Releases: puemos/craftplan
Release list
v0.7.0
This release adds end-to-end food-production traceability from supplier receipt to customer destination.
- Receive purchase orders into one or more supplier lots, including partial deliveries, quantities, and expiry dates.
- Trace an ingredient lot forward into finished batches and customer orders, or trace a finished batch backward to every ingredient source.
- Run a focused recall workflow with affected-scope totals, lot hold and release controls, CSV export, and printable records.
- Print A5 or compact finished-batch labels from frozen production data, with batch barcodes and setup warnings for missing label information.
- Preserve historical ingredient allocation and product-label details even after recipes or catalog data change.
- Add a dedicated Traceability & Recalls guide with responsive product screenshots.
v0.6.4
This release completes the invited-user setup flow reported in #36.
- Invited staff and admins now set their password as part of accepting the invitation.
- Setting that password confirms the account and signs the user in.
- Confirmation links sent by v0.6.3 remain supported and now continue into password setup.
- Authentication pages use local images and styles, so the existing Content Security Policy no longer blocks their resources.
- New sessions safely fall back to UTC if the browser timezone cookie is missing or invalid.
After setup, invited users can sign out, sign back in with their chosen password, and load the app normally.
v0.6.3
What’s Changed
Authentication
- Fixed invited staff and admin account confirmation links returning
FORBIDDEN. Confirmation links now open the CSRF-protected interactive confirmation page, and existing links remain compatible. Thanks to @noromamai for reporting this issue.
Full Changelog: v0.6.2...v0.6.3
v0.6.2
What's Changed
Security
- Prevented public password registration requests from assigning privileged roles. Public accounts are now always created as customers, while initial setup uses a dedicated server-controlled administrator action. Thanks to Michael Holmquist (mtholmquist) for responsibly reporting this issue.
Build and maintenance
- Accelerated multi-platform Docker releases with native AMD64 and ARM64 builds, persistent caches, and improved Docker layer reuse.
- Removed the discontinued hosted demo infrastructure and stale documentation.
Full Changelog: v0.6.1...v0.6.2
v0.6.1
What changed
- Fixed SMTP STARTTLS delivery on OTP 28 by configuring trusted system CAs, hostname verification, and support for normal certificate chains.
Full Changelog: v0.6.0...v0.6.1
v0.6.0
What's Changed
- Persist per-lot unit cost when receiving inventory, so historical material costs remain queryable.
- Bound the orders index with date-window loading, pagination, and view-aware calendar queries for more predictable performance.
Full Changelog: v0.5.1...v0.6.0
v0.5.1
Security patch: restrict Settings JSON:API reads to authorized staff and administrators, and prevent SMTP and email-provider credentials from being serialized in API responses. Also ensures JWT-authenticated API users are applied to Ash authorization policies.
v0.5.0
What's Changed
- Standardized EU nutrition declarations.
- Fixed decimal truncation and stock display precision.
- Allowed ampersands in display names and fixed seed cleanup/release checks.
Full Changelog: v0.4.1...v0.5.0
v0.4.1
What's Changed
Fixes
- Add SELinux relabel flags to PostgreSQL and MinIO bind mounts in
docker-compose.dev.yml, fixing local dev container startup on SELinux-enabled hosts. (#19, @serverplumber)
Full Changelog: v0.4.0...v0.4.1
v0.4.0
What's Changed
Features
- Add member management UI for admins (#16)
Bug Fixes
- Fix: Support UTF-8 input and prevent crash during IME composition (#14)
- Open detail modal on week view item click (#18)
- Resolve all 51 dependency vulnerabilities (#17)
- Add missing new customer button and fix handle_info pattern (#15)
Refactoring
- DRY cleanup — extract components, shared batch helpers, consolidate capacity logic
Full Changelog: v0.3.7...v0.4.0