Wallos - Package Updates
-
[1.30.1]
- Update Wallos to 5.8.2
- Full Changelog
- auth: enforce SSO-only server-side, not just in the UI (GHSA-vhv8-cw23-59xm) (#1246) (a81772e)
- subscriptions: enforce foreign-key ownership on (ba9973d)
- subscriptions: enforce foreign-key ownership on subscription save (GHSA-797x-473j-px9p) (a81772e)
-
[1.30.2]
- Update Wallos to 5.8.3
- Full Changelog
- invalidate service worker cache on version update (#1247) (#1250) (d2623b4)
-
[1.30.3]
- Update Wallos to 5.8.4
- Full Changelog
- i18n: complete Arabic translation and plural "days before" label (#1266) (ff78a22)
-
[1.31.0]
- Update Wallos to 5.10.0
- Full Changelog
- bulk: polish the bulk toolbar and keep Apply disabled until it has something to apply (29b5b5d)
- bulk: keep payer and category rows in step with bulk delete and set-category (b3a4d98)
- i18n: rename default names when switching between any two languages (b3acdc0)
- subscriptions: allow several categories per subscription (d750eac)
- subscriptions: allow several payers per subscription (faa0226)
- subscriptions: show card actions as a 2x2 grid (a224dd2)
- pwa: rename the static cache when a script or stylesheet changes (1d37f89)
- stats: drop point labels and dates from the cost trend graph (3a1da1c)
-
[1.32.0]
- Update php-base | final to 8.5-20261021
- security: fix RCEs CVE-2026-109618 / CVE-2026-109619
-
[1.32.1]
- Update Wallos to 5.10.1
- Full Changelog
- rebuild on php 8.3.36 to pick up the security release (CVE-2026-109618, CVE-2026-109619) (a540a9e)
- rebuild on php 8.3.36 to pick up the security release (CVE-2026-109618, CVE-2026-109619) (9e560ed)
-
[1.32.2]
- Update Wallos to 5.10.2
- Full Changelog
- fall back to IPv4-only nginx when IPv6 is unavailable (#1287) (a41bae7)
-
[1.32.3]
- Update Wallos to 5.10.3
- Full Changelog
- vuln: stored XSS in admin context via unescaped push-service response in sendnotifications.php (#1295) (693d867)
-
[1.32.4]
- Update Wallos to 5.10.4
- Full Changelog
- missing _ for save_user.php in profile.php (e0f2d1d)
- ui: stop plain-text taps from opening Chrome's Touch to Search (#1298) (e0f2d1d)
- vuln: stored XSS in statistics page names and chart legend (#1298) (e0f2d1d)
- vuln: stored XSS in subscriptions list names, headings and filter menus (#1298) (e0f2d1d)
-
[1.33.0]
- Update Wallos to 5.11.1
- Full Changelog
- escape folder names on output and let the Telegram test use the instance bot (259b12e)
- add mark/unmark paid buttons to subscriptions (#1139, thanks @NodeJSmith) (e9c9141)
- colored folders to group subscriptions (#1156, thanks @Itaromi) (591112b)
- add allratestoday.com as a second exchange-rate provider (#1291, thanks @cahthuranag) (cc58669)
- one Gotify server for the installation, tokens stay personal (#1234, thanks @thorstenhornung1) (9975646)
- one ntfy server for the installation, topics stay personal (#1233, thanks @thorstenhornung1) (fcfd3a0)
- one Pushover application for the installation, user keys stay personal (#1235, thanks @thorstenhornung1) (7f9aed8)
- one Telegram bot for the installation, chat ids stay personal (#1232, thanks @thorstenhornung1) (f17b36e)
- scope statistics and calendar to the user's pay period (#1213, thanks @gwpreston) (89a0347)
- continue notifications after SMTP exceptions (#1281, thanks @rmtshnik) (e7a4e1a)
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login