Skip to content

TREK

v3.1.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Productivity & Wikis
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

budget-tracker collaborative opensource packing-list poi real-time
+12 more
routes self-hosted travel travel-app travel-planner traveling trip trip-planner tripit wanderlog wanderlust webapplication

Affected surfaces

auth

Summary

AI summary

Bug fixes across budget, atlas, days, dashboard, costs, packing, auth, admin, helm, planner, map and chart modules.

Full changelog

Changelog

  • fix(budget): accept comma decimal separator in expense amounts
  • fix(budget): scale category bars relative to top category
  • chore: dockerignore spec.ts files
  • fix(atlas): gzip-compress responses so large country GeoJSON loads behind reverse proxies (#1262)
  • chore: add ca_profile.xml for Unraid Community Apps submission
  • fix(security): allow same-origin PDF previews under CSP (#1253)
  • fix(dashboard): count archived trips in travel stats (#1264)
  • fix(days): align note time limit to 250 and keep toasts above modal blur (#1252)
  • fix(pdf): show photos for OSM places in the trip PDF (#1130)
  • fix(chart): allow setting storageClassName on PVCs (#1261)
  • test(days): bump over-long-time assertion to the new 250 limit (#1252)
  • fix(costs): move the unfinished marker to the category icon on mobile (#1266)
  • fix(dashboard): add a text-shadow so spotlight and card titles stay legible (#1267)
  • fix(atlas): give the country-GeoJSON fetch a longer timeout (#1254)
  • feat(helm): add annotations support for PVCs (#1270)
  • fix(admin): show non-Docker update steps when not running in Docker (#1269)
  • feat(planner): bring back the Google Maps route export button (#1255)
  • fix(auth): keep the last admin when OIDC claims would demote it (#1274)
  • fix(dashboard): show an error instead of a blank trip list when the server is unreachable (#1283)
  • fix(packing): keep a custom category when its last item is removed (#1289)
  • fix(costs): allow recording an expense with no split or payer (#1286)
  • fix(map): draw the route line to and from the day's accommodation (#1275)

What's Changed

  • v3.1.2 bug fixes by @jubnl & @mauriceboe in https://github.com/mauriceboe/TREK/pull/1258

Full Changelog: https://github.com/mauriceboe/TREK/compare/v3.1.1...v3.1.2

Security Fixes

  • Allow same-origin PDF previews under CSP (#1253)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track TREK

Get notified when new releases ship.

Sign up free

About TREK

Real-time collaborative travel planner

All releases →

Related context

Beta — feedback welcome: [email protected]