Sabu Siyad
ec9a60172f
feat: security.txt ( #38530 )
...
* feat: `security.txt`
* fix(security-settings): public_policy must start be https
* feat(security-settings): preview `security.txt`
* refactor(security-settings): security_txt logic
* feat(security-settings): security_txt expires
* refactor(security-txt): get content from security settings
* fix(security-txt): serve only over https
* fix(security-settings): change labels (plural)
- contacts
- languages
* refactor(security-settings): move to website module
* feat(security-settings): banner/alert on security.txt with link to RFC
* feat(security-txt): expiry alert emails
* fix(security-settings): banner gets duplicated on save
* refactor(security-settings): move to `Core` module
* test(security-settings): add unit tests
* fix(security-settings): translatable strings on throw
2026-04-14 17:22:22 +05:30
Aarol D'Souza
4e52cbfb95
Merge pull request #38566 from AarDG10/fix-user
...
fix(user): sanitize all html tags in name fields in User Doctype
2026-04-14 17:07:48 +05:30
Soham Kulkarni
7848c594c0
Merge pull request #38594 from sokumon/show-password-icon
2026-04-14 16:55:34 +05:30
sokumon
bc4d742129
fix: use lucide icon for password control
2026-04-14 16:37:20 +05:30
Aarol D'Souza
c61766cd47
Merge pull request #38583 from AarDG10/fix-report-export
...
fix(reportview): support dict. when parsing fields
2026-04-14 16:25:23 +05:30
Soham Kulkarni
1d03647559
Merge pull request #38556 from nextchamp-saqib/remove-collapse-button
2026-04-14 16:23:50 +05:30
sokumon
ec1e203e4e
fix: add a subtler color and use more informative cursors
2026-04-14 16:06:13 +05:30
rohitwaghchaure
2b1e30384f
Merge pull request #38561 from rohitwaghchaure/fix-max_writes_per_transaction
...
feat: provision to configure max_writes_per_transaction in site config
2026-04-14 15:26:00 +05:30
Hussain Nagaria
0259c373ff
Merge pull request #38418 from gajjug004/fix/link-fields-title-report-view
2026-04-14 14:27:46 +05:30
AarDG10
e334e327fb
fix(reportview): support dict. when parsing fields
...
QB generates a dict. so added support for that when exporting into Excel/CSV
2026-04-14 12:48:31 +05:30
dependabot[bot]
949016c749
chore(deps): bump pypdf from 6.9.2 to 6.10.0 ( #38534 )
...
Bumps [pypdf](https://github.com/py-pdf/pypdf ) from 6.9.2 to 6.10.0.
- [Release notes](https://github.com/py-pdf/pypdf/releases )
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md )
- [Commits](https://github.com/py-pdf/pypdf/compare/6.9.2...6.10.0 )
---
updated-dependencies:
- dependency-name: pypdf
dependency-version: 6.10.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-14 11:24:55 +05:30
dependabot[bot]
1208521859
build(deps): bump lodash-es from 4.17.23 to 4.18.1 ( #38383 )
...
Bumps [lodash-es](https://github.com/lodash/lodash ) from 4.17.23 to 4.18.1.
- [Release notes](https://github.com/lodash/lodash/releases )
- [Commits](https://github.com/lodash/lodash/compare/4.17.23...4.18.1 )
---
updated-dependencies:
- dependency-name: lodash-es
dependency-version: 4.18.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-14 11:19:11 +05:30
dependabot[bot]
fdc5f0f5cc
build(deps): bump codecov/codecov-action from 5 to 6 ( #38344 )
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 5 to 6.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-14 11:13:04 +05:30
MochaMind
a01cadcd44
chore: update POT file ( #38546 )
2026-04-14 11:01:38 +05:30
Ejaaz Khan
2f05b7b368
Merge pull request #38577 from gajjug004/fix/remove-wildcard-hint-link-search
...
fix: remove misleading wildcard hint from link field advanced search
2026-04-14 11:01:12 +05:30
gajjug004
659bff98ad
fix: remove misleading wildcard hint from link field advanced search
2026-04-14 10:41:11 +05:30
Soham Kulkarni
e780b0b509
Merge pull request #38573 from sokumon/priv-workspaces
2026-04-14 05:07:53 +05:30
sokumon
cca94708b0
fix: allow desktop icon renaming for non-standard icons
2026-04-14 04:51:10 +05:30
Soham Kulkarni
c938be1880
Merge pull request #38571 from sokumon/priv-workspaces
2026-04-14 01:41:24 +05:30
sokumon
1bf32d2cb1
fix: set for user while creating private workspace
2026-04-14 01:26:54 +05:30
AarDG10
a1d7fb77e3
fix(user): sanitize all html tags in name fields
...
Name fields shouldn't really be allowing HTML tags in User Doctype.
2026-04-13 20:56:47 +05:30
AarDG10
c3d8214124
feat(html_utils): introduce wildcard in sanitize_html
...
Introduces a wildcard i.e. Disallows all HTML tags when used.
2026-04-13 20:53:04 +05:30
Hussain Nagaria
876bf3a6b2
Merge pull request #38557 from gajjug004/fix/onboarding-shown-when-disabled
2026-04-13 17:00:36 +05:30
Rohit Waghchaure
683019f296
feat: provision to configure max_writes_per_transaction in site config
2026-04-13 16:31:05 +05:30
gajjug004
72369a329f
fix: respect Enable Onboarding setting in sidebar onboarding panel
2026-04-13 15:09:00 +05:30
Saqib Ansari
d0df12c326
refactor: remove collapse button
2026-04-13 14:28:30 +05:30
Ejaaz Khan
cdb24afaa4
Merge pull request #38539 from kaulith/fix/pretty-date-calendar-day-diff
...
fix(ui): use calendar days for relative timestamp display
2026-04-13 12:28:47 +05:30
Ejaaz Khan
c6b0587f3b
Merge pull request #38550 from AarDG10/fix-pdf
...
fix(print_utils): fix pdf rendering via chrome by considering bytes
2026-04-13 12:23:32 +05:30
Rucha Mahabal
cc74712304
feat: after_build hook ( #38518 )
...
* feat: `after_build` hook
* feat: add option to skip running `after_build` hooks
* feat(boilerplate): add `after_build` hook
* revert: "feat: add option to skip running `after_build` hooks"
This reverts commit 6e9d2c6a2333d487fcf4d1908c366b496a8d80b1.
Removing the flag for now as other hooks (like after/before migrate) don't have a skip option either
2026-04-13 12:15:38 +05:30
Aarol D'Souza
620c44863c
fix: correct regex in sidebar module app filtering ( #38131 )
...
Co-authored-by: petnd <58605206+petnd@users.noreply.github.com>
2026-04-13 11:53:47 +05:30
AarDG10
255a3e94fa
fix(print_utils): fix pdf rendering via chrome by considering bytes
...
Issue has been caught w/ chrome pdf generator, it returns bytes. This fixes that by considering bytes and then turning it into a PdfWriter obj.
2026-04-13 11:53:39 +05:30
Ejaaz Khan
11a9eba342
Merge pull request #38533 from KerollesFathy/feat/frappe-confirm-custom-labels
...
feat: Add `primary_label` and `secondary_label` params to frappe.confirm
2026-04-13 11:32:07 +05:30
Kaushal Shriwas
44da9da9f7
fix(ui): use Math.floor instead of Math.round for day_diff
2026-04-12 14:23:00 +05:30
Raffael Meyer
2ac1998000
feat(File): add helper to copy attachment to different doc ( #37972 )
2026-04-11 21:45:47 +02:00
MochaMind
5fdebb67bf
fix: sync translations from crowdin ( #38537 )
2026-04-11 20:58:56 +02:00
Kaushal Shriwas
8aae2c921b
fix(ui): use calendar days for relative timestamp display
2026-04-11 23:26:59 +05:30
KerollesFathy
4184f87703
feat: add primary_label and secondary_label params to frappe.confirm
2026-04-10 21:19:04 +00:00
Ejaaz Khan
1b81ff8490
Merge pull request #38499 from frappe/l10n_develop
...
fix: sync translations from crowdin
2026-04-10 12:12:46 +05:30
Ejaaz Khan
d14ac27e32
Merge pull request #38392 from Shllokkk/report-printing-fixes
...
fix: report printing fixes
2026-04-09 21:40:36 +05:30
MochaMind
dc86ee6e2b
fix: Bosnian translations
2026-04-09 20:53:54 +05:30
MochaMind
f6b8a92b91
fix: Croatian translations
2026-04-09 20:53:51 +05:30
Shllokkk
820bc52201
fix: minor bugs in the print settings dialog and populate default print format field for a report
2026-04-09 19:22:52 +05:30
Shllokkk
45c04a85ac
feat(report): add default_print_format link field to report doctype
2026-04-09 19:22:52 +05:30
Saqib Ansari
58618cd0f9
fix: add secondary action for amended documents with tooltip ( #38510 )
2026-04-09 15:30:03 +05:30
Ejaaz Khan
4b53fa7409
Merge pull request #38425 from krishna-254/fix-calendar-end-date-issue
...
fix: adjust end date for all-day events in calendar
2026-04-09 14:41:59 +05:30
Ejaaz Khan
525b7575b0
Merge pull request #38469 from KerollesFathy/fix/not-in-filter-null-values
...
fix: remove null values from "not in" filter
2026-04-09 14:13:18 +05:30
Ejaaz Khan
4d1aaf5932
Merge pull request #38506 from safwansamsudeen/fix-file-attachments-link
...
fix: attachments file link incorrect
2026-04-09 14:08:51 +05:30
Ejaaz Khan
ff38ee1763
Merge pull request #38503 from nextchamp-saqib/fix-allow-importing-custom-docperms
...
fix: allow importing custom docperms
2026-04-09 14:08:30 +05:30
Safwan Samsudeen
9690ab10bd
fix: attachments file link incorrect
2026-04-09 13:05:14 +05:30
Aarol D'Souza
0122b49ef6
Merge pull request #37554 from AarDG10/refactor-password
...
refactor(user): misc. fixes and refactors
2026-04-09 11:26:33 +05:30
