🎃🎃🎃🎃🎃🎃

Happy Halloween! Hopefully everyone's got some spooky recipes to try out today.

🎉 Highlights

• You can now fully customize AI prompts in-app, with far greater control. You can choose to append to existing prompts, completely replace prompts, and add custom global instructions which are added to every prompt which produces recipe data. The old OPENAI_CUSTOM_PROMPT_DIR env var has been removed, but if you had any custom prompts they will be imported into the new format automatically.
• Instructions can now have individual durations. This means you can specify a particular step takes "10 minutes", for example.
• Meal plan entries can now be created for the entire week, rather than a particular day/time. Great for when you know you're going to make something this week, but you're not sure when yet.

✨ New features

• feat: In-app AI prompt customization @michael-genson (#8736)
• feat: declare route permissions with a require() dependency @hay-kot (#8763)
• feat: enforce route permission helpers with semgrep in CI @hay-kot (#8769)
• feat: Sort recipes by total time @NutzerXY (#8692)
• feat: import a pasted Mealie recipe export with its full structure @Rouzax (#8651)
• feat: add centiliter to seeded ingredient units @Tibood (#8766)
• feat: Show recipe owner @michael-genson (#8823)
• feat: add OIDC_VERIFY_X509_STRICT setting and adjust SSL verification… @diepeterpan (#8715)
• feat: Instruction durations @granto (#8705)
• feat: weekly meal planning @michael-genson (#8836)
• feat: customize ical @michael-genson (#8909)
• feat: manage timeline event image @michael-genson (#8928)

🐛 Bug fixes

• fix: scope migration imports to the group and limit archive size @hay-kot (#8761)
• fix: restrict i18n locale lookup to bundled translation files @hay-kot (#8759)
• fix: require can_organize to manage units, tools, labels, recipe actions @hay-kot (#8783)
• fix: Un-approve Crowdin translations to allow community to vote on them @michael-genson (#8787)
• fix: load food/unit aliases with the page; index-friendly food filter @zf6fm64s8j-bit (#8675)
• fix: preserve recipe image when upload validation fails @YibingZhang325 (#8506)
• fix: keep servings and yield quantity when translating AI-imported recipes @LembkeM (#8636)
• fix: translate mealplan timeline event subjects by locale @Frank-Ping (#8664)
• fix: restore the 404 redirects for /r/ recipe links (Nuxt 3 error page) @mrhard9090 (#8568)
• fix: bump sqlalchemy @michael-genson (#8798)
• fix: Bump ingredient-parser-nlp @michael-genson (#8801)
• fix: show an error when a user lacks permission for an action @michael-genson (#8808)
• fix: show an error when a recipe asset upload is rejected @michael-genson (#8809)
• fix: accept the signed-in user's own username and email in validators @michael-genson (#8811)
• fix: switch filter_by statements to explicit expressions to properly resolve proxy attrs @michael-genson (#8814)
• fix: validate image type on recipe hero image upload @bferd (#8498)
• fix: reject an unrecognized DB_ENGINE instead of using SQLite @Yi-111-a (#8605)
• fix: set the cover image on recipes created from AI images @pcbeingused333 (#8739)
• fix: scale merged duplicate ingredients when adding a recipe to a shopping list @pcbeingused333 (#8764)
• fix: match multi-word foods when the brute parser splits off an unknown unit @gustaf-a (#8744)
• fix: report blocked recipe action targets instead of dropping them silently @Hellraiser28 (#8747)
• fix: Consistent spacing for recipe cards with/without tags @michael-genson (#8824)
• fix: Switch expired token delete to a batch delete @michael-genson (#8825)
• fix: don't copy file modes @NyCodeGHG (#8867)
• fix: require can_manage_household to manage notifiers and webhooks @hay-kot (#8885)
• fix: refresh OIDC avatars from stable URLs @nzyz995 (#8588)
• fix: listen on IPv4 and IPv6 by default @mvanhorn (#8569)
• fix: backfill missing AI provider settings @michael-genson (#8924)

🧰 Maintenance

📚 Documentation

• docs: encode the page URL in the import bookmarklet @michael-genson (#8810)

🔨 Internal development

• dev: check every declared route permission against real users @hay-kot (#8767)
• dev: Migrate backend CI/CD checks to match pre-commit @michael-genson (#8802)
• dev: fix test which relies on specific Crowdin translations @michael-genson (#8887)

⬆️ Dependency updates

🙏 New Contributors

• @LembkeM made their first contribution in #8636
• @NutzerXY made their first contribution in #8692
• @Yi-111-a made their first contribution in #8605
• @pcbeingused333 made their first contribution in #8739
• @gustaf-a made their first contribution in #8744
• @Hellraiser28 made their first contribution in #8747
• @Tibood made their first contribution in #8766
• @diepeterpan made their first contribution in #8715
• @granto made their first contribution in #8705
• @NyCodeGHG made their first contribution in #8867
• @mvanhorn made their first contribution in #8569

🎃🎃🎃🎃🎃🎃

ttps://github.com/mealie-recipes/mealie/compare/v3.29.0...v3.30.0