Tandoor - Package Updates
-
[1.12.9]
- Update recipes to 2.6.9
- Full Changelog
- fixed another stored XSS in recipe instructions GHSA-89pw-5qxc-7v86
- updated pillow library security update
-
P Package Updates locked this topic on
-
[1.12.10]
- Update recipes to 2.6.11
- Full Changelog
- improved pantry booking dialog and table
- fixed another order parameter
- fixed recipes marked as private could be viewed trough API utility endpoints GHSA-cqj3-64qw-4w52
- fixed recipe search and recipe book API endpoints accepting any order by attribute GHSA-4x57-2q4q-xwpp
- fixed regex ddos possibility in automation engine GHSA-f2gw-c2c7-59v7
- fixed AI Providers could be configured with malicious URLs to allow SSRF GHSA-wq4h-2r8x-cv65
- if you are using custom AI backends you need to add them to the new
AI_ALLOWED_URLSsettings (see docs) - fixed bookmarklets of other users in your own space could be accessed/deleted GHSA-4vw7-c646-g23w
- updated lots of dependencies
- updated translations for various languages
-
[1.12.11]
- Update recipes to 2.6.12
- Full Changelog
- fixed private recipes could be manipulated by space users trough steps API GHSA-wjf3-fq5w-7j7w
- updated translations
-
[1.12.12]
- Update recipes to 2.6.13
- Full Changelog
- updated translations
-
[1.12.13]
- Update recipes to 2.6.14
- Full Changelog
- added new selection field for all places where you select any food, unit, ...
- native vuetify component for better look and feell
- supports editing objects directly from the selection using
shift + Ehotkey (on desktop) - added images to recipes
- base for future improvements like favorites
- added space/household/user info to bottom navigation on mobile
- added add to pantry button to recipe context menu
- fixed Tandoor logo not shown in shared/anonymous view
- fixed smart meal planner not respecting meal type times #4506
- fixed empty amount fields in recipe editor would cause an error
-
[1.12.14]
- Update recipes to 2.6.15
- Full Changelog
- added pestle import support (thanks to LLf13 #4637)
- added AI based step sorter to recipe import (thanks to sadSanta-07 #4799)
- improved adding multiple recipes to a book at the same time (thanks to ujjwalv01 #4610)
- fixed group permission caching issue accross spaces GHSA-29pm-4vh2-f8mp
- fixed recipe export not respecting private flag of recipes GHSA-gh65-4455-65vg
- fixed possible to add other space member private recipes to book via api and see overview GHSA-gh65-4455-65vg
- fixed file path of recipe could be changed to show a different file GHSA-8635-c66p-9cwm
- fixed fixed batch update allowing recipe shares accross spaces GHSA-5mw3-c978-gc6w
- fixed image rotation sometimes lost when uploading to tandoor #4765 (thanks to @agross #4769)
- changed cook logs to only be editable by the creator or admins of a space GHSA-g378-5m3q-p58q
-
[1.13.0]
- Update python-base | final to 3.12-20261023
- security: fix eMudhra cert compromise
-
[1.14.0]
- Update recipes to 2.7.1
- Full Changelog
- improved error messages when AI service providers are overloaded
- fixed meal plan servings being overriden on save #4830 (thanks to jin-codes #4840)
- removed
api-token-auth/endpoint to create an AccessToken for the API with a username/password. Please refer to the authentication docs to see how to authenticate with 3rd party clients. - fixed shopping list bulk API endpoint accepted IDs from foreign spaces GHSA-5p9v-743w-79h3
- fixed XML parser could read local files in rezepsuite and cookamte importers GHSA-5f74-7rgh-pc97
- fixed shopping list recipe api could reveal overview of recipes marked as private GHSA-pcq2-64qw-jm4x
- fixed group permission check cache not invalidated properly on space change GHSA-69q3-5q6x-7hmx
- fixed recipe book entries could be moved to other peoples books GHSA-748x-xc8h-95hj
- fixed meal plan api revealing recipes from other spaces GHSA-c7mc-c9jr-38hf
- added
ACCOUNT_EMAIL_VERIFICATIONsetting with defaultoptional(options "mandatory", "optional", "none")
-
[1.14.1]
- Update recipes to 2.7.2
- Full Changelog
- improved hide "accept privacy" checkbox when no privacy url is given
- improved AI recipe import reliability #4829
- fixed unauthorized error message on login page and recipe share page #4889
- fixed missing LDAP dependency #4887
- fixed missing CSRF token on SignUp page failing signup from invite link #4891
- fixed InviteLinks not working on pages with disabled signup
- fixed permission for prometheus view #4888
- fixed account redirects in sub path setups (thanks to sebastianlipponer #4885)
-
[1.14.2]
- Update Node.js to 26.12.1 for Broccoli2Shell
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login