GitHub Actions
3586c5747b
Auto translate strings
2026-11-01 21:43:29 +00:00
dependabot[bot]
f8dc15c43d
Chore(deps): Bump marked from 18.0.14 to 18.1.1 in /src-ui ( #14643 )
...
Bumps [marked](https://github.com/markedjs/marked ) from 18.0.14 to 18.1.1.
- [Release notes](https://github.com/markedjs/marked/releases )
- [Commits](https://github.com/markedjs/marked/compare/v18.0.14...v18.1.1 )
---
updated-dependencies:
- dependency-name: marked
dependency-version: 18.1.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-01 21:42:04 +00:00
dependabot[bot]
bfb8b9076b
Chore(deps-dev): Bump prettier from 3.9.9 to 3.9.10 in /src-ui ( #14645 )
...
Bumps [prettier](https://github.com/prettier/prettier ) from 3.9.9 to 3.9.10.
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/3.9.9...3.9.10 )
---
updated-dependencies:
- dependency-name: prettier
dependency-version: 3.9.10
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-01 21:23:09 +00:00
dependabot[bot]
cef246a761
Chore(deps-dev): Bump @types/node from 26.6.2 to 26.6.5 in /src-ui ( #14639 )
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 26.6.2 to 26.6.5.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 26.6.5
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-01 13:07:02 -08:00
shamoon
5b63c9a0ff
Fixhancement: add tag names to document history list ( #14625 )
2026-11-01 05:39:52 -08:00
shamoon
217c5e681d
Fix: add button type to zoom buttons to prevent form submission ( #14624 )
2026-11-01 05:35:38 -08:00
GitHub Actions
45e99cde5a
Auto translate strings
2026-10-31 20:44:16 +00:00
shamoon
7ea58eaf46
Fix: move document list preview button to own column ( #14610 )
2026-10-31 13:42:56 -07:00
GitHub Actions
a19804a0b7
Auto translate strings
2026-10-31 16:34:17 +00:00
Trenton H and shamoon
3289be7383
Fix: Various small bugs found during typing updates ( #14593 )
...
* Fix: match Apple Mail tag colors case-insensitively
* Fix: reject OAuth callbacks with an unrecognized scope
* Fix: refuse to refresh OAuth tokens for non-OAuth accounts or missing refresh tokens
* Fix: parse datetime strings in the format_datetime filter and reject invalid ones
* Fix: reject a PAPERLESS_URL without a hostname
* Fix: report a database error in the system status instead of failing with a 500
* Fix: surface the database error when refreshing a document before moving its files
* Fix: report no unapplied migrations when the applied migrations cannot be read
* Fix: return the parsed value directly in format_datetime for typing
* Chore: annotate the paperless_dirs fixture in the refresh failure test
* Allow null for the latest_migration system status type
---------
Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com >
2026-10-31 09:32:58 -07:00
GitHub Actions
d98918dd97
Auto translate strings
2026-10-31 06:13:00 +00:00
shamoon
34c88613f6
Fix: fix custom fields dropdown text size ( #14606 )
2026-10-30 23:11:45 -07:00
github-actions[bot]
13acdabb47
Changelog v3.4.1 - GHA ( #14605 )
...
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
2026-10-30 22:44:05 -07:00
shamoon
b67cfdf3fd
Bump version to 3.4.1
v3.4.1
2026-10-30 22:20:31 -07:00
github-actions[bot] and Crowdin Bot
98d2ddd1c6
New Crowdin translations by GitHub Action ( #14584 )
...
Co-authored-by: Crowdin Bot <support+bot@crowdin.com >
2026-10-31 05:12:07 +00:00
GitHub Actions
91b35eada6
Auto translate strings
2026-10-31 04:48:33 +00:00
shamoon
11248f776d
Fix: fix the id__none schema in the right place ( #14604 )
2026-10-30 21:47:12 -07:00
shamoon
331fa13088
Fix: drop redundant change perms checks on cards open button ( #14601 )
2026-10-30 16:16:48 -07:00
shamoon
ebddd5687c
Chore: fix a couple e2e warnings / flakiness ( #14596 )
2026-10-30 15:45:46 -07:00
Trenton H
2925b8de81
Chore: Skip repeating Django system checks in the Docker consumer, scheduler and worker ( #14598 )
...
The init-system-checks step already runs them once and all three services
depend on init-complete. Measured idle anon PSS saved on
Python 3.14: consumer 14 MiB, beat 26 MiB, worker 27 MiB.
2026-10-30 22:37:37 +00:00
GitHub Actions
5e397e1222
Auto translate strings
2026-10-30 22:26:54 +00:00
Trenton H
6f99ad9469
Chore: Improve idle memory via more lazy imports ( #14599 )
...
* Chore: Import dateparser lazily so processes that never parse dates skip it
* Chore: Import turbohtml lazily in the mail parser
* Chore: Import lxml lazily in the SVG validator
* Chore: Import paperless_ai.indexing lazily in document tasks
* Chore: Import paperless_ai helpers lazily in views
* Chore: Read the OCRmyPDF sRGB profile on first use instead of at import
* Chore: Import pikepdf and img2pdf lazily so startup does not load them
* Chore: Reuse the initialized Django ASGI application for HTTP routing
2026-10-30 22:25:42 +00:00
shamoon
a5d3247ca7
Tweakhancement: make new pdf controls mostly hidden ( #14595 )
2026-10-30 10:22:50 -07:00
GitHub Actions
8a67481a9d
Auto translate strings
2026-10-30 16:59:59 +00:00
shamoon
652f964f5d
Tweak: move preview button in doc list ( #14594 )
2026-10-30 09:58:29 -07:00
shamoon
80a1827fa0
Fix: checksum light mode display and cf dropdown mobile position ( #14590 )
2026-10-30 07:03:08 -07:00
github-actions[bot] and shamoon
e240c89f27
Documentation: Add v3.4.0 changelog ( #14582 )
...
* Changelog v3.4.0 - GHA
* Remove 3.3.4 PR
---------
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com >
2026-10-29 15:45:43 -07:00
shamoon
ced3cf9303
Bump version to 3.4.0
v3.4.0
2026-10-29 15:11:14 -07:00
Trenton H and Claude Sonnet 5.5
08a7d1d4b8
Chore: Consolidate test sample files ( #14430 )
...
Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-29 12:43:51 -07:00
github-actions[bot] and Crowdin Bot
47052d6506
New Crowdin translations by GitHub Action ( #14499 )
...
Co-authored-by: Crowdin Bot <support+bot@crowdin.com >
2026-10-29 18:35:37 +00:00
shamoon
9bd28d3e57
Chore: bump some frontend deps for security fixes ( #14581 )
2026-10-29 11:09:55 -07:00
shamoon
9c4c9f2386
Enhancement: support custom fields in workflow title templates ( #14564 )
2026-10-29 17:40:53 +00:00
GitHub Actions
cc54e3e5aa
Auto translate strings
2026-10-29 17:26:37 +00:00
shamoon
67c194978e
Enhancement: relative date custom field queries ( #14549 )
2026-10-29 17:25:21 +00:00
shamoon
c21bdab5c8
Fix: truncate long version labels in dropdown ( #14578 )
2026-10-28 15:44:52 -07:00
Trenton H
ea9e5e0732
Chore: bump brotli, djangorestframework, filelock, msgpack, setuptools for security fixes ( #14575 )
2026-10-28 15:38:15 -07:00
Trenton H
ac955efdbf
Chore: bump django-allauth to 65.20 and oauthlib to 4.0 ( #14570 )
...
allauth 65.20 is the first release allowing oauthlib 4, which carries the fixes for the open oauthlib advisories
2026-10-28 09:55:07 -07:00
shamoon
ec52490e4a
Fixhancement: show better result for revoked / expired tasks ( #14566 )
2026-10-28 08:59:07 -07:00
GitHub Actions
fed9e8d783
Auto translate strings
2026-10-28 02:55:55 +00:00
shamoon
d4457efe44
Fix: move re-index after workflow runs on doc edit ( #14558 )
2026-10-27 19:54:30 -07:00
Jan Kleine and shamoon
7d8147c21d
Performance: reduce tasks badge load times ( #14552 )
...
---------
Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com >
2026-10-26 14:23:33 +00:00
GitHub Actions
5f17b1a310
Auto translate strings
2026-10-24 21:12:29 +00:00
shamoon
63eca7b427
Enhancement: skip local 2FA for trusted OIDC AMR ( #14403 )
2026-10-24 21:11:10 +00:00
GitHub Actions
c88d02ab42
Auto translate strings
2026-10-24 20:30:00 +00:00
Trenton H
4299e9b12e
Chore: consolidate direct permission grant lookups into one helper ( #14456 )
...
* Chore: drop get_groups_with_only_permission
It worked around get_groups_with_perms lacking only_with_perms_in, which
django-guardian added in 3.1.0. The pinned version is newer.
* Chore: consolidate direct grant lookups into get_permission_grantees
Six places listed who holds a permission on an object, each with its own
query and result shape, and one had already drifted into expanding group
members.
* Chore: drop the unreachable empty viewer grant default
get_permission_grantees returns an entry for every requested document.
2026-10-24 13:28:25 -07:00
Trenton H
10a1a9eae8
Chore: drop get_groups_with_only_permission ( #14454 )
...
It worked around get_groups_with_perms lacking only_with_perms_in, which
django-guardian added in 3.1.0. The pinned version is newer.
2026-10-24 13:28:25 -07:00
Trenton H
e7d70497c2
Chore: Consolidate to a single way to set permission on an object ( #14453 )
...
* Chore: drop set_permissions_for_object in favor of the bulk helper
The same grant rules were implemented twice, and only the bulk version
validated every action before writing, so the single-object one could leave
a partial change behind.
* Chore: type the set-permissions dict
Callers passed whatever they had, including querysets of User and Group
objects that only worked because id__in accepts a subquery.
2026-10-24 13:28:25 -07:00
shamoon
a74256cd2a
Update SECURITY.md
2026-10-23 17:04:58 -07:00
shamoon
f71a9a6eda
Merge branch 'main' into dev
2026-10-22 15:38:13 -07:00
github-actions[bot]
f319b05e0f
Documentation: Add v3.3.4 changelog ( #14534 )
2026-10-22 15:36:38 -07:00