Tandoor - Package Updates
-
[1.12.4]
- Update recipes to 2.6.4
- Full Changelog
- added Household setup page and default creation to welcome stepper
- added django migration records to admin
- fixed food shopping sub endpoint not validating amount and unit inputs https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-8w8h-3pv2-3554
- fixed a shared user could make changes to a book trough the API https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-xvmf-cfrq-4j8f
- fixed style tags allowed in rendered markdown could lead to CSS injection in third party clients that did not properly clean the output on the frontend https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-9hhh-g2fc-r8x2
- fixed recipe batch update endpoint could be used to update private recipes of other space members if the ID was known https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-v8x3-w674-55p5
- fixed performance issues on some admin views
- fixed admins can accidentally lock themselves out of their space
- fixed category order jumping in shopping list when checking and not having any supermarket selected #4446
- fixed selecting no supermarket in shopping not working
-
[1.12.5]
- Update recipes to 2.6.5
- Full Changelog
- fixed docs link to gunicorn docs #4563 (thanks to @igordiogobp #4608)
- fixed vite error (thanks to @smilerz #4592)
- fixed shopping list error when item has no amount
- fixed minus in meal plan editor could remove the date completely
- fixed move ingredient dialog not working #4552
- fixed potential DDoS by limiting uploaded zip file sizes https://github.com/TandoorRecipes/recipes/security/advisories/GHSA-w8pq-4pwf-r2m8
-
[1.12.6]
- Update recipes to 2.6.6
- Full Changelog
- fixed household setup not skippable #4609
-
[1.12.7]
- Update recipes to 2.6.7
- Full Changelog
- improved app importer error messages
- fixed error while search in slow network conditions #4621
- fixed stored XSS issues in the templating engine
-
[1.12.8]
- Update recipes to 2.6.8
- Full Changelog
- fixed broken markdown rendering in recipes
-
[1.12.9]
- Update recipes to 2.6.9
- Full Changelog
- fixed another stored XSS in recipe instructions GHSA-89pw-5qxc-7v86
- updated pillow library security update
-
P Package Updates locked this topic on
-
[1.12.10]
- Update recipes to 2.6.11
- Full Changelog
- improved pantry booking dialog and table
- fixed another order parameter
- fixed recipes marked as private could be viewed trough API utility endpoints GHSA-cqj3-64qw-4w52
- fixed recipe search and recipe book API endpoints accepting any order by attribute GHSA-4x57-2q4q-xwpp
- fixed regex ddos possibility in automation engine GHSA-f2gw-c2c7-59v7
- fixed AI Providers could be configured with malicious URLs to allow SSRF GHSA-wq4h-2r8x-cv65
- if you are using custom AI backends you need to add them to the new
AI_ALLOWED_URLSsettings (see docs) - fixed bookmarklets of other users in your own space could be accessed/deleted GHSA-4vw7-c646-g23w
- updated lots of dependencies
- updated translations for various languages
-
[1.12.11]
- Update recipes to 2.6.12
- Full Changelog
- fixed private recipes could be manipulated by space users trough steps API GHSA-wjf3-fq5w-7j7w
- updated translations
-
[1.12.12]
- Update recipes to 2.6.13
- Full Changelog
- updated translations
-
[1.12.13]
- Update recipes to 2.6.14
- Full Changelog
- added new selection field for all places where you select any food, unit, ...
- native vuetify component for better look and feell
- supports editing objects directly from the selection using
shift + Ehotkey (on desktop) - added images to recipes
- base for future improvements like favorites
- added space/household/user info to bottom navigation on mobile
- added add to pantry button to recipe context menu
- fixed Tandoor logo not shown in shared/anonymous view
- fixed smart meal planner not respecting meal type times #4506
- fixed empty amount fields in recipe editor would cause an error
-
[1.12.14]
- Update recipes to 2.6.15
- Full Changelog
- added pestle import support (thanks to LLf13 #4637)
- added AI based step sorter to recipe import (thanks to sadSanta-07 #4799)
- improved adding multiple recipes to a book at the same time (thanks to ujjwalv01 #4610)
- fixed group permission caching issue accross spaces GHSA-29pm-4vh2-f8mp
- fixed recipe export not respecting private flag of recipes GHSA-gh65-4455-65vg
- fixed possible to add other space member private recipes to book via api and see overview GHSA-gh65-4455-65vg
- fixed file path of recipe could be changed to show a different file GHSA-8635-c66p-9cwm
- fixed fixed batch update allowing recipe shares accross spaces GHSA-5mw3-c978-gc6w
- fixed image rotation sometimes lost when uploading to tandoor #4765 (thanks to @agross #4769)
- changed cook logs to only be editable by the creator or admins of a space GHSA-g378-5m3q-p58q
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login