Maurice 56a23cb809 test(ssrf): pin what a redirect hop may carry across an origin ...

The credential strip and the 303/302 body downgrade are new behaviour in a
security helper, and src/utils sits on a 96% line ratchet that the untested
branches took under.

2026-09-06 16:11:52 +02:00

..

app-config

fix(app-config): refuse an LLM ceiling that would become a zero timeout

2026-09-06 16:11:52 +02:00

budget

refactor(server): delete trips.bridge via leaf membership reads and prompt relocation

2026-08-11 20:28:49 +02:00

days

Give day notes a domain of their own

2026-08-10 13:38:26 +02:00

db

fix(feeds): keep a staged booking out of the public feed and the shared trip

2026-08-28 14:25:08 +02:00

demo

fix(server): the second pass over this branch's own fixes

2026-08-23 11:59:12 +02:00

files

feat(mcp): read and organise the documents on a trip

2026-08-28 14:20:02 +02:00

mcp

fix(budget): an expense with no payer creates no debt

2026-09-06 16:11:52 +02:00

middleware

fix(offline): the osm-de and stadia prefetch was CSP-blocked and the opening view stayed grey (#2180)

2026-09-02 21:06:51 +02:00

nest

fix(security): keep the operator's ntfy token in and re-check every redirect hop

2026-09-06 16:11:52 +02:00

nest-mcp

fix(mcp): prompts take the trip id as the string every client sends (#2207)

2026-09-03 09:15:14 +02:00

packing

test: cover the new code paths SonarCloud flagged as unmeasured

2026-09-02 16:21:50 +02:00

places

Feat/storage driver (#1949)

2026-08-22 11:33:55 +02:00

plugins

feat(plugins): TREK_PLUGINS_IGNORE_TREK_RANGE turns the version gate into a warning (#2226)

2026-09-06 16:11:52 +02:00

reservations

fix: eleven reported bugs across atlas, budget, collections, journey, vacay and the LLM settings (#1923)

2026-08-13 14:06:35 +02:00

services

fix(booking-import): read a printed 12-hour clock instead of slicing it (#2094)

2026-08-28 14:25:08 +02:00

systemNotices

fix(notices): keep the release modal up across the whole 4.x line

2026-08-29 13:14:30 +02:00

tags

Finish the contract ratchet, the upload bridge and the client leftovers

2026-08-10 19:54:46 +02:00

todo

Split PluginsModule into four, and gate coverage per domain

2026-08-09 18:44:59 +02:00

trips

Split the trip aggregate root into its parts

2026-08-10 13:38:26 +02:00

utils

test(ssrf): pin what a redirect hop may carry across an origin

2026-09-06 16:11:52 +02:00

auto-backup.test.ts

Feat/storage driver (#1949)

2026-08-22 11:33:55 +02:00

config.test.ts

fix(server): the second pass over this branch's own fixes

2026-08-23 11:59:12 +02:00

idempotency-cleanup.test.ts

Type the cron registrar stub so the tests typecheck again

2026-08-11 09:58:37 +02:00

shared-contract.test.ts

Release 3.1.0 (#1185)

2026-06-16 22:22:45 +02:00

shutdown.test.ts

fix(packing,journey,server): address review findings on the three fixes

2026-09-02 16:21:50 +02:00

uploads-dirs.test.ts

Feat/storage driver (#1949)

2026-08-22 11:33:55 +02:00