dependabot[bot]
669be9c788
Chore(deps): Bump the actions group with 16 updates
...
Bumps the actions group with 16 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/setup-python](https://github.com/actions/setup-python ) | `7.0.0` | `7.1.0` |
| [docker/login-action](https://github.com/docker/login-action ) | `4.6.0` | `4.7.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact ) | `7.0.1` | `7.0.2` |
| [actions/download-artifact](https://github.com/actions/download-artifact ) | `8.0.1` | `8.0.2` |
| [actions/setup-node](https://github.com/actions/setup-node ) | `7.0.0` | `7.1.0` |
| [j178/prek-action](https://github.com/j178/prek-action ) | `3.0.0` | `3.1.0` |
| [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter ) | `7.7.0` | `7.10.0` |
| [shogo82148/actions-upload-release-asset](https://github.com/shogo82148/actions-upload-release-asset ) | `1.10.4` | `1.10.6` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action ) | `0.6.4` | `0.8.0` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action ) | `4.38.2` | `4.39.1` |
| [stumpylog/image-cleaner-action/ephemeral](https://github.com/stumpylog/image-cleaner-action ) | `0.13.0` | `0.13.1` |
| [stumpylog/image-cleaner-action/untagged](https://github.com/stumpylog/image-cleaner-action ) | `0.13.0` | `0.13.1` |
| [github/codeql-action/init](https://github.com/github/codeql-action ) | `4.38.2` | `4.39.1` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action ) | `4.38.2` | `4.39.1` |
| [crowdin/github-action](https://github.com/crowdin/github-action ) | `3.3.0` | `3.5.0` |
| [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action ) | `7.2.0` | `7.2.1` |
Updates `actions/setup-python` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/5fda3b95a4ea91299a34e894583c3862153e4b97...6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 )
Updates `docker/login-action` from 4.6.0 to 4.7.0
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](https://github.com/docker/login-action/compare/dbcb813823bdd20940b903addbd779551569679f...81c6f93d4bc991e510b342a00b419b3bb4efc5c6 )
Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9 )
Updates `actions/download-artifact` from 8.0.1 to 8.0.2
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333 )
Updates `actions/setup-node` from 7.0.0 to 7.1.0
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1 )
Updates `j178/prek-action` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/j178/prek-action/releases )
- [Commits](https://github.com/j178/prek-action/compare/4e14d07f9231acabce116ccfca13b13dd9755ece...44924fe9ef4a6f88253c4b6b1bf11c689d3ce53d )
Updates `release-drafter/release-drafter` from 7.7.0 to 7.10.0
- [Release notes](https://github.com/release-drafter/release-drafter/releases )
- [Commits](https://github.com/release-drafter/release-drafter/compare/34d80673e067bdc0c24568d3af899c216adcfaa9...978bb0b30c5ee8cdd332ced253758157150d43f0 )
Updates `shogo82148/actions-upload-release-asset` from 1.10.4 to 1.10.6
- [Release notes](https://github.com/shogo82148/actions-upload-release-asset/releases )
- [Commits](https://github.com/shogo82148/actions-upload-release-asset/compare/aaba0f56bdbc1071f4af234d5cb16055e8a400de...9ee13965a8a51926f330b424693f25fcff8f2ef6 )
Updates `zizmorcore/zizmor-action` from 0.6.4 to 0.8.0
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases )
- [Commits](https://github.com/zizmorcore/zizmor-action/compare/cc914d7f3750a2d13d75c7f184a1060aa0e9d482...53290badfa369cb0bf7ad16342cb62c2fa47ac7b )
Updates `github/codeql-action/upload-sarif` from 4.38.2 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...9b3254085494b55a0f7c4c2b3d2d52cc712ce370 )
Updates `stumpylog/image-cleaner-action/ephemeral` from 0.13.0 to 0.13.1
- [Release notes](https://github.com/stumpylog/image-cleaner-action/releases )
- [Changelog](https://github.com/stumpylog/image-cleaner-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/stumpylog/image-cleaner-action/compare/21f875bab2376314e0525c614e923c669434f0e4...9f582a6be546d93ea5c02c1446d41f8e17673db6 )
Updates `stumpylog/image-cleaner-action/untagged` from 0.13.0 to 0.13.1
- [Release notes](https://github.com/stumpylog/image-cleaner-action/releases )
- [Changelog](https://github.com/stumpylog/image-cleaner-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/stumpylog/image-cleaner-action/compare/21f875bab2376314e0525c614e923c669434f0e4...9f582a6be546d93ea5c02c1446d41f8e17673db6 )
Updates `github/codeql-action/init` from 4.38.2 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...9b3254085494b55a0f7c4c2b3d2d52cc712ce370 )
Updates `github/codeql-action/analyze` from 4.38.2 to 4.39.1
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...9b3254085494b55a0f7c4c2b3d2d52cc712ce370 )
Updates `crowdin/github-action` from 3.3.0 to 3.5.0
- [Release notes](https://github.com/crowdin/github-action/releases )
- [Commits](https://github.com/crowdin/github-action/compare/9c23991700c0ec5256fd41089b9d9d7d540e424e...959dc74ac104447731cba99a016f85d0ae719788 )
Updates `stefanzweifel/git-auto-commit-action` from 7.2.0 to 7.2.1
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases )
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md )
- [Commits](https://github.com/stefanzweifel/git-auto-commit-action/compare/4a55954c782fc1ea30b9056cd3e7a2b40ca8887d...d0b01107b5db882071f96de5dd4b54961ea93f4c )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: docker/login-action
dependency-version: 4.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: actions/upload-artifact
dependency-version: 7.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: actions/download-artifact
dependency-version: 8.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: actions/setup-node
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: j178/prek-action
dependency-version: 3.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: release-drafter/release-drafter
dependency-version: 7.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: shogo82148/actions-upload-release-asset
dependency-version: 1.10.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: zizmorcore/zizmor-action
dependency-version: 0.8.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: stumpylog/image-cleaner-action/ephemeral
dependency-version: 0.13.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: stumpylog/image-cleaner-action/untagged
dependency-version: 0.13.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: github/codeql-action/init
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: github/codeql-action/analyze
dependency-version: 4.39.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: crowdin/github-action
dependency-version: 3.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: stefanzweifel/git-auto-commit-action
dependency-version: 7.2.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-11-01 20:26:08 +00:00
shamoon
5b63c9a0ff
Fixhancement: add tag names to document history list ( #14625 )
2026-11-01 05:39:52 -08:00
shamoon
217c5e681d
Fix: add button type to zoom buttons to prevent form submission ( #14624 )
2026-11-01 05:35:38 -08:00
GitHub Actions
45e99cde5a
Auto translate strings
2026-10-31 20:44:16 +00:00
shamoon
7ea58eaf46
Fix: move document list preview button to own column ( #14610 )
2026-10-31 13:42:56 -07:00
GitHub Actions
a19804a0b7
Auto translate strings
2026-10-31 16:34:17 +00:00
Trenton H and shamoon
3289be7383
Fix: Various small bugs found during typing updates ( #14593 )
...
* Fix: match Apple Mail tag colors case-insensitively
* Fix: reject OAuth callbacks with an unrecognized scope
* Fix: refuse to refresh OAuth tokens for non-OAuth accounts or missing refresh tokens
* Fix: parse datetime strings in the format_datetime filter and reject invalid ones
* Fix: reject a PAPERLESS_URL without a hostname
* Fix: report a database error in the system status instead of failing with a 500
* Fix: surface the database error when refreshing a document before moving its files
* Fix: report no unapplied migrations when the applied migrations cannot be read
* Fix: return the parsed value directly in format_datetime for typing
* Chore: annotate the paperless_dirs fixture in the refresh failure test
* Allow null for the latest_migration system status type
---------
Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com >
2026-10-31 09:32:58 -07:00
GitHub Actions
d98918dd97
Auto translate strings
2026-10-31 06:13:00 +00:00
shamoon
34c88613f6
Fix: fix custom fields dropdown text size ( #14606 )
2026-10-30 23:11:45 -07:00
github-actions[bot]
13acdabb47
Changelog v3.4.1 - GHA ( #14605 )
...
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
2026-10-30 22:44:05 -07:00
shamoon
b67cfdf3fd
Bump version to 3.4.1
v3.4.1
2026-10-30 22:20:31 -07:00
github-actions[bot] and Crowdin Bot
98d2ddd1c6
New Crowdin translations by GitHub Action ( #14584 )
...
Co-authored-by: Crowdin Bot <support+bot@crowdin.com >
2026-10-31 05:12:07 +00:00
GitHub Actions
91b35eada6
Auto translate strings
2026-10-31 04:48:33 +00:00
shamoon
11248f776d
Fix: fix the id__none schema in the right place ( #14604 )
2026-10-30 21:47:12 -07:00
shamoon
331fa13088
Fix: drop redundant change perms checks on cards open button ( #14601 )
2026-10-30 16:16:48 -07:00
shamoon
ebddd5687c
Chore: fix a couple e2e warnings / flakiness ( #14596 )
2026-10-30 15:45:46 -07:00
Trenton H
2925b8de81
Chore: Skip repeating Django system checks in the Docker consumer, scheduler and worker ( #14598 )
...
The init-system-checks step already runs them once and all three services
depend on init-complete. Measured idle anon PSS saved on
Python 3.14: consumer 14 MiB, beat 26 MiB, worker 27 MiB.
2026-10-30 22:37:37 +00:00
GitHub Actions
5e397e1222
Auto translate strings
2026-10-30 22:26:54 +00:00
Trenton H
6f99ad9469
Chore: Improve idle memory via more lazy imports ( #14599 )
...
* Chore: Import dateparser lazily so processes that never parse dates skip it
* Chore: Import turbohtml lazily in the mail parser
* Chore: Import lxml lazily in the SVG validator
* Chore: Import paperless_ai.indexing lazily in document tasks
* Chore: Import paperless_ai helpers lazily in views
* Chore: Read the OCRmyPDF sRGB profile on first use instead of at import
* Chore: Import pikepdf and img2pdf lazily so startup does not load them
* Chore: Reuse the initialized Django ASGI application for HTTP routing
2026-10-30 22:25:42 +00:00
shamoon
a5d3247ca7
Tweakhancement: make new pdf controls mostly hidden ( #14595 )
2026-10-30 10:22:50 -07:00
GitHub Actions
8a67481a9d
Auto translate strings
2026-10-30 16:59:59 +00:00
shamoon
652f964f5d
Tweak: move preview button in doc list ( #14594 )
2026-10-30 09:58:29 -07:00
shamoon
80a1827fa0
Fix: checksum light mode display and cf dropdown mobile position ( #14590 )
2026-10-30 07:03:08 -07:00
github-actions[bot] and shamoon
e240c89f27
Documentation: Add v3.4.0 changelog ( #14582 )
...
* Changelog v3.4.0 - GHA
* Remove 3.3.4 PR
---------
Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com >
2026-10-29 15:45:43 -07:00
shamoon
ced3cf9303
Bump version to 3.4.0
v3.4.0
2026-10-29 15:11:14 -07:00
Trenton H and Claude Sonnet 5.5
08a7d1d4b8
Chore: Consolidate test sample files ( #14430 )
...
Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com >
2026-10-29 12:43:51 -07:00
github-actions[bot] and Crowdin Bot
47052d6506
New Crowdin translations by GitHub Action ( #14499 )
...
Co-authored-by: Crowdin Bot <support+bot@crowdin.com >
2026-10-29 18:35:37 +00:00
shamoon
9bd28d3e57
Chore: bump some frontend deps for security fixes ( #14581 )
2026-10-29 11:09:55 -07:00
shamoon
9c4c9f2386
Enhancement: support custom fields in workflow title templates ( #14564 )
2026-10-29 17:40:53 +00:00
GitHub Actions
cc54e3e5aa
Auto translate strings
2026-10-29 17:26:37 +00:00
shamoon
67c194978e
Enhancement: relative date custom field queries ( #14549 )
2026-10-29 17:25:21 +00:00
shamoon
c21bdab5c8
Fix: truncate long version labels in dropdown ( #14578 )
2026-10-28 15:44:52 -07:00
Trenton H
ea9e5e0732
Chore: bump brotli, djangorestframework, filelock, msgpack, setuptools for security fixes ( #14575 )
2026-10-28 15:38:15 -07:00
Trenton H
ac955efdbf
Chore: bump django-allauth to 65.20 and oauthlib to 4.0 ( #14570 )
...
allauth 65.20 is the first release allowing oauthlib 4, which carries the fixes for the open oauthlib advisories
2026-10-28 09:55:07 -07:00
shamoon
ec52490e4a
Fixhancement: show better result for revoked / expired tasks ( #14566 )
2026-10-28 08:59:07 -07:00
GitHub Actions
fed9e8d783
Auto translate strings
2026-10-28 02:55:55 +00:00
shamoon
d4457efe44
Fix: move re-index after workflow runs on doc edit ( #14558 )
2026-10-27 19:54:30 -07:00
Jan Kleine and shamoon
7d8147c21d
Performance: reduce tasks badge load times ( #14552 )
...
---------
Co-authored-by: shamoon <4887959+shamoon@users.noreply.github.com >
2026-10-26 14:23:33 +00:00
GitHub Actions
5f17b1a310
Auto translate strings
2026-10-24 21:12:29 +00:00
shamoon
63eca7b427
Enhancement: skip local 2FA for trusted OIDC AMR ( #14403 )
2026-10-24 21:11:10 +00:00
GitHub Actions
c88d02ab42
Auto translate strings
2026-10-24 20:30:00 +00:00
Trenton H
4299e9b12e
Chore: consolidate direct permission grant lookups into one helper ( #14456 )
...
* Chore: drop get_groups_with_only_permission
It worked around get_groups_with_perms lacking only_with_perms_in, which
django-guardian added in 3.1.0. The pinned version is newer.
* Chore: consolidate direct grant lookups into get_permission_grantees
Six places listed who holds a permission on an object, each with its own
query and result shape, and one had already drifted into expanding group
members.
* Chore: drop the unreachable empty viewer grant default
get_permission_grantees returns an entry for every requested document.
2026-10-24 13:28:25 -07:00
Trenton H
10a1a9eae8
Chore: drop get_groups_with_only_permission ( #14454 )
...
It worked around get_groups_with_perms lacking only_with_perms_in, which
django-guardian added in 3.1.0. The pinned version is newer.
2026-10-24 13:28:25 -07:00
Trenton H
e7d70497c2
Chore: Consolidate to a single way to set permission on an object ( #14453 )
...
* Chore: drop set_permissions_for_object in favor of the bulk helper
The same grant rules were implemented twice, and only the bulk version
validated every action before writing, so the single-object one could leave
a partial change behind.
* Chore: type the set-permissions dict
Callers passed whatever they had, including querysets of User and Group
objects that only worked because id__in accepts a subquery.
2026-10-24 13:28:25 -07:00
shamoon
a74256cd2a
Update SECURITY.md
2026-10-23 17:04:58 -07:00
shamoon
f71a9a6eda
Merge branch 'main' into dev
2026-10-22 15:38:13 -07:00
github-actions[bot]
f319b05e0f
Documentation: Add v3.3.4 changelog ( #14534 )
2026-10-22 15:36:38 -07:00
shamoon
558cb01a1d
Bump version to 3.3.4
v3.3.4
2026-10-22 14:58:47 -07:00
shamoon
59e037fed2
Chore: bump pillow + aiohttp for security fixes
2026-10-22 14:56:06 -07:00
shamoon
56ae227de3
Chore: Update certifi for eMudhra CA incident ( #14533 )
2026-10-22 14:51:54 -07:00