Maurice 658536c217 fix(trips): a member another member removed cannot rejoin through the invite link ...

Removing a member deleted their membership row only, and the invite link
checked nothing but its own token, so whoever kept the link walked straight
back in (GHSA-wr4c-964p-39jg).

trip_member_removals now notes who another member took off a trip. The invite
link refuses them on preview and on accept with a 403 that says so, old link
or regenerated, and the join page shows that instead of the join button.
Adding them back by name, or through a trip-bound invite or a plugin acting
for a member manager, lifts the note. Leaving a trip yourself leaves none, so
the link keeps working for whoever left and for everybody else.

2026-10-24 08:29:51 +02:00

..

broadcast-parity

feat(studio): book themes with palette, font pairing and motif set

2026-10-23 22:08:13 +00:00

plugins

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

admin.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

airtrail-sync-request-context.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

api-docs.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

app-config.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

assignments.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

async-closure-truthiness-guards.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

atlas-geocode-request-context.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

atlas.test.ts

fix(atlas): removing the last region keeps a country the user marked visited itself

2026-10-12 09:55:52 +02:00

auth.test.ts

test(auth): read the disabled MFA state through the ORM, formatted

2026-10-18 12:11:41 +02:00

backup.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

book-body-size.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

boot-sweeps-request-context.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

bootstrap.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

budget.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

categories.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

collab.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

collections.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

database-lifecycle.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

dayNotes.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

dayReorder.test.ts

fix(days): a day without a date keeps no date when it is moved, so it can go to the front of a dated trip

2026-10-10 21:34:51 +02:00

days.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

demo-reset-connection-swap.spike.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

demo-seed-request-context.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

doc-sync-webhook-request-context.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

feeds-request-context.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

files.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

help.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

immich.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

journey-place-order.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

journey.test.ts

fix(journey): a timed entry takes its place in the day by its time

2026-10-18 13:21:51 +02:00

leg-mode-incoming.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

legacy-upgrade-v066.test.ts

test(server): suites record broadcasts on a FakeRealtimeService instead of mocking src/websocket

2026-10-10 20:16:10 +02:00

legacy-upgrade-v082.test.ts

test(server): suites record broadcasts on a FakeRealtimeService instead of mocking src/websocket

2026-10-10 20:16:10 +02:00

legacy-upgrade-v205.test.ts

test(server): suites record broadcasts on a FakeRealtimeService instead of mocking src/websocket

2026-10-10 20:16:10 +02:00

legacy-upgrade-v242.test.ts

test(server): suites record broadcasts on a FakeRealtimeService instead of mocking src/websocket

2026-10-10 20:16:10 +02:00

legacy-upgrade-v244.test.ts

test(server): suites record broadcasts on a FakeRealtimeService instead of mocking src/websocket

2026-10-10 20:16:10 +02:00

maps.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

mcp.test.ts

feat(assistant): trip assistant chat with your own AI connection

2026-10-22 21:30:12 +00:00

memories-immich.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

memories-synology.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

memories-unified.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

misc.test.ts

feat(help): rewrite the help center for v5 with a Tours section, new pictures in every language, and fix the tour planner bugs it surfaced

2026-10-22 22:29:35 +02:00

notifications.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

oauth-authorize.test.ts

feat(assistant): trip assistant chat with your own AI connection

2026-10-22 21:30:12 +00:00

oauth.test.ts

fix(assistant): green CI round, trip notes the assistant can keep, calmer change cards

2026-10-22 21:30:26 +00:00

oidc-local-provider.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

oidc.test.ts

fix(oidc): a sign-in links to an account by email only when the address was not set by the account itself

2026-10-12 17:06:52 +02:00

orm-request-context-seams.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

packing.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

passkey.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

places.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

profile.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

reservations.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

scheduler-gate.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

security.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

settings.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

share.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

storage-health-notifier-request-context.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

storage-restore-reload.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

storage-stream-abort.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

systemNotices.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

tags.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

todo.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

trip-access-primitives.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

trip-invite-removal.test.ts

fix(trips): a member another member removed cannot rejoin through the invite link

2026-10-24 08:29:51 +02:00

trip-journal-link.test.ts

refactor(trips): leaving a trip tidies its journal link in the roster's own repository

2026-10-18 20:02:09 +02:00

trips.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

uploads-photo-request-context.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

uploads-static.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00

vacay.test.ts

style: format server and shared with prettier

2026-10-10 21:23:37 +02:00