54cbdad710
All checks were successful
Release / build-and-release (push) Successful in 25m4s
Milestone spec-refonte-rapports: reports hub + 4 sub-reports, per-domain hooks, contextual keyword editing, category zoom with recursive CTE. Dynamic pivot table removed. See CHANGELOG for the full list of changes. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
338 lines
17 KiB
Markdown
338 lines
17 KiB
Markdown
# Changelog
|
||
|
||
## [Unreleased]
|
||
|
||
## [0.8.0] - 2026-04-14
|
||
|
||
### Added
|
||
- **Reports hub**: `/reports` is now a hub surfacing a live highlights panel (current month + YTD net balance with sparklines, top movers vs. last month, top recent transactions) and four navigation cards to dedicated sub-reports (#69–#76)
|
||
- **Highlights report** (`/reports/highlights`): balance tiles with 12-month sparklines, sortable top movers table, diverging bar chart, recent transactions list with 30/60/90 day window toggle (#71)
|
||
- **Trends report** (`/reports/trends`): internal sub-view toggle between global flow (income vs. expenses) and by-category evolution, chart/table toggle on both (#72)
|
||
- **Compare report** (`/reports/compare`): tab bar for Month vs. Previous Month, Year vs. Previous Year, and Actual vs. Budget; diverging bar chart centered on zero for the first two modes (#73)
|
||
- **Category zoom** (`/reports/category`): single-category drill-down with donut chart of subcategory breakdown, monthly evolution area chart, and filterable transactions table (#74)
|
||
- **Contextual keyword editing**: right-click any transaction row to add its description as a categorization keyword; a preview dialog shows every transaction that would be recategorized (capped at 50, with an opt-in checkbox for N+) before you confirm. Available on the category zoom, the highlights list, and the main transactions page (#74, #75)
|
||
- **Bookmarkable period**: the reports period now lives in the URL (`?from=YYYY-MM-DD&to=YYYY-MM-DD`), so you can copy, paste, and share the link and keep the same state (#70)
|
||
- **View mode preference** (chart vs. table) is now persisted in `localStorage` per report section
|
||
|
||
### Changed
|
||
- The legacy monolithic `useReports` hook has been split into per-domain hooks (`useReportsPeriod`, `useHighlights`, `useTrends`, `useCompare`, `useCategoryZoom`) so every sub-report owns only the state it needs (#70)
|
||
- Context menu on reports (right-click) is now a generic `ContextMenu` shell reused by the existing chart menu and the new keyword dialog (#69)
|
||
|
||
### Removed
|
||
- The dynamic pivot table report was removed. Over 90% of its real usage was zooming into a single category, which is better served by the new Category Zoom report. Git history preserves the old implementation if it ever needs to come back (#69)
|
||
|
||
### Security
|
||
- New `AddKeywordDialog` enforces a 2–64 character length bound on user keywords to prevent ReDoS on large transaction sets (CWE-1333), uses parameterized `LIKE` queries for the preview (CWE-89), wraps its INSERT + per-transaction UPDATEs in an explicit BEGIN/COMMIT/ROLLBACK transaction (CWE-662), renders all untrusted descriptions as React children (CWE-79), and recategorizes only the rows the user explicitly checked — never retroactively. Keyword reassignment across categories requires an explicit confirmation step (#74)
|
||
- `getCategoryZoom` walks the category tree through a **bounded** recursive CTE (`WHERE depth < 5`), protecting against malformed `parent_id` cycles (CWE-835) (#74)
|
||
|
||
## [0.7.4] - 2026-04-14
|
||
|
||
### Changed
|
||
- OAuth tokens are now stored in the OS keychain (Credential Manager on Windows, Secret Service on Linux) instead of a plaintext JSON file. Existing users are migrated transparently on the next sign-in refresh; the old file is zeroed and removed. A "tokens stored in plaintext fallback" banner appears in Settings if the keychain is unavailable (#66, #78, #79, #81)
|
||
- Cached account info is now HMAC-signed with a keychain-stored key: writing `subscription_status` to `account.json` manually can no longer bypass the Premium gate (#80)
|
||
- PIN hashing migrated from SHA-256 to Argon2id for brute-force resistance (CWE-916). Existing SHA-256 PINs are verified transparently and rehashed on next successful unlock; new PINs use Argon2id (#54)
|
||
|
||
### Security
|
||
- Closed CWE-312 (cleartext storage of OAuth tokens), CWE-345 (missing integrity check on the subscription cache), and CWE-916 (weak PIN hashing). Legacy `tokens.json` and legacy unsigned `account.json` caches are rejected by the gating path until the next token refresh re-establishes a keychain-anchored trust (#66, #54)
|
||
|
||
## [0.7.3] - 2026-04-13
|
||
|
||
### Fixed
|
||
- Maximus Account sign-in: the deep-link callback now uses the canonical Tauri v2 `on_open_url` API, so the auth code is properly received by the running app instead of leaving the UI stuck in "loading" (#51, #65)
|
||
- OAuth callbacks containing an `error` parameter now surface the error to the UI instead of being silently ignored (#51)
|
||
|
||
## [0.7.2] - 2026-04-13
|
||
|
||
### Changed
|
||
- Auto-updates are temporarily open to the Free edition until the license server (issue #49) is live. Gating will be restored once paid activation works end-to-end (#48)
|
||
|
||
## [0.7.1] - 2026-04-13
|
||
|
||
### Fixed
|
||
- Maximus Account sign-in: the OAuth2 callback now correctly returns to the running app instead of launching a second instance and leaving the original one stuck in "loading" (#51, #65)
|
||
|
||
## [0.7.0] - 2026-04-11
|
||
|
||
### Added
|
||
- CI: new `check.yml` workflow runs `cargo check`/`cargo test` and the frontend build on every branch push and PR, catching errors before merge instead of waiting for the release tag (#60)
|
||
- License card in Settings page: shows the current edition (Free/Base/Premium), accepts a license key, and links to the purchase page (#47)
|
||
- Maximus Account card in Settings: optional sign-in via OAuth2 PKCE for Premium features (#51)
|
||
- Machine activation: activate/deactivate machines against the license server, view activated machines in the license card (#53)
|
||
- Daily subscription status check: automatically refreshes account info once per day at launch (#51)
|
||
|
||
### Changed
|
||
- Automatic updates are now gated behind the Base edition entitlement; the Free edition shows an upgrade hint instead of fetching updates (#48)
|
||
- Edition detection now considers Maximus Account subscription: Premium overrides Base when subscription is active (#51)
|
||
|
||
## [0.6.7] - 2026-03-29
|
||
|
||
### Changed
|
||
- Category Over Time report: removed hard-coded expense-only filter, added type selector defaulting to expense (#41)
|
||
- Category Over Time report: added type filter (expense/income/transfer) in the right filter panel (#41)
|
||
|
||
### Fixed
|
||
- Updated picomatch dependency (4.0.3 → 4.0.4) to fix HIGH severity vulnerabilities (#43)
|
||
|
||
## [0.6.6]
|
||
|
||
### Changed
|
||
- Budget table: previous year column now shows actual transactions instead of planned budget (#34)
|
||
- Refactored `buildPrevYearTotalMap` inline and simplified tests (#39)
|
||
|
||
### Fixed
|
||
- Changelog files synced automatically via Vite plugin, removed stale public/ copies (#37)
|
||
|
||
## [0.6.5]
|
||
|
||
### Added
|
||
- Dashboard: month dropdown selector for the Budget vs Actual section with last completed month as default (#31)
|
||
|
||
### Changed
|
||
- Reports & Dashboard: reduced font size of month dropdown for better visual balance (#31)
|
||
|
||
## [0.6.4]
|
||
|
||
### Added
|
||
- Budget table: previous year total column displayed as first data column for baseline reference (#16)
|
||
|
||
### Fixed
|
||
- Dashboard: level 4+ categories now appear under their parent instead of at the bottom of the section (#23)
|
||
- Dashboard: category hierarchy now supports arbitrary nesting depth (#23)
|
||
|
||
### Changed
|
||
- Dashboard: pie chart takes 1/3 width instead of 1/2, giving more space to the budget table (#23)
|
||
- Dashboard: pie chart labels now shown only on hover via tooltip instead of permanent legend (#23)
|
||
- Budget vs Actual: category column now stays fixed when scrolling horizontally (#29)
|
||
- Budget vs Actual: title changed to "Budget vs Réel pour le mois de [month]" with a dropdown month selector (#29)
|
||
- Budget vs Actual: default month is now the last completed month instead of current month (#29)
|
||
|
||
## [0.6.3]
|
||
|
||
### Added
|
||
- Dashboard: expenses over time stacked bar chart by category and month (#15)
|
||
- Dashboard: budget vs actual table for current month with variance in $ and % (#15)
|
||
- Budget table and Budget vs Actual report: section subtotal formatting with increasing visual weight (#14)
|
||
|
||
### Changed
|
||
- Dashboard: default period changed from "month" to "year to date" (#15)
|
||
- Dashboard: removed recent transactions section (#15)
|
||
- All report tables: grand total rows now use larger font (text-sm), bold weight, and thicker top border for better visual hierarchy (#14)
|
||
|
||
### Fixed
|
||
- Category over time report: all categories now displayed (limit increased from 8 to 50) (#13)
|
||
- Category bar chart: Y-axis labels now use foreground color instead of muted gray (#13)
|
||
- Category over time chart: legend text now uses foreground color instead of inheriting category color (#13)
|
||
|
||
## [0.6.2]
|
||
|
||
### Added
|
||
- Budget table: section subtotals for expenses, income, and transfers displayed after each group (#11)
|
||
- Budget vs Actual report: section subtotals with actual, planned, variation ($) and variation (%) per type (#11)
|
||
|
||
### Fixed
|
||
- Category page: detail panel now stays visible when scrolling through a long category list (#12)
|
||
|
||
## [0.6.1]
|
||
|
||
### Added
|
||
- Changelog page: full version history accessible from Settings at any time
|
||
- Bilingual changelog: release notes displayed in the user's selected language (EN/FR)
|
||
|
||
### Fixed
|
||
- Chart label visibility: amount labels on stacked bar charts now use black text with white outline for better contrast (#8)
|
||
- Budget table: editable cells now show hover background, pointer cursor, and tooltip hint for clearer affordance (#9)
|
||
|
||
## [0.6.0]
|
||
|
||
### Added
|
||
- Reports: toggle between table and chart view for Trends, By Category, and Over Time tabs
|
||
- Reports: "Show amounts" toggle displays values directly on chart bars and area curves
|
||
- Reports: filter panel with category checkboxes (search, select all/none) and source dropdown
|
||
- Reports: source filter applies at SQL level for accurate filtered totals
|
||
- Reports: sticky table headers on all report tables (Dynamic Report, Budget vs Actual)
|
||
- Reports: interactive hover — dimmed non-hovered bars, tooltip filtered to hovered category
|
||
- Reports: legend hover highlights category across all months (Over Time chart)
|
||
|
||
### Fixed
|
||
- Transaction table: comment icon now turns orange (like split icon) when a note is present (#7)
|
||
|
||
## [0.5.0]
|
||
|
||
### Added
|
||
- Error boundary catches React crashes and displays an error page instead of a white screen
|
||
- Startup timeout (10s) on database connection — shows error page instead of infinite spinner
|
||
- Error page with "Refresh", "Check for updates", and contact/issue links
|
||
- Log viewer in settings page — captures console output, filterable by level, copyable, persists across refresh
|
||
- GPL-3.0 license — project is now open source
|
||
|
||
### Changed
|
||
- Report detail modal: sortable columns — click headers to sort by date, description, or amount (#1)
|
||
- Report detail modal: toggle to show/hide amounts column (#3)
|
||
- Budget table: column headers stay fixed when scrolling vertically (#2)
|
||
|
||
### Fixed
|
||
- Auto-updater on Linux: `latest.json` version field no longer has `v` prefix, package registry upload is more robust
|
||
- Startup retry: DB connection retries up to 3 times before showing error page (fixes first-launch failure on Windows)
|
||
- Migration checksum mismatch: automatically repairs stale migration 1 checksum on startup
|
||
|
||
## [0.4.4]
|
||
|
||
### Fixed
|
||
- Linux binary now compatible with glibc 2.35+ (Ubuntu 22.04 / Pop!_OS) — CI builds in Ubuntu 22.04 container
|
||
|
||
## [0.4.3]
|
||
|
||
### Fixed
|
||
- Auto-updater endpoint now uses Forgejo package registry for stable URL
|
||
- Linux updater signatures (.AppImage.sig) now correctly collected in CI
|
||
- All platform signatures (.deb.sig, .rpm.sig) now included in release assets
|
||
|
||
## [0.4.2]
|
||
|
||
### Changed
|
||
- Auto-updater now points to self-hosted Forgejo instance
|
||
- Windows builds now cross-compiled via cargo-xwin
|
||
|
||
## [0.4.1]
|
||
|
||
### Fixed
|
||
- App stuck on infinite spinner after updating from v0.3.x (migration checksum mismatch on seed_categories.sql)
|
||
- DB connection errors now logged to console instead of silently failing
|
||
|
||
## [0.4.0]
|
||
|
||
### Added
|
||
- Categories: support for 3 levels of hierarchy (e.g., Dépenses récurrentes → Assurances → Assurance-auto)
|
||
- Dynamic Report: new "Category (Level 3)" pivot field
|
||
- Budget: intermediate subtotals and 3-level indentation for nested categories
|
||
- Categories: automatic `is_inputable` management when creating/deleting subcategories
|
||
- Categories: depth validation prevents creating a 4th level
|
||
- Seed data: Assurances split into Assurance-auto, Assurance-habitation, Assurance-vie
|
||
|
||
### Fixed
|
||
- Auto-categorization: keywords starting/ending with special characters (`[`, `]`, `(`, `)`, `-`, etc.) now match correctly
|
||
- Auto-categorization: pre-compile regex patterns for better batch performance
|
||
|
||
## [0.3.11]
|
||
|
||
### Added
|
||
- Dynamic Report: support multiple column dimensions (composite column keys)
|
||
|
||
### Fixed
|
||
- Dynamic Report: no longer affected by global page date filters — uses only its own panel filters
|
||
|
||
## [0.3.10]
|
||
|
||
### Added
|
||
- Dynamic Report: fields can now be used in multiple zones simultaneously (rows + filters, columns + filters)
|
||
- Dynamic Report: right-click on a filter value to exclude it (shown with strikethrough in red)
|
||
- "This year" period option in reports and dashboard (Jan 1 to today)
|
||
|
||
## [0.3.9]
|
||
|
||
### Added
|
||
- Dynamic Report (pivot table): compose custom reports by assigning dimensions to rows, columns, filters and measures to values
|
||
- Delete keywords from the "All Keywords" view
|
||
|
||
## [0.3.8]
|
||
|
||
### Added
|
||
- Custom date range picker for reports and dashboard
|
||
- Toggle to position subtotals above or below detail rows
|
||
- Display release notes from CHANGELOG in GitHub releases and in-app updater
|
||
|
||
## [0.3.7]
|
||
|
||
### Fixes
|
||
- Remove MSI bundle to prevent updater install path conflict
|
||
- Change Windows updater installMode to basicUi
|
||
- Improve split indicator visibility and adjustments layout
|
||
|
||
## 0.3.2
|
||
|
||
### New Features
|
||
- **Linux support**: Add Linux build (`.deb`, `.rpm`, `.AppImage`) to release workflow
|
||
- **Transaction splits on Adjustments page**: View transaction split adjustments in a dedicated section on the Adjustments page
|
||
|
||
### Fixes
|
||
- Fix CSV auto-detect edge cases
|
||
- Remove accent from productName for Linux `.deb` compatibility
|
||
|
||
## 0.3.1
|
||
|
||
### Fixes
|
||
- Always show profile switcher in sidebar (#2)
|
||
|
||
## 0.3.0
|
||
|
||
### New Features
|
||
- **Multiple profiles**: Create multiple profiles with separate databases, custom names, and colors
|
||
- **PIN protection**: Protect profiles with an optional numeric PIN
|
||
- **Profile switcher**: Quick profile switching from the sidebar
|
||
- **Drag-and-drop categories**: Reorder categories or change parent via drag-and-drop in the category tree
|
||
- **Transaction splits**: Split a transaction across multiple categories with adjustable amounts
|
||
|
||
## 0.2.10
|
||
|
||
### New Features
|
||
- **Period quick-select**: Add quick period filter buttons (This month, Last month, etc.) on the Transactions page
|
||
- **Budget vs Actual report**: Monthly and year-to-date comparison table in Reports
|
||
- **Parent category subtotals**: Budget page shows aggregated subtotals for parent categories
|
||
- **User guide**: Complete documentation page accessible from Settings, printable to PDF
|
||
|
||
### Improvements
|
||
- Persist template selection and add Update template button
|
||
- Don't pre-select already-imported files when entering source config
|
||
- Make settings data imports visible in Import History
|
||
- Replace per-template delete buttons with single delete on selection
|
||
- Replace refresh icon with save icon on update template button
|
||
- Add sign convention to budget page
|
||
|
||
## 0.2.9
|
||
|
||
### Fixes
|
||
- Allow duplicate-content files with different names (#1)
|
||
|
||
## 0.2.8
|
||
|
||
### New Features
|
||
- **Data export/import**: Export and import your data (transactions, categories, or both) with optional AES-256-GCM encryption (#3)
|
||
|
||
### Fixes
|
||
- Cross-file duplicate detection and per-file import tracking
|
||
|
||
## 0.2.5
|
||
|
||
### New Features
|
||
- **Import config templates**: Save and load import source configurations as reusable templates
|
||
- **12-month budget grid**: Full year budget view with monthly cells and annual totals
|
||
|
||
### Fixes
|
||
- Budget and category fixes
|
||
- Migration checksum issue (schema.sql must not be modified after initial release)
|
||
|
||
## 0.2.3
|
||
|
||
### New Features
|
||
- **Chart patterns**: Added SVG fill patterns (diagonal lines, dots, crosshatch, etc.) to differentiate categories in bar charts, pie chart, and stacked bar charts beyond just color
|
||
- **Chart context menu**: Right-click any category in a chart to hide it or view its transactions in a detail popup
|
||
- **Hidden categories**: Hidden categories appear as dismissible chips above charts with a "Show all" button to restore them
|
||
- **Transaction detail modal**: View all transactions composing a category's total directly from any chart
|
||
- **Import preview popup**: The data preview is now a popup modal instead of a separate wizard step, allowing quick inspection without leaving the configuration page
|
||
- **Direct duplicate check**: New "Check Duplicates" button on the import configuration page skips directly to duplicate validation without requiring a preview first
|
||
|
||
### Improvements
|
||
- Import wizard flow simplified: source-config → duplicate-check (preview is optional via popup)
|
||
- Duplicate-check back button now returns to source configuration instead of the removed preview step
|
||
- Added `categoryIds` map to `CategoryOverTimeData` for proper category resolution in the over-time chart
|
||
|
||
## 0.2.2
|
||
|
||
- Bump version
|
||
|
||
## 0.2.1
|
||
|
||
- Add "All Keywords" view on Categories page
|
||
- Add dark mode with warm gray palette
|
||
- Fix orphan categories, persist has_header for imports, add re-initialize
|
||
- Add Budget and Adjustments pages
|