Docker image: docker pull chrisvel/tududi:1.6.0-rc.1
What's Changed
- fix: AI request quota resets monthly, not daily by @chrisvel in #1550
- Move AI settings to Profile, add hosted-mode AI Credits by @chrisvel in #1544
- Add sidebar section customization to Profile Settings by @chrisvel in #1554
- fix: improve Upcoming board layout and center task status control by @chrisvel in #1557
- Fix date-dependent recurring interval phase test by @chrisvel in #1559
- Mark email as required in the admin Add/Edit user modal by @chrisvel in #1555
- Fix task row recurrence UI parity, z-index, and status styling by @chrisvel in #1558
- feat: add user groups for sharing with several people at once by @chrisvel in #1560
- feat: let users hide the Assigned to me and Everyone sidebar links by @chrisvel in #1561
- Merge admin Users and Groups into one tabbed page by @chrisvel in #1566
- fix: accept the numeric id on task, project and area REST routes by @chrisvel in #1569
- fix: Upcoming recurring occurrences expand and open independently by @chrisvel in #1568
- fix: successful backup restores no longer reported as errors by @chrisvel in #1564
- Accept note and description interchangeably for tasks in REST and MCP by @chrisvel in #1563
- fix: new subtasks inherit the parent priority instead of defaulting to low by @chrisvel in #1567
- fix: MCP update_task sets and clears completed_at like REST by @chrisvel in #1565
- chore: remove obsolete env vars and the ENABLE_NOTE_COLOR flag by @chrisvel in #1570
- feat: per-user email verification switch and password generator in the Add user form by @chrisvel in #1571
- fix: assignee lists include area, goal and group access (#1574) by @chrisvel in #1575
- feat: add admin, user and guest roles with capabilities (#1576) by @chrisvel in #1577
- feat: allow accounts without an email (#1578) by @chrisvel in #1579
- docs: add People, Members and Roles and update the README (#1573) by @chrisvel in #1580
- feat: add members from the People page and one People list (#1581) by @chrisvel in #1582
- fix: close exploitable auth, upload, SSRF and logging gaps by @chrisvel in #1585
- feat: list a role's permissions in the user form instead of switches (#1583) by @chrisvel in #1584
- fix: harden user management against wrong ids, partial updates and races (#1586) by @chrisvel in #1587
- fix: record the creator of accounts made from a contact card (#1589) by @chrisvel in #1590
- fix: /api/waitlist only accepts signups while hosted Cloud is shut by @chrisvel in #1588
- fix: answer a missing or wrong CSRF token with 403 instead of 500 (#1591) by @chrisvel in #1592
- fix: refuse placeholder and mail-less addresses on the waitlist by @chrisvel in #1594
- feat: sign-in link for members without an email (#1593) by @chrisvel in #1595
- fix: give the sign-in link endpoints their own rate limit (#1596) by @chrisvel in #1597
- i18n: translate the groups, roles, People, members and sign-in link strings (#1598) by @chrisvel in #1599
- feat: all-entities launcher modal and per-section sidebar visibility by @chrisvel in #1600
- feat: share a note publicly with a revocable link by @chrisvel in #1602
Full Changelog: v1.5.1-dev.1...v1.6.0-rc.1