Tandoor - Package Updates

Package Updates

[1.12.8]

Package Updates

[1.12.9]

Package Updates

[1.12.10]

Update recipes to 2.6.11
Full Changelog
improved pantry booking dialog and table
fixed another order parameter
fixed recipes marked as private could be viewed trough API utility endpoints GHSA-cqj3-64qw-4w52
fixed recipe search and recipe book API endpoints accepting any order by attribute GHSA-4x57-2q4q-xwpp
fixed regex ddos possibility in automation engine GHSA-f2gw-c2c7-59v7
fixed AI Providers could be configured with malicious URLs to allow SSRF GHSA-wq4h-2r8x-cv65
if you are using custom AI backends you need to add them to the new AI_ALLOWED_URLS settings (see docs)
fixed bookmarklets of other users in your own space could be accessed/deleted GHSA-4vw7-c646-g23w
updated lots of dependencies
updated translations for various languages

Package Updates

[1.12.11]

Update recipes to 2.6.12
Full Changelog
fixed private recipes could be manipulated by space users trough steps API GHSA-wjf3-fq5w-7j7w
updated translations

Package Updates

[1.12.12]

Package Updates

[1.12.13]

Update recipes to 2.6.14
Full Changelog
added new selection field for all places where you select any food, unit, ...
native vuetify component for better look and feell
supports editing objects directly from the selection using shift + E hotkey (on desktop)
added images to recipes
base for future improvements like favorites
added space/household/user info to bottom navigation on mobile
added add to pantry button to recipe context menu
fixed Tandoor logo not shown in shared/anonymous view
fixed smart meal planner not respecting meal type times #4506
fixed empty amount fields in recipe editor would cause an error

Package Updates

[1.12.14]

Update recipes to 2.6.15
Full Changelog
added pestle import support (thanks to LLf13 #4637)
added AI based step sorter to recipe import (thanks to sadSanta-07 #4799)
improved adding multiple recipes to a book at the same time (thanks to ujjwalv01 #4610)
fixed group permission caching issue accross spaces GHSA-29pm-4vh2-f8mp
fixed recipe export not respecting private flag of recipes GHSA-gh65-4455-65vg
fixed possible to add other space member private recipes to book via api and see overview GHSA-gh65-4455-65vg
fixed file path of recipe could be changed to show a different file GHSA-8635-c66p-9cwm
fixed fixed batch update allowing recipe shares accross spaces GHSA-5mw3-c978-gc6w
fixed image rotation sometimes lost when uploading to tandoor #4765 (thanks to @agross #4769)
changed cook logs to only be editable by the creator or admins of a space GHSA-g378-5m3q-p58q

Package Updates

[1.13.0]

Package Updates

[1.14.0]

Update recipes to 2.7.1
Full Changelog
improved error messages when AI service providers are overloaded
fixed meal plan servings being overriden on save #4830 (thanks to jin-codes #4840)
removed api-token-auth/ endpoint to create an AccessToken for the API with a username/password. Please refer to the authentication docs to see how to authenticate with 3rd party clients.
fixed shopping list bulk API endpoint accepted IDs from foreign spaces GHSA-5p9v-743w-79h3
fixed XML parser could read local files in rezepsuite and cookamte importers GHSA-5f74-7rgh-pc97
fixed shopping list recipe api could reveal overview of recipes marked as private GHSA-pcq2-64qw-jm4x
fixed group permission check cache not invalidated properly on space change GHSA-69q3-5q6x-7hmx
fixed recipe book entries could be moved to other peoples books GHSA-748x-xc8h-95hj
fixed meal plan api revealing recipes from other spaces GHSA-c7mc-c9jr-38hf
added ACCOUNT_EMAIL_VERIFICATION setting with default optional (options "mandatory", "optional", "none")

Package Updates

[1.14.1]

Package Updates

[1.14.2]

Cloudron Forum