Commit graph

172 commits

Author SHA1 Message Date
848b4ee2da
ci: cache Go tools, bump action versions, use golangci-lint env var 2026-05-23 23:15:41 -07:00
850105181a
update signal-cli to v0.14.4.1 (GraalVM native, amd64 + arm64) 2026-05-23 23:08:32 -07:00
37d745703c
security: remove RealIP middleware, tighten rate limiter defaults
- remove chi middleware.RealIP; deprecated in chi v5.3.0 due to IP spoofing
  vulnerabilities (GHSA-3fxj-6jh8-hvhx, GHSA-rjr7-jggh-pgcp, GHSA-9g5q-2w5x-hmxf)
- lower default RATE_LIMIT from 100 to 20 req/s per IP
- support RATE_LIMIT=0 to disable rate limiting entirely (for deployments behind
  a remote reverse proxy with its own rate limiting)
- fix incorrect .env.example comment (was 'per 15 minute window', is per second)
2026-05-23 18:37:55 -07:00
8dd23cc9b2
deps: upgrade chi, telego, hydroxide, sqlite, crypto and transitive deps 2026-05-23 18:37:43 -07:00
fab4ca72de
new release for go's latest security patch 2026-05-08 11:17:10 -07:00
e64423d1f3
docs: expand HA camera snapshot example, use HTTPS URL 2026-05-04 13:53:03 -07:00
397710c2d5
update README to highlight the importance of https for Prism 2026-05-01 15:07:32 -07:00
8c06caadf3
update sqlite dep, disallow non-ascii characters in API keys 2026-04-25 18:37:03 -07:00
54afd9656d
dep upgrade, disable dependabot PRs 2026-04-18 14:47:02 -07:00
165c53339d
readme update 2026-04-17 18:21:50 -07:00
960b5c2874
shorten email actions to include just the first @ part 2026-04-15 09:48:07 -07:00
3f8fc957c5
dont need to truncate for logs 2026-04-15 09:16:22 -07:00
ca367baf35
fix telegram linking, minor fixes for upcoming release 2026-04-15 07:58:38 -07:00
4f259ccfea
support images in notifications, enrich notifications with phone + email actions, UX/a11y improvements 2026-04-14 18:05:14 -07:00
814c6fa258
more minor UI nitpicks 2026-04-13 22:47:59 -07:00
fe75679700
improve readme, update screenshots for light/dark mode, 2026-04-13 22:23:30 -07:00
510a2d6f7a
chore: restore GHA cache for dev builds 2026-04-13 20:50:01 -07:00
ef98c7eab3
fix missed telegram unlinked status update 2026-04-13 20:27:17 -07:00
d39a8e2b43
more minor UI adjustments, back to matching Android theme 2026-04-13 20:13:09 -07:00
0c5306cbe7
fix: update golang.org/x/image to v0.39.0 (CVE fixes) 2026-04-13 14:52:36 -07:00
6d8995eae9
fix: remove min-height from delete-sub button 2026-04-13 14:44:15 -07:00
93457a50a5
chore: force no-cache dev build 2026-04-13 14:37:33 -07:00
fa6e967696
tighter badge padding 2026-04-13 13:07:08 -07:00
18c13e564f
note where the signal-cli come from 2026-04-13 12:32:01 -07:00
c9cb3a7289
update to latest signal-cli, UI audit improvements" 2026-04-13 12:17:59 -07:00
88aeff8539
update deps 2026-04-10 18:28:51 -07:00
f136a17a4d README update: title needs to be explicitly passed from HA automations 2026-04-04 13:07:09 -07:00
2cfee68536 reduce debug spam from hydroxide, better log title from ntfy alerts 2026-04-04 12:36:24 -07:00
024421fe50 update deps, check for docker image updates without local docker (caching version digest locally) 2026-04-03 14:41:16 -07:00
6ba21bad53 adding a new Beszel real world example, move examples below API 2026-03-29 14:15:27 -07:00
eb762fd05b another fix to ensure consistent relinking proton behaviour 2026-03-29 12:17:59 -07:00
e5778f68aa rename prism admin -> prism 2026-03-28 17:07:39 -07:00
c9d52e6b43 new eye icon to show/hide proton mail password during initial entry, fix proton re-linking, new release 2026-03-28 14:25:55 -07:00
dependabot[bot]
61d833d864 Bump modernc.org/sqlite from 1.47.0 to 1.48.0 (#4)
Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.47.0 to 1.48.0.
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.47.0...v1.48.0)

---
updated-dependencies:
- dependency-name: modernc.org/sqlite
  dependency-version: 1.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-28 09:23:01 -07:00
dependabot[bot]
cc6b3ab198 Bump modernc.org/sqlite from 1.46.1 to 1.47.0 (#3)
Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.46.1 to 1.47.0.
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.46.1...v1.47.0)

---
updated-dependencies:
- dependency-name: modernc.org/sqlite
  dependency-version: 1.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-22 20:42:14 -07:00
7ccfe8e585 default integration flags to true, update x/crypto to latest, v1.1.0 2026-03-11 19:19:10 -07:00
623cb9a998 update telego to latest 2026-03-04 15:58:59 -08:00
dff6addb35 make info logging more consistent 2026-02-27 18:26:01 -08:00
6c3c5e1f6d rename Delete to Trash 2026-02-27 13:43:47 -08:00
4dac3dbba0 better logging levels 2026-02-26 23:56:19 -08:00
f7f161221c upgrade transient deps 2026-02-26 18:42:26 -08:00
bb8ce0456a code cleanups and refactors 2026-02-26 18:35:11 -08:00
004c06a165 ensure we use go 1.26 everywhere, dockerfile optimizations, decreease all workflow times with better go caching 2026-02-24 22:42:13 -08:00
b3bb864fac better notification action ordering 2026-02-24 22:02:00 -08:00
ce18b03394 new delete action for proton mail notifications 2026-02-24 20:43:17 -08:00
bb1ee31308 code cleanups, switch to chi rate limiting middleware 2026-02-24 01:24:22 -08:00
dependabot[bot]
621c3f7334 Bump modernc.org/sqlite from 1.45.0 to 1.46.1 (#2)
Bumps [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) from 1.45.0 to 1.46.1.
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.45.0...v1.46.1)

---
updated-dependencies:
- dependency-name: modernc.org/sqlite
  dependency-version: 1.46.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-20 19:14:53 -08:00
c3204f7fc4 readme touchups 2026-02-19 21:26:18 -08:00
d1972eaffc update dashboard screenshot 2026-02-19 17:44:08 -08:00
29949d90bc fix lint checks to work with newest version of go 2026-02-19 16:56:24 -08:00