🍴🍴🍴🍴🍴🍴

🎉 Highlights

Features

• Migrated the "Last Made" and "On Hand" features to the household level for improved organization and usability.
• Redesigned the FAQ section in our documentation, featuring collapsible spoilers for better readability.

🔒 Security

As part of this release, we are addressing three security vulnerabilities kindly reported by @m10x. These vulnerabilities involved privilege escalation at the household level, allowing users to manipulate their own household permissions, such as invitations, data management, and more. Additionally, one vulnerability allowed users to create share links for recipes belonging to other groups if they had access to the recipe ID.

It is important to note that these vulnerabilities could only be exploited by users with an existing account on your Mealie instance. Nonetheless, we recommend updating to this version.

🕐Kitchen Timer

In this release, we are removing the kitchen timer from the recipe page. After discussion about enhancing this feature (#4467), we concluded that we cannot support a timer that functions only when the screen is on and the app is in the foreground.

✨ New features

• feat: add make_admin script @Kuchenpirat (#4853)
• feat: Move "on hand" and "last made" to household @michael-genson (#4616)
• feat: add delete option to three dots menu @johnpc (#4842)

🐛 Bug fixes

• fix: Allow scraping calories as number @parumpum (#4854)
• fix: remove edit scale icon when not scalable @Kuchenpirat (#4849)
• fix: remove kitchen timer @Kuchenpirat (#4857)
• fix: Preserve orientation when converting to .webp @ConduciveMocha (#4803)
• fix: Recipe comments display a username/id rather than … @shethshlok (#4726)
• fix: Refresh recipe section when clicking card tag chip @parumpum (#4810)
• fix: PWA - Allow CORS and add UseCredentials to nuxt.config.js @Borriborri (#4902)
• fix: Show All Recipes in Cookbook Regardless of Sort @michael-genson (#4908)
• fix: prevent recipe sharing from different group @Kuchenpirat (#4929)
• fix: prevent users from updating their own household privileges @Kuchenpirat (#4928)

🧰 Maintenance

📚 Documentation

• docs(auto): Update image tag, for release v2.4.2 @github-actions (#4845)
• docs: Update FAQ to include Nutritional Values and enabling per recipe / household @ChipSkylark37 (#4887)
• docs: Fix Spelling Errors on Nutritional Values @ChipSkylark37 (#4888)
• docs: move faq into details / spoilers @Kuchenpirat (#4891)
• docs: remove titles from within individual FAQs @Kuchenpirat (#4899)
• docs: Add to FAQ: When / how to use Linked Ingredients @ChipSkylark37 (#4897)
• docs: Add community guide for integrating the Mealie-Bring-API @felixschndr (#4920)

🔨 Internal development

• dev: remove PR type from PR description @Kuchenpirat (#4847)

⬆️ Dependency updates

🙏 New Contributors

• @parumpum made their first contribution in #4854
• @ChipSkylark37 made their first contribution in #4887
• @johnpc made their first contribution in #4842
• @Borriborri made their first contribution in #4902
• @felixschndr made their first contribution in #4920

🍴🍴🍴🍴🍴🍴