This release includes 1 security fix for security teams reviewing exposed deployments.
Published 1mo
Dashboards & Home Pages
✓ No known CVEs patched
This release patches 1 known CVE
Topics
docker
fitness-tracker
go
gpx
leaflet
self-hosted
+3 more
tailwindcss
workout-tracker
workouts
Affected surfaces
deps
breaking_upgrade
Summary
AI summaryBroad release touches deps, fix, deps-dev, and feat.
Full changelog
What's Changed
- feat: route segment personal trend chart (rebase of PR #273) by @jovandeginste with @Copilot in https://github.com/jovandeginste/workout-tracker/pull/756
- chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/749
- chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/750
- chore(deps-dev): bump minimatch from 3.1.2 to 3.1.5 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/751
- chore(deps): bump the all group with 7 updates by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/753
- chore(deps): bump the all group across 1 directory with 6 updates by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/758
- fix: improve route segment matching for snowboarding and skiing by @pixelspark in https://github.com/jovandeginste/workout-tracker/pull/760
- feat(workout): add chin-ups, pull-ups, and planking types by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/764
- feat(climbs): add average speed to climb table by @pixelspark in https://github.com/jovandeginste/workout-tracker/pull/761
- fix: make personal trend chart fill box vertically by @pixelspark in https://github.com/jovandeginste/workout-tracker/pull/766
- fix: align dates according to bucket by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/763
- fix(calendar): handle Z suffix in date query parameters by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/769
- feat(sports): add nautical workouts by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/770
- fix(workouts): update averages when updating manual workouts by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/771
- feat(distance): Allow TCX files with distance, but without coördinates by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/772
- chore(cleanup): Remove vendored files from Git by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/773
- feat(server): make gzip compression configurable by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/776
- fix: Generate go mod vendor for dev environment by @jovandeginste with @Copilot in https://github.com/jovandeginste/workout-tracker/pull/774
- fix(vendor): Install vendored dependencies in Docker container by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/777
- chore(deps): bump the npm_and_yarn group across 1 directory with 1 update by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/778
- chore(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/780
- chore(deps): bump actions/setup-go from 6.3.0 to 6.4.0 in the all group across 1 directory by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/781
- chore(deps-dev): bump @xmldom/xmldom from 0.8.11 to 0.8.12 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/782
- chore(deps): bump the all group with 5 updates by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/783
- fix(nautical): Replace more occurences of units for nautical workouts by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/784
- feat(swimming): Improve parsing of swimming workouts from fit files by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/786
- feat(route-segment): Create route segment from climb/descent by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/787
- Fix latest measurement query by @atomaka in https://github.com/jovandeginste/workout-tracker/pull/789
- updated documentation : file import via api examples by @ka-mp-6765 in https://github.com/jovandeginste/workout-tracker/pull/793
- chore(deps): bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.2 by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/794
- chore(deps-dev): bump @xmldom/xmldom from 0.8.12 to 0.8.13 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/795
- chore(deps): bump github.com/gohugoio/hugo from 0.149.1 to 0.159.2 by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/788
- chore(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/791
- chore(deps): bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/796
- chore(deps): bump postcss from 8.5.6 to 8.5.12 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/797
- chore(deps): Bump dependency gpxgo for timezone parsing by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/799
- feat(i18n): add Swedish language support by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/810
- Upgrade to Go v1.26 by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/812
- chore(deps): bump github.com/gohugoio/hugo from 0.159.2 to 0.161.0 by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/804
- chore(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/806
- chore(deps): bump the all group across 1 directory with 11 updates by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/813
- Translations update from Hosted Weblate by @weblate in https://github.com/jovandeginste/workout-tracker/pull/807
- Translations update from Hosted Weblate by @weblate in https://github.com/jovandeginste/workout-tracker/pull/814
- fix: wrap translations FS to dynamically add top-level language key by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/816
- Revert "fix: wrap translations FS to dynamically add top-level language key" by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/819
- fix(auth): allow insecure token cookies by @jovandeginste in https://github.com/jovandeginste/workout-tracker/pull/821
- Translations update from Hosted Weblate by @weblate in https://github.com/jovandeginste/workout-tracker/pull/823
- chore(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 by @dependabot[bot] in https://github.com/jovandeginste/workout-tracker/pull/817
New Contributors
- @jovandeginste with @Copilot made their first contribution in https://github.com/jovandeginste/workout-tracker/pull/756
- @atomaka made their first contribution in https://github.com/jovandeginste/workout-tracker/pull/789
- @ka-mp-6765 made their first contribution in https://github.com/jovandeginste/workout-tracker/pull/793
Full Changelog: https://github.com/jovandeginste/workout-tracker/compare/v2.6.0...v2.7.0
Breaking Changes
- Upgrade to Go v1.26 (minimum runtime version)
- Removed vendored files from Git
Security Fixes
- fix(auth): allow insecure token cookies – note this relaxes security (not a CVE)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About workout-tracker
A workout tracking web application for personal use (or family, friends), geared towards running and other GPX-based activities
Related context
Related tools
Beta — feedback welcome: [email protected]