Timetracker Updates & Release Notes

• chore: bump version to 5.18.0 and update docs (Dries Peeters)
• Fix Android Chromium freeze from Flatpickr mobile-mode init loop (#771). (Dries Peeters)
• Fix instance audit 500s, API edge cases, and smoke-test reliability. (Dries Peeters)
• Add TimeTracker footer watermark to exported PDFs. (Dries Peeters)
• feat(observability): add request IDs, hardening metrics, and Sentry hooks (Dries Peeters)
• ci: add Bandit and pip-audit gates and raise the coverage floor (Dries Peeters)
• chore(ops): harden readiness probes, migrations, and production defaults (Dries Peeters)
• fix(data): harden invoice numbering, timers, and scheduler leadership (Dries Peeters)
• fix(security): harden redirects, SSRF, session rollback, and HTTP timeouts (Dries Peeters)
• chore(deps): bump pyjwt (dependabot[bot])
• chore(deps-dev): bump electron (dependabot[bot])
• docs: restructure README for conversion and add in-app star prompts (Dries Peeters)

📦 Build Status

Desktop Applications

✅ Windows build: Success ✅ Linux build: Success ✅ macOS build: Success

Mobile Applications

✅ Android build: Success ✅ iOS build: Success

• chore: bump version to 5.16.0 and update docs (Dries Peeters)
• feat(payroll): add Gusto and ADP connectors with sync logging (Dries Peeters)
• feat(crm): sync Gmail and Outlook threads into clients, leads, deals (Dries Peeters)
• feat(integrations): add Sage Business Cloud and DATEV accounting (Dries Peeters)
• feat(api): add client portal REST endpoints under /api/v1/portal (Dries Peeters)
• feat(portal): add client–team messaging hub (Dries Peeters)
• feat(workflows): add visual builder for trigger/condition/action graphs (Dries Peeters)
• feat(invoices): make create and edit forms mobile-friendly (Dries Peeters)
• feat(portal): resolve custom domains and brand portal login (Dries Peeters)
• feat: add ship-week and sprint product gaps (Dries Peeters)
• feat(support): add milestone celebration modal and clearer key CTA copy (Dries Peeters)
• chore(deps-dev): bump js-yaml (dependabot[bot])

📦 Build Status

Desktop Applications

✅ Windows build: Success ✅ Linux build: Success ✅ macOS build: Success

Mobile Applications

✅ Android build: Success ✅ iOS build: Success

• chore: release 5.15.0 — timer override, Pomodoro, expense lifecycle, payroll templates, geofencing, gamification, calendar DnD, shareable reports, recurring costs (Dries Peeters)
• fix(dashboard): use correct timer_page endpoint for Open timer link (Dries Peeters)
• fix(migrations): use boolean literals for PostgreSQL server defaults (Dries Peeters)
• feat(timer): allow overriding start time when starting or while running (#760) (Dries Peeters)
• fix(inventory): correct PO line stock IDs and restore edit form (#759) (Dries Peeters)
• feat(mobile): extend API client for expenses, reports, and geofencing (Dries Peeters)
• feat: register gap features and surface them on the dashboard (Dries Peeters)
• feat(api): expose focus, recurring-cost, and shared-report endpoints (Dries Peeters)
• feat(admin): add payroll template and geofence management pages (Dries Peeters)
• feat(integrations): add ActivityWatch rules/inbox and sync-error routes (Dries Peeters)
• feat(attendance): add geofencing policies for workday clock-in (Dries Peeters)
• feat(reports): add public tokenized shareable report links (Dries Peeters)
• feat(projects): add recurring project cost engine (Dries Peeters)
• feat(calendar): enable drag-and-drop move and resize for events (Dries Peeters)
• feat(gamification): expose badges, leaderboards, and award hooks (Dries Peeters)
• feat(activitywatch): add rules, merge filters, and review inbox (Dries Peeters) …

• chore: release 5.14.1 — Docker base image fix (Dries Peeters)
• fix(docker): upgrade base images to fix expired Bullseye security repo (Dries Peeters)
• chore: release 5.14.0 — OrcaRouter AI provider (Dries Peeters)
• feat(ai): add OrcaRouter as a named hosted AI provider (Dries Peeters)
• chore(release): bump version to 5.13.5 and update docs (Dries Peeters)
• fix(timezone): accept plain date in local_date formatting (Dries Peeters)
• fix(manual-entry): restore single-client lock by dropping force_selectable (MacJediWizard)
• fix(idle): exclude paused timers from the idle auto-stop sweep (MacJediWizard)

📦 Build Status

Desktop Applications

✅ Windows build: Success ✅ Linux build: Success ✅ macOS build: Success

Mobile Applications

✅ Android build: Success ✅ iOS build: Success

• chore(release): bump version to 5.13.4 and update docs (Dries Peeters)
• docs(release): fold post-merge fixes into 5.13.3 notes (Dries Peeters)
• chore(deps-dev): bump the npm_and_yarn group across 1 directory with 2 updates (dependabot[bot])
• docs(changelog): unreleased entries for 746 offline fixes, onboarding tour fix, idle needs-review flow (Giorgio)
• feat(idle): port needs-review flow for unanswered idle timers from mobile-client-v2 (Giorgio)
• fix(web): graceful frontend handling when backend goes down (Giorgio)
• chore(deps): bump fast-uri (dependabot[bot])
• chore(release): bump version to 5.13.3 and update docs (Dries Peeters)
• fix(idle): enforce Still working? timeout across clients (#722) (Dries Peeters)
• fix(pwa): stop SW fake 503s after tab idle (#746) (Dries Peeters)
• feat(tasks): show tracked time on list and detail views (#745) (Dries Peeters)
• chore(ci): fix pre-existing flake8 W391 and missing script nonces on main (Giorgio)
• fix(timeformat): make datetime-local inputs honor the chosen time format (Giorgio)

📦 Build Status

Desktop Applications

✅ Windows build: Success ✅ Linux build: Success ✅ macOS build: Success

Mobile Applications

✅ Android build: Success ✅ iOS build: Success

• docs(release): fold post-merge fixes into 5.13.3 notes (Dries Peeters)
• chore(deps-dev): bump the npm_and_yarn group across 1 directory with 2 updates (dependabot[bot])
• docs(changelog): unreleased entries for 746 offline fixes, onboarding tour fix, idle needs-review flow (Giorgio)
• feat(idle): port needs-review flow for unanswered idle timers from mobile-client-v2 (Giorgio)
• fix(web): graceful frontend handling when backend goes down (Giorgio)
• chore(deps): bump fast-uri (dependabot[bot])
• chore(release): bump version to 5.13.3 and update docs (Dries Peeters)
• fix(idle): enforce Still working? timeout across clients (#722) (Dries Peeters)
• fix(pwa): stop SW fake 503s after tab idle (#746) (Dries Peeters)
• feat(tasks): show tracked time on list and detail views (#745) (Dries Peeters)
• chore(ci): fix pre-existing flake8 W391 and missing script nonces on main (Giorgio)
• fix(timeformat): make datetime-local inputs honor the chosen time format (Giorgio)

📦 Build Status

Desktop Applications

✅ Windows build: Success ✅ Linux build: Success ✅ macOS build: Success

Mobile Applications

✅ Android build: Success ✅ iOS build: Success

• chore(release): bump version to 5.13.2 and update docs (Dries Peeters)
• feat(integrations): export all connectors and add Linear setup wizard (Dries Peeters)
• fix(android): sign release APKs with a stable CI keystore (Dries Peeters)
• fix(web): manual entry cascading pickers, inline create flow, dark-mode comboboxes (#728) (Giorgio)
• docs(changelog): mention project-first selection with client auto-fill (Giorgio)
• feat(mobile): allow project-first selection with client auto-fill (Giorgio)
• docs(changelog): document mobile start timer fixes; test last_used_at parsing (Giorgio)
• fix(mobile): stop/pause buttons flashing disabled while timer polls (Giorgio)
• fix(mobile): unwrap nested payload when creating client/project/task (Giorgio)
• fix(mobile): crash when opening start timer sheet (Giorgio)
• fix(mobile): unify start timer flow with cascading pickers and inline creation (Giorgio)

📦 Build Status

Desktop Applications

✅ Windows build: Success ✅ Linux build: Success ✅ macOS build: Success

Mobile Applications

✅ Android build: Success ✅ iOS build: Success

• chore(release): bump version to 5.13.1 and update docs (Dries Peeters)
• Restore extension Create project client guard after last-used sort. (Dries Peeters)
• Sort project lists by most recently used first. (Dries Peeters)
• Fix Issue #728 combobox blur reset and extension create-project guard. (Dries Peeters)
• Fix idle timeout recording 0 minutes and missing Still working? prompts (#722). (Dries Peeters)
• Fix Issue #728 leftover picker bugs: no auto-selected project, require a client to create one, and translate Create labels. (Dries Peeters)
• Attach a Chrome extension zip to every GitHub release. (Dries Peeters)

📦 Build Status

Desktop Applications

✅ Windows build: Success ✅ Linux build: Success ✅ macOS build: Success

Mobile Applications

✅ Android build: Success ✅ iOS build: Success

• chore(release): bump version to 5.13.0 and update docs (Dries Peeters)
• Improve UX across dashboard, lists, timer bar, and productivity views. (Dries Peeters)
• Add backend support for dashboard alerts, timer switch, and productivity breakdown. (Dries Peeters)
• Fix productivity heatmap and empty_state template errors. (Dries Peeters)
• Resolve invoice tax rate and currency from project/client settings. (Dries Peeters)
• Declutter navigation and improve mobile More drawer. (Dries Peeters)
• Enhance recurring tasks list with filters, toggles, and run-now. (Dries Peeters)
• Add dashboard quick log time and tasks due today widgets. (Dries Peeters)
• Improve floating timer bar and idle-stop UX. (Dries Peeters)
• fix: log swallowed errors and surface user feedback where actionable (Dries Peeters)
• feat(timer): warn on long-running entries and show workday progress (Dries Peeters)
• feat(dashboard): add daily progress widget and quick-start timer strip (Dries Peeters)
• feat(mobile): expand bottom nav More drawer with key destinations (Dries Peeters)
• chore(static): add missing favicon, apple touch icon, and OG image (Dries Peeters)
• fix(portal): add missing client portal customization admin template (Dries Peeters)
• fix(recurring-tasks): complete CRUD flow and add sidebar navigation (Dries Peeters)
• Improve support incentives with Supporter identity and smarter prompts. (Dries Peeters)
• fix(timer): keep heartbeats alive and stop at idle boundary (#736) (Dries Peeters) …

• chore(release): bump version to 5.12.0 (Dries Peeters)
• feat(projects): add project health dashboard and API (Dries Peeters)
• feat(team): add weekly resource scheduling swimlane view (Dries Peeters)
• feat(quotes): support digital signatures in the client portal (Dries Peeters)
• feat(expenses): add manager approval queue with pending badge (Dries Peeters)
• feat(reports): add billable utilization report and dashboard widget (Dries Peeters)
• feat(projects): add milestones for project checkpoints (Dries Peeters)
• feat(tasks): add task dependencies with Gantt links (Dries Peeters)
• fix(dashboard): restore Start Timer modal click handlers (Dries Peeters)
• fix(approvals): normalize PostgreSQL approvalstatus enum case (Dries Peeters)

📦 Build Status

Desktop Applications

✅ Windows build: Success ✅ Linux build: Success ✅ macOS build: Success

Mobile Applications

✅ Android build: Success ✅ iOS build: Success

• chore(release): bump version to 5.11.5 (Dries Peeters)
• docs(changelog): record post-fix audit remediation (Dries Peeters)
• chore(extension): sync version to 5.11.4 (Dries Peeters)
• feat(ui): migrate remaining timer pickers to searchable combobox (Dries Peeters)
• feat(clients): client-only timers on extension and mobile (Dries Peeters)
• feat(api): support client-only timers on timer start (Dries Peeters)
• fix(rounding): apply boundary rounding on duration-override paths (Dries Peeters)
• fix(extension): react to server-side idle notifications (Dries Peeters)
• fix(desktop): valid manual entry payload and client-only timers (Dries Peeters)
• fix(templates): render previously dead extra_head blocks (Dries Peeters)
• fix(email): absolutize client notification links and expose APP_BASE_URL (Dries Peeters)
• fix(quotes): restore approval and client-portal quote emails (Dries Peeters)
• fix(kiosk): compute duration when stopping a timer (Dries Peeters)
• fix(email): build absolute links in scheduled jobs without SERVER_NAME (#730) (Dries Peeters)
• fix(timer): restore edit inline-create and unify client→project→task pickers (#728) (Dries Peeters)
• feat(settings): add enforceable global time rounding policy (#725) (Dries Peeters)
• fix(mobile): prevent Android Timer crash under R8 (#731) (Dries Peeters)

📦 Build Status

Desktop Applications

✅ Windows build: Success ✅ Linux build: Success ✅ macOS build: Success

Mobile Applications

✅ Android build: Success …

• chore(release): bump version to 5.11.4 (Dries Peeters)
• fix(timer): broadcast idle prompts beyond web push (#722) (Dries Peeters)
• fix(api): stop joinedload on dynamic Client.projects (#716) (Dries Peeters)
• fix(web): quiet background polls so idle tabs do not toast 503 (#703) (Dries Peeters)
• fix(extension): dedupe tasks and avoid concurrent picker races (#700) (Dries Peeters)
• feat(timer): searchable client/project combobox with inline create (#728) (Dries Peeters)
• fix(timer): add boundary rounding, min duration, and admin fallback (#725) (Dries Peeters)
• fix(workday): preserve submit button values before loading-state disable (#709) (Dries Peeters)
• fix(timer): allow client-only edits and inline client/project create (#728) (Dries Peeters)
• fix(timer): enforce idle timeout with heartbeats across all clients (#722) (Dries Peeters)
• fix(timer): apply per-user rounding on remaining duration write paths (#725) (Dries Peeters)

📦 Build Status

Desktop Applications

✅ Windows build: Success ✅ Linux build: Success ✅ macOS build: Success

Mobile Applications

✅ Android build: Success ✅ iOS build: Success

• chore(release): bump version to 5.11.3 (Dries Peeters)
• fix(timer): use db.session.get for manual-entry rounding and cover #700/#725 (Dries Peeters)
• chore(deps-dev): bump js-yaml (dependabot[bot])
• fix(extension): harden Chrome timer popup and ship packaging (#700) (Dries Peeters)
• test(workday): cover leave_room handlers for Socket.IO (#709) (Dries Peeters)
• fix(timer): apply per-user rounding to manual time entries (#725) (Dries Peeters)
• fix(security): enforce access checks on attachment downloads (IDOR) (Dries Peeters)

📦 Build Status

Desktop Applications

✅ Windows build: Success ✅ Linux build: Success ✅ macOS build: Success

Mobile Applications

✅ Android build: Success ✅ iOS build: Success

• chore(release): bump version to 5.11.1 and update docs (Dries Peeters)
• chore(release): bump version to 5.11.0 and update docs (Dries Peeters)
• feat(attendance): fill auto-break deficit and flag system breaks (Dries Peeters)
• feat(attendance): auto-deduct configurable break on clock-out (Dries Peeters)
• feat(mobile): show persistent notification while timer is running (#714) (Dries Peeters)
• test(workday): stabilize attendance correction route tests (Dries Peeters)
• fix(api): stop joinedload on dynamic Client.projects (#716) (Dries Peeters)
• feat(peppol): embed the invoice PDF in the UBL as an attachment (BG-24/BT-125) (ThingThingHub)
• fix(workday): clip overnight totals and prompt for forgotten clock-outs (Dries Peeters)
• fix(extension): restore task picker for existing tasks (#700) (Dries Peeters)
• chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates (dependabot[bot])
• feat(peppol): verify access-point delivery status after send (ThingThingHub)
• fix(peppol): make generated UBL XSD-valid and BIS Billing 3.0 compliant (ThingThingHub)
• chore(deps): bump cryptography in the pip group across 1 directory (dependabot[bot])
• fix(peppol-bridge): scheme-prefix documentType/processType for Peppyrus (Jitser Sevenant)
• fix(api): restore client update, expose Peppol send, map invoice buyer_reference/issue_date + recompute totals (Jitser Sevenant)
• fix(docs): add missing Tasks and Clients endpoints to OpenAPI spec (Rafa Couto) …

• chore(release): bump version to 5.10.0 and update documentation (evilguy4000)
• feat(timer): let admins book time entries for other users (#701) (evilguy4000)
• fix(ui): restore sidebar expand, theme icons, and Ctrl+K (evilguy4000)
• feat(frontend): self-host all third-party assets and add a JS build pipeline (evilguy4000)
• Add Chromium timer extension for quick start/stop (#700). (evilguy4000)
• fix(ui): keep sidebar expand control visible when collapsed (#699) (evilguy4000)
• fix: restore connection after tray hide and tab idle (#702, #703) (evilguy4000)
• fix(ui): honor 24h time format preference in pickers and JS (#704) (evilguy4000)
• Fix Socket.IO/Flask session crash and make license verify diagnosable. (evilguy4000)

📦 Build Status

Desktop Applications

✅ Windows build: Success ✅ Linux build: Success ✅ macOS build: Success

Mobile Applications

✅ Android build: Success ✅ iOS build: Success