• Migrated all old authentication views to the new frontend and updated the logic/backend
  • added ACCOUNT_EMAIL_VERIFICATION setting with default optional (options "mandatory", "optional", "none")
  • changed ENABLE_SIGNUP setting to also prvent social signups when disabled
  • removed SOCIALACCOUNT_ONLY setting, HIDE_LOGIN_FORM still exists and allows login trough the admin login page
  • removed SOCIALACCOUNT_LOGIN_ON_GET setting (not needed for frontend flow)
  • removed SOCIALACCOUNT_AUTO_SIGNUP as signup forms for social providers are not supported for now (should not be needed)
  • removed api-token-auth/ endpoint to create an AccessToken for the API with a username/password. Please refer to the authentication docs to see how to authenticate with 3rd party clients.
  • ⚠️ LDAP and proxy auth have NOT been tested. If it does not work feel free to PR a fix or change to a supported provider.
• improved error message when URL import failes due to 403 rejections from external server #4871
• improved error messages when ingredients are truncated while parsing #4790 (thanks Themazecrawler to #4832)
• improved allow decimals for servings in cook log (thanks to manikantavarma2889 #4762)
• improved mealie importer by better using the progress bar (thanks to disconn3ct #4862)
• improved strip unnecessary characters from AI json response (thanks to jin-codes #4838)
• improved RecipeSage import (thanks to LaoChouPro #4823)
• fixed food batch editing dialog
• fixed adding to shopping selection of shopping list not working #4865
• fixed favorite and times_cooked search filters not working #4720 (#4722 thanks to Abhijay-29r)
• fixed meal master import creating ingredients as foods (tanks to Juice-de-Orange #4864)
• fixed mealie importer failing due to duplicate properites #4791
• fixed shopping list bulk API endpoint accepted IDs from foreign spaces GHSA-5p9v-743w-79h3
• fixed XML parser could read local files in rezepsuite and cookamte importers GHSA-5f74-7rgh-pc97
• fixed shopping list recipe api could reveal overview of recipes marked as private GHSA-pcq2-64qw-jm4x
• fixed group permission check cache not invalidated properly on space change GHSA-69q3-5q6x-7hmx
• fixed pestle impoter SSRF issue GHSA-xq7g-9q95-vjc6
• fixed recipe book entries could be moved to other peoples books GHSA-748x-xc8h-95hj
• fixed meal plan api revealing recipes from other spaces GHSA-c7mc-c9jr-38hf
• fixed wrong IDs compared in sharing GHSA-vc5c-xh64-79vp
• changed meal plan title now takes presedence over the recipe name
• updated lots of dependencies (serveral security issues)