This release includes 1 breaking change for platform teams planning a safe upgrade.
Published 2mo
Productivity & Wikis
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
budget-tracker
collaborative
opensource
packing-list
poi
real-time
+11 more
routes
self-hosted
travel
travel-app
travel-planner
traveling
trip
trip-planner
wanderlog
wanderlust
webapplication
Affected surfaces
auth
Summary
AI summaryFORCE_HTTPS is now opt‑in only via an environment variable.
Full changelog
Rebrand
- NOMAD → TREK — new branding, logos, PWA manifest
- Liquid glass toast notifications (Apple-style, dark/light mode)
Bug Fixes
- HTTPS redirect now opt-in only via
FORCE_HTTPS=true— fixes #33 #43 #52 #54 #55 - PDF export "Tag" fallback uses i18n — fixes #15
- Vacay sharing color collision detection — fixes #25
- Backup settings import fix (via PR #47) — fixes #31
- Atlas country detection uses smallest bounding box (South Korea no longer shows as China) — fixes #31
- JPY and zero-decimal currencies formatted correctly — fixes #32
- HTML lang set to "en" instead of hardcoded "de" — fixes #34
- Duplicate translation keys removed
setSelectedAssignmentIdcrash fixed
New Features
- OSM Enrichment — Overpass API for opening hours/website/phone, Wikimedia Commons for place photos (no Google API needed)
- Right-click on map to add a place with auto reverse geocoding — fills name + address
- OIDC via environment variables —
OIDC_ISSUER,OIDC_CLIENT_ID,OIDC_CLIENT_SECRET,OIDC_DISPLAY_NAME— fixes #48 - Multi-arch Docker (ARM64 + AMD64) — fixes #11
- File management overhaul — star files, trash/restore, upload owner tracking, assign files to places/bookings, file notes, after-upload assign popup — fixes #23
- Markdown in Collab Notes — full rendering with expand modal — fixes #17
- Type-specific booking fields — Flight: airline, flight number, airports. Hotel: check-in/out, day range, accommodation linking. Train: number, platform, seat — fixes #35
- Hotel booking ↔ accommodation sync — bidirectional, auto-create, auto-delete
- Multiple hotels per day — check-in (green) / check-out (red) color coding in day plan
- Ko-fi & Buy Me a Coffee support cards in settings
- GitHub releases served via server proxy with 30min cache
Notes
- All database migrations are additive — existing data is fully preserved
- Hotel reservations now hide the "link to day plan" and "start/end time" fields in the UI (these didn't apply to hotels). The data remains in the database for any existing reservations that had them set.
- The
FORCE_HTTPSbehavior changed: previously on by default in production, now off by default. SetFORCE_HTTPS=trueexplicitly if you need it.
Breaking Changes
- Default `FORCE_HTTPS` behavior changed from enabled to disabled; explicit `FORCE_HTTPS=true` required for HTTPS redirect.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]