasher_domain_interface.feature

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

hasher_domain_interface.qa.md

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

home.feature

feat(SPA): profile page, display name and the new account menu

2026-09-29 10:13:09 +02:00

home.qa.md

feat: home screen and navigation design

2026-09-26 17:46:42 +02:00

image_upload_rules.feature

feat(API): media library

2026-09-30 18:35:28 +02:00

image_variants_cache.feature

feat: image variants cache panel

2026-10-08 21:13:32 +02:00

image_variants_cache.qa.md

feat: image variants cache panel

2026-10-08 21:13:32 +02:00

image_variants_editor_picker.feature

feat: image variants per image

2026-10-08 19:57:51 +02:00

image_variants_editor_picker.qa.md

feat: image variants per image

2026-10-08 19:57:51 +02:00

image_variants_media_screens.feature

feat: image variants per image

2026-10-08 19:57:51 +02:00

image_variants_media_screens.qa.md

feat: image variants per image

2026-10-08 19:57:51 +02:00

image_variants_per_image_api.feature

feat: image variants per image

2026-10-08 19:57:51 +02:00

image_variants_per_image_api.qa.md

feat: image variants per image

2026-10-08 19:57:51 +02:00

image_variants_screens.feature

feat(media): align visual checks and variant UI with merged design

2026-10-13 02:35:20 +02:00

image_variants_screens.qa.md

feat(media): align visual checks and variant UI with merged design

2026-10-13 02:35:20 +02:00

image-variants.feature

feat: image variants engine

2026-10-08 02:33:32 +02:00

image-variants.qa.md

feat: image variants engine

2026-10-08 02:33:32 +02:00

integration_images.feature

feat(integration): add image variants section and standardize code snippets

2026-10-12 23:27:41 +02:00

integration_images.qa.md

feat(integration): add image variants section and standardize code snippets

2026-10-12 23:27:41 +02:00

integration.feature

feat(integration): add image variants section and standardize code snippets

2026-10-12 23:27:41 +02:00

integration.qa.md

feat(media): pagination

2026-10-13 19:54:59 +02:00

invitations.feature

feat: add Role (owner|admin) to the user domain, persistence model and mapper

2026-09-30 00:58:58 +02:00

invitations.qa.md

feat: add Role (owner|admin) to the user domain, persistence model and mapper

2026-09-30 00:58:58 +02:00

invite_management.feature

feat: invite management API: DELETE /v1/user/invite/:id (204, cancels a pending invite) and POST /v1/user/invite/:id/renew (200, new code, expires_at = now+3d, created_at = now, resends the invitation email, old link dead)

2026-09-30 01:36:43 +02:00

invite_management.qa.md

feat: invite management API: DELETE /v1/user/invite/:id (204, cancels a pending invite) and POST /v1/user/invite/:id/renew (200, new code, expires_at = now+3d, created_at = now, resends the invitation email, old link dead)

2026-09-30 01:36:43 +02:00

language_switcher_conformance.feature

fix: language buttons real design / conformance

2026-10-04 17:08:43 +02:00

language_switcher_conformance.qa.md

fix: language buttons real design / conformance

2026-10-04 17:08:43 +02:00

login_and_password_reset_rate_limiting.feature

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

login_and_password_reset_rate_limiting.qa.md

fix: login and password reset requests are rate-limited per client (not in the README; there is currently no brute-force protection on the public auth routes)

2026-09-25 05:33:02 +02:00

login_card_conformance.feature

fix: changed frontend workflow and fixed login reference matching for real

2026-09-25 22:31:44 +02:00

login_card_conformance.qa.md

fix: changed frontend workflow and fixed login reference matching for real

2026-09-25 22:31:44 +02:00

login_screen.feature

fix: visuals reference matching overhaul and better workflow

2026-09-26 21:04:51 +02:00

login_screen.qa.md

fix: visuals reference matching overhaul and better workflow

2026-09-26 21:04:51 +02:00

media_browse.feature

feat(media): pagination

2026-10-13 19:54:59 +02:00

media_browse.qa.md

feat(media): pagination

2026-10-13 19:54:59 +02:00

media_cleanup_spa.feature

fix: design harmonization on last features

2026-10-07 18:20:18 +02:00

media_cleanup_spa.qa.md

fix: design harmonization on last features

2026-10-07 18:20:18 +02:00

media_field_library.feature

feat(SPA): media library indications for custom medial field type usage

2026-10-21 16:17:09 +02:00

media_field_library.qa.md

feat(SPA): media library indications for custom medial field type usage

2026-10-21 16:17:09 +02:00

media_field_spa.feature

feat(SPA): media field type

2026-10-21 15:17:15 +02:00

media_field_spa.qa.md

feat(SPA): media field type

2026-10-21 15:17:15 +02:00

media_field_type.feature

feat(API): media field type

2026-10-21 05:07:36 +02:00

media_field_type.qa.md

feat(API): media field type

2026-10-21 05:07:36 +02:00

media_library.feature

refac: atomic merge, lost-update race, RunPurge cost, duplicated walks

2026-10-21 22:47:46 +02:00

media_library.qa.md

refac: atomic merge, lost-update race, RunPurge cost, duplicated walks

2026-10-21 22:47:46 +02:00

media_merge_hardening.feature

refac: atomic merge, lost-update race, RunPurge cost, duplicated walks

2026-10-21 22:47:46 +02:00

media_merge_hardening.qa.md

refac: atomic merge, lost-update race, RunPurge cost, duplicated walks

2026-10-21 22:47:46 +02:00

media_page_size_memory.feature

feat(media): pagination

2026-10-13 19:54:59 +02:00

media_page_size_memory.qa.md

feat(media): pagination

2026-10-13 19:54:59 +02:00

media_pagination_api.feature

feat(media): pagination

2026-10-13 19:54:59 +02:00

media_pagination_api.qa.md

feat(media): pagination

2026-10-13 19:54:59 +02:00

media_pagination_screen.feature

feat(media): pagination

2026-10-13 19:54:59 +02:00

media_pagination_screen.qa.md

feat(media): pagination

2026-10-13 19:54:59 +02:00

media_purge_scheduler.feature

feat: media duplicate purge, part 2 of 3: the automatic purge scheduler (Go only)

2026-10-05 19:44:15 +02:00

media_purge_scheduler.qa.md

feat: media duplicate purge, part 2 of 3: the automatic purge scheduler (Go only)

2026-10-05 19:44:15 +02:00

media_purge.feature

refac: atomic merge, lost-update race, RunPurge cost, duplicated walks

2026-10-21 22:47:46 +02:00

media_purge.qa.md

refac: atomic merge, lost-update race, RunPurge cost, duplicated walks

2026-10-21 22:47:46 +02:00

media_upload_selection_duplicates.feature

feat(media): pagination

2026-10-13 19:54:59 +02:00

media_upload_selection_duplicates.qa.md

feat(media): pagination

2026-10-13 19:54:59 +02:00

multi_user_hardening.feature

refac: hardening pass with multiple overhauls

2026-09-29 10:55:23 +02:00

multi_user_hardening.qa.md

refac: hardening pass with multiple overhauls

2026-09-29 10:55:23 +02:00

mysql_database_driver.feature

feat: optional MySQL/MariaDB database driver for deployments that cannot use local SQLite

2026-10-06 04:08:33 +02:00

mysql_database_driver.qa.md

feat: optional MySQL/MariaDB database driver for deployments that cannot use local SQLite

2026-10-06 04:08:33 +02:00

new_article_modal.feature

feat: remove the 10,000-character article body limit and make the New article body optional

2026-10-11 08:49:11 +02:00

new_article_modal.qa.md

feat: remove the 10,000-character article body limit and make the New article body optional

2026-10-11 08:49:11 +02:00

not_found_errors.feature

fix: reading a single article follows the same rule as the list: anyone can read an online article, a verified user can also read an offline one, and an unknown or hidden id returns 404

2026-09-24 16:32:40 +02:00

not_found_errors.qa.md

refac: missing user or article is reported with a domain not-found error instead of a raw GORM error, and the API answers 404 for it

2026-09-23 18:55:05 +02:00

nuxt_ui_shell_foundation.feature

feat: settings page, sidebar and drawer destination "Settings" (icon settings, after Integration), route /settings (verified), showing only the running build's Version

2026-09-30 00:19:29 +02:00

nuxt_ui_shell_foundation.qa.md

feat: settings page, sidebar and drawer destination "Settings" (icon settings, after Integration), route /settings (verified), showing only the running build's Version

2026-09-30 00:19:29 +02:00

pending_screen.feature

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

pending_screen.qa.md

fix: visuals reference matching overhaul and better workflow

2026-09-26 21:04:51 +02:00

postgres_database_driver.feature

feat: PostgreSQL driver support

2026-10-06 13:35:10 +02:00

postgres_database_driver.qa.md

feat: PostgreSQL driver support

2026-10-06 13:35:10 +02:00

profile_page.feature

feat: settings page, sidebar and drawer destination "Settings" (icon settings, after Integration), route /settings (verified), showing only the running build's Version

2026-09-30 00:19:29 +02:00

profile_page.qa.md

fix: account menu matches the redesigned board: System, Light, Dark stay in the menu and the sheet, and the visual-check exception on profile "Account menu" in web/visual/states.ts is removed

2026-09-29 23:31:04 +02:00

public_article_listing.feature

feat: articles pagination

2026-10-11 19:14:37 +02:00

public_article_listing.qa.md

refac: authenticated user can list all articles, including offline ones, while the public list only shows online ones

2026-09-23 22:36:41 +02:00

public_article_read.feature

feat: media picker and image removal

2026-10-01 05:04:58 +02:00

public_article_read.qa.md

fix: reading a single article follows the same rule as the list: anyone can read an online article, a verified user can also read an offline one, and an unknown or hidden id returns 404

2026-09-24 16:32:40 +02:00

register_redirects_to_pending.feature

fix(register): onSubmit now calls await session.retry() before going to /register/pending

2026-10-13 02:49:43 +02:00

register_redirects_to_pending.qa.md

fix(register): onSubmit now calls await session.retry() before going to /register/pending

2026-10-13 02:49:43 +02:00

register_screen.feature

feat: register T0

2026-09-26 02:48:16 +02:00

register_screen.qa.md

feat: register T0

2026-09-26 02:48:16 +02:00

registration_gate_and_verification_email.feature

feat: new emails design

2026-09-26 05:41:34 +02:00

registration_gate_and_verification_email.qa.md

refac: register only open while no verified acc exists, enforced by a use case rather than handler & sends verification email whose link uses the conf pub URL whose code expires after 2h

2026-09-24 03:36:37 +02:00

registration_status_endpoint.feature

refac: GET /v1/auth/registration

2026-09-25 15:54:42 +02:00

registration_status_endpoint.qa.md

refac: GET /v1/auth/registration

2026-09-25 15:54:42 +02:00

remove_legacy_article_image_alias.feature

feat: media picker and image removal

2026-10-01 05:04:58 +02:00

remove_legacy_article_image_alias.qa.md

feat: media picker and image removal

2026-10-01 05:04:58 +02:00

request_password_reset.feature

feat: new emails design

2026-09-26 05:41:34 +02:00

request_password_reset.qa.md

fix: remove the unused user use cases, fix the specs that no longer match the code, include api/middleware and api/pkg/claims in mutation testing, log failures that password reset requests currently ignore, and reject user_id claims that don't fit a user id

2026-09-25 05:58:37 +02:00

reset_confirm_screen.feature

feat: password reset full design and flow

2026-09-28 05:06:16 +02:00

reset_confirm_screen.qa.md

feat: password reset full design and flow

2026-09-28 05:06:16 +02:00

reset_password.feature

refac: reamaining auth surface rewrite, T0

2026-09-24 05:11:49 +02:00

reset_password.qa.md

refac: reamaining auth surface rewrite, T0

2026-09-24 05:11:49 +02:00

reset_request_screen.feature

feat: password reset full design and flow

2026-09-28 05:06:16 +02:00

reset_request_screen.qa.md

feat: password reset full design and flow

2026-09-28 05:06:16 +02:00

runtime_settings_injection.feature

feat: register T1 (pending, verify)

2026-09-26 04:56:48 +02:00

runtime_settings_injection.qa.md

feat: register T1 (pending, verify)

2026-09-26 04:56:48 +02:00

s3_image_storage.feature

feat: optional S3-compatible storage for uploaded images, instead of the local upload directory

2026-10-06 12:13:24 +02:00

s3_image_storage.qa.md

feat: optional S3-compatible storage for uploaded images, instead of the local upload directory

2026-10-06 12:13:24 +02:00

schema_builder_create.feature

feat: schema builder's create flow

2026-10-20 00:29:01 +02:00

schema_builder_create.qa.md

feat: schema builder's create flow

2026-10-20 00:29:01 +02:00

schema_builder_delete.feature

feat: delete a custom type

2026-10-20 17:56:44 +02:00

schema_builder_delete.qa.md

feat: delete a custom type

2026-10-20 17:56:44 +02:00

schema_builder_edit.feature

feat: edit an existing custom type

2026-10-20 04:42:50 +02:00

schema_builder_edit.qa.md

feat: edit an existing custom type

2026-10-20 04:42:50 +02:00

schema_builtin_view.feature

feat: schema builder's create flow

2026-10-20 00:29:01 +02:00

schema_builtin_view.qa.md

feat: schema builder's create flow

2026-10-20 00:29:01 +02:00

schema_list_and_content_nav.feature

feat: built-in type read-only view,s chema list, states, spec files

2026-10-19 22:31:13 +02:00

schema_list_and_content_nav.qa.md

feat: built-in type read-only view,s chema list, states, spec files

2026-10-19 22:31:13 +02:00

security_privacy_hardening.feature

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

security_privacy_hardening.qa.md

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

seo_data_backend.feature

feat: SEO backend data (1/4)

2026-10-15 19:30:29 +02:00

seo_data_backend.qa.md

feat: SEO backend data (1/4)

2026-10-15 19:30:29 +02:00

seo_output_backend.feature

feat: SEO backend output (2/4)

2026-10-15 21:48:55 +02:00

seo_output_backend.qa.md

feat: SEO backend output (2/4)

2026-10-15 21:48:55 +02:00

seo_sites_articles_integration.feature

fix: technical debts left by the Sites, Authors and SEO slices, plus backend support for the new Sites and Authors pagination

2026-10-19 00:25:31 +02:00

seo_sites_articles_integration.qa.md

fix: technical debts left by the Sites, Authors and SEO slices, plus backend support for the new Sites and Authors pagination

2026-10-19 00:25:31 +02:00

serve_uploaded_images.feature

fix: deleted image wrongfully caching

2026-10-01 05:27:25 +02:00

serve_uploaded_images.qa.md

fix: deleted image wrongfully caching

2026-10-01 05:27:25 +02:00

settings_page.feature

feat: settings page, sidebar and drawer destination "Settings" (icon settings, after Integration), route /settings (verified), showing only the running build's Version

2026-09-30 00:19:29 +02:00

settings_page.qa.md

feat: settings page, sidebar and drawer destination "Settings" (icon settings, after Integration), route /settings (verified), showing only the running build's Version

2026-09-30 00:19:29 +02:00

shell_tokens_and_nav_contrast.feature

fix: small design harmonization and overhaul

2026-10-11 17:17:22 +02:00

shell_tokens_and_nav_contrast.qa.md

fix: small design harmonization and overhaul

2026-10-11 17:17:22 +02:00

sites_authors_integration.feature

feat: sites and authors integration into existing screens (& formated all frontend files kinda accidentally)

2026-10-15 05:25:44 +02:00

sites_authors_integration.qa.md

feat: sites and authors integration into existing screens (& formated all frontend files kinda accidentally)

2026-10-15 05:25:44 +02:00

sites_authors_pagination_screen.feature

feat: pagination in the SPA for the Sites and Authors lists

2026-10-19 04:00:47 +02:00

sites_authors_pagination_screen.qa.md

feat: pagination in the SPA for the Sites and Authors lists

2026-10-19 04:00:47 +02:00

sites_authors_screens.feature

fix: authors profile pictute all accross the SPA

2026-10-19 00:46:16 +02:00

sites_authors_screens.qa.md

fix: authors profile pictute all accross the SPA

2026-10-19 00:46:16 +02:00

sites_backend.feature

fix: technical debts left by the Sites, Authors and SEO slices, plus backend support for the new Sites and Authors pagination

2026-10-19 00:25:31 +02:00

sites_backend.qa.md

fix: technical debts left by the Sites, Authors and SEO slices, plus backend support for the new Sites and Authors pagination

2026-10-19 00:25:31 +02:00

spa_internationalization.feature

fix: language buttons real design / conformance

2026-10-04 17:08:43 +02:00

spa_internationalization.qa.md

fix: language buttons real design / conformance

2026-10-04 17:08:43 +02:00

stale_token_invalidation.feature

fix: resetting the password or cancelling a registration ends existing sessions: a token issued before the change is refused

2026-09-25 05:03:34 +02:00

stale_token_invalidation.qa.md

fix: resetting the password or cancelling a registration ends existing sessions: a token issued before the change is refused

2026-09-25 05:03:34 +02:00

tech_debt_hardening.feature

fix: technical debts left by the Sites, Authors and SEO slices, plus backend support for the new Sites and Authors pagination

2026-10-19 00:25:31 +02:00

tech_debt_hardening.qa.md

fix: technical debts left by the Sites, Authors and SEO slices, plus backend support for the new Sites and Authors pagination

2026-10-19 00:25:31 +02:00

transactional_email_templates.feature

feat: new emails design

2026-09-26 05:41:34 +02:00

transactional_email_templates.qa.md

feat: new emails design

2026-09-26 05:41:34 +02:00

trusted_proxy_client_ip_for_rate_limiting.feature

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

trusted_proxy_client_ip_for_rate_limiting.qa.md

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

unverified_users_and_reregistration.feature

refac: several unverified users can exist at once: an empty reset or verification code is stored as no value so it doesn't break the unique constraint, and deleting a user removes the row so the same username and email can register again

2026-09-24 01:59:24 +02:00

unverified_users_and_reregistration.qa.md

refac: several unverified users can exist at once: an empty reset or verification code is stored as no value so it doesn't break the unique constraint, and deleting a user removes the row so the same username and email can register again

2026-09-24 01:59:24 +02:00

updates_download_stage.feature

refac: revamp the update flow in settings so the user has better visibility that it has to restart when update downloaded

2026-10-04 17:42:46 +02:00

updates_download_stage.qa.md

feat: update button (download, verify, stage)

2026-10-01 18:13:45 +02:00

updates_release_feed.feature

feat: signed releases, release feed, notification (read-only)

2026-10-01 15:01:53 +02:00

updates_release_feed.qa.md

feat: signed releases, release feed, notification (read-only)

2026-10-01 15:01:53 +02:00

updates_restart_helper.feature

feat: restart to apply update, privileged helper, rollback

2026-10-01 21:36:40 +02:00

updates_restart_helper.qa.md

feat: restart to apply update, privileged helper, rollback

2026-10-01 21:36:40 +02:00

use_case_baseline.feature

feat: articles pagination

2026-10-11 19:14:37 +02:00

user_display_name.feature

feat(API): optional display name on users

2026-09-29 06:52:58 +02:00

user_display_name.qa.md

feat(API): optional display name on users

2026-09-29 06:52:58 +02:00

user_response_field_hygiene.feature

feat: add Role (owner|admin) to the user domain, persistence model and mapper

2026-09-30 00:58:58 +02:00

user_response_field_hygiene.qa.md

feat: add Role (owner|admin) to the user domain, persistence model and mapper

2026-09-30 00:58:58 +02:00

user_roles.feature

feat: add Role (owner|admin) to the user domain, persistence model and mapper

2026-09-30 00:58:58 +02:00

user_roles.qa.md

feat: add Role (owner|admin) to the user domain, persistence model and mapper

2026-09-30 00:58:58 +02:00

users_row_actions.feature

feat: users row actions "Cancel invite" on Pending rows and "Renew invite" on Expired rows

2026-09-30 02:48:49 +02:00

users_row_actions.qa.md

feat: users row actions "Cancel invite" on Pending rows and "Renew invite" on Expired rows

2026-09-30 02:48:49 +02:00

users_screen.feature

feat: users row actions "Cancel invite" on Pending rows and "Renew invite" on Expired rows

2026-09-30 02:48:49 +02:00

users_screen.qa.md

feat: users row actions "Cancel invite" on Pending rows and "Renew invite" on Expired rows

2026-09-30 02:48:49 +02:00

variants_visual_conformance.feature

feat(media): align visual checks and variant UI with merged design

2026-10-13 02:35:20 +02:00

variants_visual_conformance.qa.md

feat(media): align visual checks and variant UI with merged design

2026-10-13 02:35:20 +02:00

verified_account_required.feature

feat: media picker and image removal

2026-10-01 05:04:58 +02:00

verified_account_required.qa.md

feat: media picker and image removal

2026-10-01 05:04:58 +02:00

verify_screen.feature

fix: visuals reference matching overhaul and better workflow

2026-09-26 21:04:51 +02:00

verify_screen.qa.md

fix: visuals reference matching overhaul and better workflow

2026-09-26 21:04:51 +02:00

web_test_runner.feature

chore: Vitest + Vue Test Utils test runner exposed as task test:web

2026-09-25 16:12:50 +02:00

write_not_found_errors.feature

refac: repository updates, image attachment and deletes report the domain not-found error for an unknown id, the same for articles, users and images, and the test fakes stop returning GORM errors

2026-09-23 22:09:06 +02:00

write_not_found_errors.qa.md

refac: repository updates, image attachment and deletes report the domain not-found error for an unknown id, the same for articles, users and images, and the test fakes stop returning GORM errors

2026-09-23 22:09:06 +02:00