Wallos - Package Updates

Package Updates

[1.23.0]

Package Updates

[1.24.0]

Update Wallos to 5.1.1
Full Changelog
bump version (#1113) (d3b72d3)
create dark and light theme versions of the logos when removing background (8d22f04)
ajax calls after session expired (8d22f04)

Package Updates

[1.25.0]

Update Wallos to 5.2.0
Full Changelog
add new logo themed versions generation to add subscription api endpoint (921fcfd)
better navigation inside logo search (921fcfd)
bottom sheet slide up animation (921fcfd)
improve menu navigation on grid mode (921fcfd)
syntax error on nl.js translation file (921fcfd)

Package Updates

[1.26.0]

Update Wallos to 5.4.1
Full Changelog
bump version (#1131) (18dd08b)
add Arabic localization (aff3ed0)
add manual logo search box and png prioritization (aff3ed0)
add OIDC_REQUIRE_EMAIL_VERIFIED environment variable and SSRF_ALLOWLIST environment variable (aff3ed0)
ai recommendations not handling varied provider responses (aff3ed0)
deleting orphaned logos not taking into account themed variants (aff3ed0)
email notification test rejecting non-admin users (aff3ed0)
notification test/send requests hanging on unreachable hosts (aff3ed0)
progress bar showing 100% when next payment is more than one cycle away (aff3ed0)
service worker caching stale logo search results and broken images as logos (aff3ed0)

Package Updates

[1.26.1]

Package Updates

[1.26.2]

Update Wallos to 5.4.4
Full Changelog
bump version (#1162) (1efd340)
security: block IPv6 transition addresses in SSRF guard (44e3b62)
security: rate limit totp verification (44e3b62)
security: stream database backups instead of writing them to the web root (44e3b62)
security: unsafe zip extraction during db restore (44e3b62)

Package Updates

[1.26.3]

Update Wallos to 5.4.5
Full Changelog
scope currency rate updates to the user being refreshed (#1175) (267f057), closes #1150

Package Updates

[1.27.0]

Update Wallos to 5.5.0
Full Changelog
let admins allow standard users to use the Webhook Allowlist (closes #1153, closes #1138) (41494ef)
actually delete the login token on logout (#1184) (41494ef)
make the TOTP replay guard run (#1181) (41494ef)
close remaining gaps in login-token revocation from #1184's review (41494ef)
OIDC token exchange failing behind CDN/anycast proxies (closes #1145) (41494ef)
payment method in-use guard misses when 2+ subscriptions share it (closes #1179) (41494ef)
reflected XSS via unescaped theme cookies in inline scripts (41494ef)
reject deleting or disabling an in-use payment method on every path (41494ef)
undefined array key warnings for subscriptions with no seeded stats bucket (closes #1182) (41494ef)

Package Updates

[1.27.1]

Package Updates

[1.28.0]

Update Wallos to 5.6.0
Full Changelog
add Azerbaijani (az) localization (#1201) (6a740f8)
make the dashboard upcoming payment count configurable (#1191) (4fc9310), closes #1186
add missing language files to the service worker (b1ba0d3)
auth: disable 2FA atomically instead of reporting success on a partial write (#1193) (45eb0a2)
auth: do not report 2FA as enabled when the enrolment did not complete (#1194) (89c97df)
auth: do not report a password reset that did not happen (#1195) (6600c07)
auth: do not report an email as verified when the token was not consumed (#1196) (7a57ec1)
check the delete in delete-before-replace save pairs (#1197) (c0a2cb7)
cleanup unused logos when deleting or editing subscriptions (20d23db)
currency: skip an exchange rate refresh that already happened today (#1199) (54f822b)

Package Updates

[1.29.0]

Cloudron Forum