• v0.4.1 a14d0a1442

    v0.4.1
    All checks were successful
    CI / validate-branch (push) Has been skipped
    CI / validate-release-pr (push) Has been skipped
    Publish / detect-release (push) Successful in 5s
    Publish / tag (push) Successful in 8s
    Publish / promote-release (push) Successful in 3s
    CI / lint (push) Successful in 1m23s
    CI / security (push) Successful in 2m10s
    CI / build (push) Successful in 2m13s
    CI / test (push) Successful in 1m22s
    Stable

    Gravity Bot released this 2026-02-19 02:03:34 +00:00 | 159 commits to main since this release

    Release v0.4.1 — Deferred Polish

    Features

    • Mobile responsiveness: Responsive sidebars (admin/settings drawers), mobile navbar with hamburger collapse, responsive grid layouts for all form sections (OP#1059)
    • Keyboard shortcuts: Global keyboard shortcuts (? help overlay, / search focus, n new dashboard) (OP#1064)
    • Browser favicon support: Per-dashboard and server-default favicon URLs with DB migration, admin settings UI, and fallback resolution chain (OP#334)

    Security Fixes

    • Require POST for logout to prevent CSRF forced-logout (OP#1073)
    • Use constant-time comparison for CSRF and OAuth state tokens (OP#1074)
    • Add Secure flag to all cookies missing it (OP#1075)
    • Add PATCH to CSRF method check (OP#1076)

    Tests

    • Unit tests for mobile responsiveness across admin, settings, and header layouts
    • Unit tests for favicon resolution fallback chain
    • Unit tests for base.templ faviconOrDefault helper
    Downloads