xarmian a4079d12e3 chore(deps): npm update undici markdown-it (Dependabot #9, #11-14, #17-18) (#1701) ...

Lockfile only: undici 7.29.0 -> 7.30.0 (dev-only, via jsdom for vitest)
and markdown-it 14.3.0 -> 14.3.2 (runtime, via tiptap-markdown). Both stay
inside their parents' ranges, and neither advisory path was reachable: we
never use undici's BalancedPool, retry, dump or cache, and linkify is off
at every Markdown.configure site. The materializer site, which runs on
the server, now says linkify must stay off below markdown-it 14.3.1.

Claude-Session: https://claude.ai/code/session_01H63zaWhkb5pAafx2WGjrVC

2026-10-01 00:10:26 -04:00

..

lib

chore(deps): npm update undici markdown-it (Dependabot #9, #11-14, #17-18) (#1701)

2026-10-01 00:10:26 -04:00

routes

fix(auth): OAuth login and password reset no longer mint a session past TOTP (BUG-3322) (#1699)

2026-09-30 22:50:45 -04:00

test

test(web): pin the two mechanisms that keep a settings reload from vouching for the previous identity's invitations (BUG-3237) (#1588)

2026-09-26 20:03:08 -04:00

app.css

fix(web): share pages render attachment refs as honest placeholders (BUG-2389) (#1135)

2026-08-17 05:19:25 -04:00

app.d.ts

fix(web): the split pane's Back returns to the previous item at the position it was read at (BUG-2182) (#1473)

2026-09-23 17:15:46 -04:00

app.html

feat(web): violet retheme — accent-primary alias, neutral scale, card tokens, radius, AA text (TASK-2291) (#1018)

2026-07-24 14:03:53 -04:00