fix(selfhost): harden database and redis security for production depl…#14813

Open

LeonardoJaques wants to merge 53 commits intotoeverything:canaryfrom

LeonardoJaques:fix-selfhost-security

Commits on Mar 24, 2026

fix(selfhost): harden database and redis security for production deployments
LeonardoJaques
committed

Commits on Apr 14, 2026

fix(selfhost): address CodeRabbit review — fail-fast vars, read-only healthcheck, backup docs
LeonardoJaques
committed

Commits on Apr 17, 2026

fix(editor): font weight dropdown empty on Chrome/Safari in edgeless mode (#14725)

aisharoslan
authored and
LeonardoJaques
committed
feat(server): refactor record schema (#14729)

darkskygit
authored and
LeonardoJaques
committed
feat: adapt cloudflare worker ai (#14732)

darkskygit
authored and
LeonardoJaques
committed
fix: iCloud CalDAV discovery fallback and resolve calendarsCount in GraphQL (#14728)

ibex088
authored and
LeonardoJaques
committed
fix: restore kanban scroll in fullscreen mode (#14708)

ibex088
authored and
LeonardoJaques
committed
feat(server): add perf metrics for apply update (#14736)

darkskygit
authored and
LeonardoJaques
committed
feat(core): auto scroll for chat panel (#14748)

darkskygit
authored and
LeonardoJaques
committed
fix(test): e2e stability (#14749)

darkskygit
authored and
LeonardoJaques
committed
fix: allow PDF preview on readonly public pages (#14761)

ibex088
authored and
LeonardoJaques
committed
fix(core): nested numbered list order (#14764)

sanabriageorge
authored and
LeonardoJaques
committed
chore: bump oxlint & enable more supported rules (#14769)

darkskygit
authored and
LeonardoJaques
committed
fix(server): race condition for sync (#14770)

darkskygit
authored and
LeonardoJaques
committed
fix(core): settings i18n refresh (#14760)

darkskygit
authored and
LeonardoJaques
committed
chore(i18n): improve RU translate (#14718)

vetash
authored and
LeonardoJaques
committed
chore: bump deps (#14777)

darkskygit
authored and
LeonardoJaques
committed
fix: lint

darkskygit
authored and
LeonardoJaques
committed
fix: save column header edits when pressing Enter (#14775)

HanaB14
authored and
LeonardoJaques
committed
chore(server): db health check (#14779)

darkskygit
authored and
LeonardoJaques
committed
feat(mobile): adapt new endpoint (#14778)

darkskygit
authored and
LeonardoJaques
committed
fix: close docs bulk toolbar after delete (#14711)

authored and
LeonardoJaques
committed
feat(server): improve calendar sync queue (#14783)

darkskygit
authored and
LeonardoJaques
committed
fix(server): update version check (#14784)

darkskygit
authored and
LeonardoJaques
committed
chore: bump deps (#14785)

darkskygit
authored and
LeonardoJaques
committed
chore: improve ci (#14787)

darkskygit
authored and
LeonardoJaques
committed
fix(server): skip watch for external cal (#14788)

darkskygit
authored and
LeonardoJaques
committed
feat: add auto-date titles for new documents (#14716)

ibex088
authored and
LeonardoJaques
committed
feat(editor): improve dated doc creation (#14791)

darkskygit
authored and
LeonardoJaques
committed
fix(core): hotkey option+cmd+c for Code Block (#14790)

001-mak
authored and
LeonardoJaques
committed
fix: audio waveform clipping in horizontal card view (#14789)

Xuan4781
authored and
LeonardoJaques
committed
fix(core): shared page mode syncing (#14756)

authored and
LeonardoJaques
committed
feat: follow publish mode if no params

darkskygit
authored and
LeonardoJaques
committed
feat(server): synthetic root doc (#14794)

darkskygit
authored and
LeonardoJaques
committed
fix(server): online and storage statistics (#14792)

darkskygit
authored and
LeonardoJaques
committed
feat: redirect account click & OAuth to Calendar settings (#14693)

authored and
LeonardoJaques
committed
fix(editor): restore grouped manual ordering for kanban and arrange (#14630)

authored and
LeonardoJaques
committed
feat(core): add integration panel test

darkskygit
authored and
LeonardoJaques
committed
fix(editor): make repeated "Cancel line number" clicks work in code blocks (#14804)

lawvs
authored and
LeonardoJaques
committed
fix(core): improve table header sorting logic in processTable function (#14797)

001-mak
authored and
LeonardoJaques
committed
fix: test stability

darkskygit
authored and
LeonardoJaques
committed
fix: prevent IME preedit overflow in mind map node editor (#14520)

authored and
LeonardoJaques
committed
fix(android): route OAuth deep link to correct server's AuthService (#14809)

authored and
LeonardoJaques
committed
feat(mobile): improve notify for login failed

darkskygit
authored and
LeonardoJaques
committed
chore: bump deps (#14810)

darkskygit
authored and
LeonardoJaques
committed
chore: improve test stability

darkskygit
authored and
LeonardoJaques
committed
chore: bump deps

darkskygit
authored and
LeonardoJaques
committed
fix(core): resolve remaining untranslated doc title case in detail page header (#14820)

HanaB14
authored and
LeonardoJaques
committed
fix(editor): allow hyperlink clicks in locked edgeless text blocks (#14829)

Abdulrehman-PIAIC80387
authored and
LeonardoJaques
committed
fix(selfhost): fix Redis healthcheck variable interpolation
LeonardoJaques
committed
chore: bump up Rust crate rand to v0.9.3 [SECURITY] (#14832)

renovate[bot]
authored and
LeonardoJaques
committed
chore: bump up dompurify version to v3.4.0 [SECURITY] (#14833)

renovate[bot]
authored and
LeonardoJaques
committed
fix(selfhost): use list form for Redis command to avoid shell word-splitting
LeonardoJaques
committed