-
v0.4.1
StableAll checks were successfulCI / validate-branch (push) Has been skippedCI / validate-release-pr (push) Has been skippedPublish / detect-release (push) Successful in 5sPublish / tag (push) Successful in 8sPublish / promote-release (push) Successful in 3sCI / lint (push) Successful in 1m23sCI / security (push) Successful in 2m10sCI / build (push) Successful in 2m13sCI / test (push) Successful in 1m22sreleased this
2026-02-19 02:03:34 +00:00 | 159 commits to main since this releaseRelease v0.4.1 — Deferred Polish
Features
- Mobile responsiveness: Responsive sidebars (admin/settings drawers), mobile navbar with hamburger collapse, responsive grid layouts for all form sections (OP#1059)
- Keyboard shortcuts: Global keyboard shortcuts (
?help overlay,/search focus,nnew dashboard) (OP#1064) - Browser favicon support: Per-dashboard and server-default favicon URLs with DB migration, admin settings UI, and fallback resolution chain (OP#334)
Security Fixes
- Require POST for logout to prevent CSRF forced-logout (OP#1073)
- Use constant-time comparison for CSRF and OAuth state tokens (OP#1074)
- Add
Secureflag to all cookies missing it (OP#1075) - Add PATCH to CSRF method check (OP#1076)
Tests
- Unit tests for mobile responsiveness across admin, settings, and header layouts
- Unit tests for favicon resolution fallback chain
- Unit tests for base.templ
faviconOrDefaulthelper
Downloads
-
Source code (ZIP)
1 download
-
Source code (TAR.GZ)
1 download