Trenton H f993462973 Security: Minor additional hardening (#13898) ...

* Security: bump jinja2 floor to 3.1.6 (CVE-2025-27516)

* Security: anchor the /share/ URL pattern

* Security: handle missing file on public share view without 500

* Security: scope correspondent last_correspondence to permitted documents

* Security: disable PUT/PATCH on share link bundles

2026-09-01 19:53:28 +00:00

..

export

Feature: Allow selection of compression type and and level during export (#13661)

2026-08-13 18:29:33 +00:00

management

Feature: Allow selection of compression type and and level during export (#13661)

2026-08-13 18:29:33 +00:00

migrations

Enhancement: Apply AI suggestions workflow action (#13639)

2026-08-26 16:41:21 +00:00

plugins

Chore: fix sonarcube logger warnings

2026-05-20 08:54:00 -07:00

resources

Logs the errors during thumbnail generation, updates default to be WebP

2023-09-12 12:16:22 -07:00

search

Fix: lazy import guardian modules to fix search language setting (#13768)

2026-08-24 13:46:20 +00:00

signals

Fix: 3.1.0 llm suggestion raw cache user scoping (#13849)

2026-08-29 13:02:05 -07:00

static

Chore(deps): Bump bootstrap from 5.3.7 to 5.3.8 in /src-ui (#10740)

2025-09-03 21:58:53 +00:00

templates

Fix: fix broken docker frontend from esbuild migration (#13603)

2026-08-07 12:59:46 -07:00

templating

Merge commit from fork

2026-09-01 07:56:38 -07:00

tests

Security: Minor additional hardening (#13898)

2026-09-01 19:53:28 +00:00

workflows

Fix: defer add_nested_tags in ai workflow to avoid losing unsaved changes

2026-08-26 14:18:40 -07:00

__init__.py

Breaking: Remove support for document and thumbnail encryption (#11850)

2026-01-24 19:29:54 -08:00

admin.py

Security: fixes for v3 beta (#12838)

2026-05-26 16:46:23 +00:00

apps.py

Fix: Minor fixes for the AI indexing (#12893)

2026-06-01 13:40:49 -07:00

barcodes.py

Chore: Converts all call sites and test asserts to use apply_async and headers (#12591)

2026-04-20 11:40:04 -07:00

bulk_download.py

Chore: Reduce imports for a slight memory improvement (#9217)

2025-02-24 15:06:14 -08:00

bulk_edit.py

Remote ocr reprocess (#13636)

2026-08-24 14:43:05 -07:00

caching.py

Chore: consolidate pickle hmac signing (#13899)

2026-09-01 12:41:45 -07:00

checks.py

Chore: Drop old signal and unneeded apps, transition to parser registry instead (#12405)

2026-03-22 06:53:32 -07:00

classifier.py

Chore: consolidate pickle hmac signing (#13899)

2026-09-01 12:41:45 -07:00

conditionals.py

Fix: cache per-request effective-document resolution for thumb/metadata/preview (#13166)

2026-07-19 18:04:16 -07:00

consumer.py

Merge commit from fork

2026-09-01 07:56:38 -07:00

context_processors.py

Enhancement: allow webUI first account signup (#9500)

2025-03-29 17:12:34 +00:00

converters.py

Chore: Standardize subprocess running and logging (#6275)

2024-04-04 13:11:43 -07:00

data_models.py

Allow parsers to declare uses remote, and remote ocr_mode (#13634)

2026-08-24 14:43:04 -07:00

double_sided.py

Chore: Drop Python 3.9 support (#7774)

2024-09-26 12:22:24 -07:00

file_handling.py

Merge commit from fork

2026-09-01 07:56:38 -07:00

filters.py

Fix: deny deactivated users in permission filtering and auto-login (#13623)

2026-08-10 02:25:06 +00:00

loggers.py

Chore(mypy): Annotate None returns for typing improvements (#11213)

2026-02-02 08:44:12 -08:00

mail.py

Fix: handle hidden line breaks in email subjects when sending email (#13402)

2026-07-29 14:35:30 +00:00

matching.py

perf: migrate matching.py's classification lookups to permitted_object_ids (#13575)

2026-08-08 07:27:17 -07:00

models.py

Fix: use root doc metadata for filename generation (#13893)

2026-09-01 09:55:04 -07:00

parsers.py

Chore: Drop old signal and unneeded apps, transition to parser registry instead (#12405)

2026-03-22 06:53:32 -07:00

permissions.py

Enhancement: prefer existing tags, types, correspondents, and storage paths in AI suggestions (#13676)

2026-08-14 15:51:34 -07:00

regex.py

Chore: fix sonarcube logger warnings

2026-05-20 08:54:00 -07:00

sanity_checker.py

Fix (beta): fix sanity checker affected document counts (#13052)

2026-06-27 15:55:38 -07:00

schema.py

Feature: openapi spec, full api browser (#8948)

2025-02-10 16:43:07 +00:00

serialisers.py

Fix: re-use permitted_object_ids

2026-09-01 07:45:47 -07:00

settings.py

Enhancement: include sharelinks + bundles in export/import (#12479)

2026-04-03 21:51:57 +00:00

tasks.py

Enhancement: Apply AI suggestions workflow action (#13639)

2026-08-26 16:41:21 +00:00

utils.py

Refactor: extract QuerySetStream, shared by search and LLM indexing (#13431)

2026-08-01 04:07:26 +00:00

validators.py

Enhancement: use charfield for webhook url, custom validation (#9128)

2025-02-16 14:26:30 -08:00

versioning.py

Fix: version indexing fixes (#13737)

2026-08-23 23:04:47 +00:00

views.py

Security: Minor additional hardening (#13898)

2026-09-01 19:53:28 +00:00