v0.15.0 to v0.16.0 · fmd-foss / FMD Server

Commits on Source 39

Add pnpm-store to .gitignore · 18e6f82c
Nulide authored May 09, 2026

18e6f82c
Include fmd-server-ctl in snap · 1e0d1048
Nulide authored May 09, 2026 and Nulide committed May 09, 2026

1e0d1048
Fix bugs in snapcraft · 61b63268
Nulide authored May 09, 2026 and Nulide committed May 09, 2026

61b63268
Polish snap · 8aeab0ef
Thore Göbel authored May 09, 2026 and Nulide committed May 09, 2026

8aeab0ef
Add command to upload snaps · 6b05a482
Nulide authored May 09, 2026 and Thore Göbel committed May 09, 2026

6b05a482
Update pnpm to 11 · 2a9316cd
Thore Göbel authored May 09, 2026
```
And update frontend dependencies
```
2a9316cd

Translated using Weblate (Portuguese) · c989bfed

Silvério Santos authored May 25, 2026 and

Weblate committed May 25, 2026



Currently translated at 100.0% (13 of 13 strings)

Added translation using Weblate (Portuguese)

Translated using Weblate (Portuguese)

Currently translated at 100.0% (17 of 17 strings)

Added translation using Weblate (Portuguese)

Translated using Weblate (Portuguese)

Currently translated at 100.0% (19 of 19 strings)

Added translation using Weblate (Portuguese)

Translated using Weblate (Portuguese)

Currently translated at 100.0% (26 of 26 strings)

Added translation using Weblate (Portuguese)

Translated using Weblate (Portuguese)

Currently translated at 100.0% (56 of 56 strings)

Added translation using Weblate (Portuguese)

Translated using Weblate (Portuguese)

Currently translated at 100.0% (7 of 7 strings)

Added translation using Weblate (Portuguese)

Translated using Weblate (Portuguese)

Currently translated at 100.0% (2 of 2 strings)

Added translation using Weblate (Portuguese)

Co-authored-by: ssantos <ssantos@web.de>
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/commands/pt/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/dashboard/pt/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/errors/pt/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/fmd-server-common/pt/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/login/pt/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/modals/pt/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/settings/pt/
Translation: FMD/FMD Server Common
Translation: FMD/commands
Translation: FMD/dashboard
Translation: FMD/errors
Translation: FMD/login
Translation: FMD/modals
Translation: FMD/settings

c989bfed

Enable Czech (cs) + Portuguese (pt) · 2a7f4f3c
Thore Göbel authored May 25, 2026 and Nulide committed May 25, 2026
```
Also prepare Hungarian, to be enabled later. Currently it is only 25% translated.
```
2a7f4f3c
Remove ChevronRight from ActionItem · 54577203
Nulide authored May 09, 2026 and Nulide committed May 25, 2026

54577203
Put groups into expandable Button · bc593892
Nulide authored May 09, 2026 and Nulide committed May 25, 2026

bc593892
Use dnd actions in dnd group · 62373b54
Nulide authored May 09, 2026 and Nulide committed May 25, 2026

62373b54
format code with prettier · 3722650f
Nulide authored May 09, 2026 and Nulide committed May 25, 2026

3722650f
Tweak strings + formatting + rename · 531a34ff
Thore Göbel authored May 24, 2026 and Nulide committed May 25, 2026

531a34ff
Use rounded corners for group header · bc6a4332
Nulide authored May 25, 2026 and Nulide committed May 25, 2026

bc6a4332

Translated using Weblate (Portuguese (Brazil)) · 5a478dc4

LucasMZ authored May 31, 2026 and

Weblate committed May 31, 2026



Currently translated at 100.0% (13 of 13 strings)

Translated using Weblate (Portuguese (Brazil))

Currently translated at 100.0% (72 of 72 strings)

Co-authored-by: LucasMZ <git@lucasmz.dev>
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/commands/pt_BR/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/login/pt_BR/
Translation: FMD/commands
Translation: FMD/login

5a478dc4

Translated using Weblate (Czech) · b973018b

Fjuro authored May 31, 2026 and

Weblate committed May 31, 2026



Currently translated at 100.0% (72 of 72 strings)

Co-authored-by: Fjuro <fjuro@users.noreply.hosted.weblate.org>
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/commands/cs/
Translation: FMD/commands

b973018b

Translated using Weblate (Estonian) · 191e93f0

Priit Jõerüüt authored May 31, 2026 and

Weblate committed May 31, 2026



Currently translated at 100.0% (72 of 72 strings)

Co-authored-by: Priit Jõerüüt <jrthwlate@users.noreply.hosted.weblate.org>
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/commands/et/
Translation: FMD/commands

191e93f0

Translated using Weblate (French) · 3b6ef666

Sylvain Pichon authored May 31, 2026 and

Weblate committed May 31, 2026



Currently translated at 100.0% (72 of 72 strings)

Co-authored-by: Sylvain Pichon <service@spichon.fr>
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/commands/fr/
Translation: FMD/commands

3b6ef666

Translated using Weblate (Dutch) · 78dde4be

Stephan Paternotte authored May 31, 2026 and

Weblate committed May 31, 2026



Currently translated at 100.0% (72 of 72 strings)

Co-authored-by: Stephan Paternotte <stephan@paternottes.net>
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/commands/nl/
Translation: FMD/commands

78dde4be

Translated using Weblate (Slovenian) · 8f937f3a

Matej Kovacic authored May 31, 2026 and

Weblate committed May 31, 2026



Currently translated at 100.0% (72 of 72 strings)

Co-authored-by: Matej Kovacic <matej.kovacic@telefoncek.si>
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/commands/sl/
Translation: FMD/commands

8f937f3a

Translated using Weblate (German) · a1b91e76

Ettore Atalan authored May 31, 2026 and

Weblate committed May 31, 2026



Currently translated at 91.6% (66 of 72 strings)

Co-authored-by: Ettore Atalan <atalanttore@googlemail.com>
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/commands/de/
Translation: FMD/commands

a1b91e76

Translated using Weblate (Italian) · 1bccc101

Thomas Di Cristofaro authored May 31, 2026 and

Weblate committed May 31, 2026



Currently translated at 100.0% (72 of 72 strings)

Translated using Weblate (Italian)

Currently translated at 100.0% (13 of 13 strings)

Translated using Weblate (Italian)

Currently translated at 100.0% (19 of 19 strings)

Translated using Weblate (Italian)

Currently translated at 100.0% (17 of 17 strings)

Translated using Weblate (Italian)

Currently translated at 100.0% (26 of 26 strings)

Translated using Weblate (Italian)

Currently translated at 100.0% (2 of 2 strings)

Translated using Weblate (Italian)

Currently translated at 100.0% (7 of 7 strings)

Added translation using Weblate (Italian)

Added translation using Weblate (Italian)

Added translation using Weblate (Italian)

Added translation using Weblate (Italian)

Added translation using Weblate (Italian)

Added translation using Weblate (Italian)

Added translation using Weblate (Italian)

Co-authored-by: Thomas Di Cristofaro <hostedweblate.8347@tdc.akamail.it>
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/commands/it/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/dashboard/it/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/errors/it/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/fmd-server-common/it/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/login/it/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/modals/it/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/settings/it/
Translation: FMD/FMD Server Common
Translation: FMD/commands
Translation: FMD/dashboard
Translation: FMD/errors
Translation: FMD/login
Translation: FMD/modals
Translation: FMD/settings

1bccc101

Translated using Weblate (German) · fee17412

Thore Göbel authored May 31, 2026 and

Weblate committed May 31, 2026



Currently translated at 100.0% (72 of 72 strings)

Co-authored-by: Thore Göbel <thgoebel@users.noreply.hosted.weblate.org>
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/commands/de/
Translation: FMD/commands

fee17412

Don't store IDT in postLocation · beb13fbe

Thore Göbel authored May 16, 2026 and

Thore Göbel committed May 31, 2026

Before this commit, the entire DataPackage was stored in the DB as received by the API.
This resulted in the IDT being stored to -- and the IDT contains the access token!

Long-term, this is a waste of space.
Short-term, this is a security risk because the access token may still be valid (up to 1 week).

However, the severity is low because an attacker who obtains a database copy
is already in a similar privileged position as the untrusted server threat model
that the E2EE is designed for.

This issue was found by Claude.

beb13fbe

Add autofill hints to username/password form · 595314e0
Thore Göbel authored May 16, 2026 and Thore Göbel committed May 31, 2026
```
This was pointed out by Claude.
```
595314e0

Explicitly set file permissions when creating DB file · 8982a459

Thore Göbel authored May 16, 2026 and

Thore Göbel committed May 31, 2026

os.Create defaults to 0666 which is world-readably by default:
https://pkg.go.dev/os#Create

This is a security risk, because any other user on the system can read the database.
To fix this, use os.OpenFile with explicit permissions.

Also fix any existing too-open permissions.
This can come from earlier installations or from admin misconfigurations.

This issue was found by Claude.

SonarQube currently has a related recommendation, that this commit fixes as well:

> Replace this file creation with `os.OpenFile` using `os.O_CREATE|os.O_EXCL` flags
> to atomically create the file and eliminate the race condition.

8982a459

Add timeouts for HTTP server + client · 52ee56c7
Thore Göbel authored May 16, 2026 and Thore Göbel committed May 31, 2026
```
This was pointed out by Claude.
```
52ee56c7

Move username length check into regex · 31210aa3

Thore Göbel authored May 16, 2026 and

Thore Göbel committed May 31, 2026

This is useful because IsUserIdValid is also used in APIv1 in
requestSalt and requestAccess as a sanity check.
This allows us to abort early if the username is too long.

This was pointed out by Claude.

31210aa3

Clear apk cache in Alpine image · 9875e2a2
Thore Göbel authored May 16, 2026 and Thore Göbel committed May 31, 2026
```
Suggested by SonarQube.
```
9875e2a2
Use shorter nullable syntax · 2d19a825
Thore Göbel authored May 16, 2026 and Thore Göbel committed May 31, 2026
```
Suggested by SonarQube.
```
2d19a825
Enable Italian (it) · 77d96ce4
Thore Göbel authored May 31, 2026 and Thore Göbel committed Jun 01, 2026
```
Added in !239
```
77d96ce4

Translated using Weblate (Hungarian) · 1190d2bf

PB authored Jun 16, 2026 and

Weblate committed Jun 16, 2026



Currently translated at 100.0% (7 of 7 strings)

Translated using Weblate (Hungarian)

Currently translated at 100.0% (26 of 26 strings)

Translated using Weblate (Hungarian)

Currently translated at 100.0% (17 of 17 strings)

Translated using Weblate (Hungarian)

Currently translated at 100.0% (72 of 72 strings)

Co-authored-by: PB <regisztralo111@gmail.com>
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/commands/hu/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/dashboard/hu/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/fmd-server-common/hu/
Translate-URL: https://hosted.weblate.org/projects/fmd/fmd-server/settings/hu/
Translation: FMD/FMD Server Common
Translation: FMD/commands
Translation: FMD/dashboard
Translation: FMD/settings

1190d2bf

refactor: Move secure+insecure HTTP serving into separate functions · 3894bcfc
Thore Göbel authored Jun 09, 2026 and Nulide committed Jun 17, 2026

3894bcfc
Add ability to listen on specific interfaces/addresses only · 8a69880d
Thore Göbel authored Jun 09, 2026 and Nulide committed Jun 17, 2026
```
Fixes #153
```
8a69880d

Install current NodeJS in dev Dockerfile · ec7e23a2

Thore Göbel authored Jun 10, 2026 and

Nulide committed Jun 17, 2026

Otherwise, the build fails, because pnpm 11 requires NodeJS 22
but trixies comes with 20.

Also fix the build in the scripts Dockerfile.

ec7e23a2

Update go dependencies · c7ca7439
Thore Göbel authored Jun 10, 2026 and Nulide committed Jun 17, 2026

c7ca7439

Update web deps · 3cff9df5

Thore Göbel authored Jun 10, 2026 and

Nulide committed Jun 17, 2026

The change for "eslint-plugin-tailwindcss" from "4.0.0-beta.0" to "4.0.0-alpha.3" is actually an update.
This is because the upstream has stopped releasing betas and is now using the name "alpha".
See https://www.npmjs.com/package/eslint-plugin-tailwindcss?activeTab=versions

3cff9df5

Enable Hungrian (hu) · 179cf511
Thore Göbel authored Jun 17, 2026 and Nulide committed Jun 17, 2026
```
More translations are added in !244
thus bringing it over 80% coverage.
```
179cf511
Bump version to 0.16.0 · 8938b8d6
Thore Göbel authored Jun 17, 2026

8938b8d6