v5.28.7 October Content

API

• Content: Mystery items, Enchanted Armoire, etc. for October 2024 (@phillipthelen)

Client

• Fix: Use native JavaScript date functions to provide best-guess time zone labeling in Fall Gem Sale text (@SabreCat)

v5.28.6 Group Plan workflow updates

API

• Chore: Locale files updated (@weblate)

Client

• Refactor: Group Plans landing pages unified to a single component with touched-up design (@SabreCat)
• Chore: Hide Amazon Payments buttons (@SabreCat)
• Fix: Show correct difficulty on hover for quest scrolls in a prior quest's drops info (@CuriousMagpie)
• Fix: Show site footer on static pages in test environments where "time travel" debug controls are enabled (@SabreCat)

v5.28.5 Redirect Sanitization Fix

Client

• Fix: Replace misused DOMPurify regex with a bespoke sanitization function for redirectTo parameters, allowing only TRUSTED_DOMAINS links and same domain redirects (@SabreCat with assistance from @Kwstubbs)

API

• Chore: Locale files updated (@weblate)

v5.28.4 Time Zone Fix

Client

• Fix: Remove moment-timezone library that was causing Dailies to be incorrectly scheduled in GMT+X timezones (@SabreCat)

v5.28.3 Subscriber Drops Hotfix

API

• Fix: Provide purchased.plan to task scoring again, to reenable expanded item drops for subscribers (@phillipthelen)
• Chore: Locale files updated (@weblate)

v5.28.2 Event Calendar Revisions

API

• Fix: Events calendar revised and updated (@CuriousMagpie) including adjustments to Fall and Spooky Gem Sales (@SabreCat)
• Fix: Handle subpaths in auth middleware for userFields requests -- addresses errors coming from some Google Scripts (@phillipthelen)
• Chore: Locale files updated (@weblate)

Repo

• Feature: New Node command npm start:simple that runs server without nodemon, necessary in some dev environments (@negue)
• Feature: Post build hook to send a message to Slack saying an environment has deployed (@phillipthelen)
• Fix: Remove hardcoded index references from some tests that were causing spurious failures based on presence or absence of NEW_MYSTERY_ITEMS notification (@phillipthelen)
• Chore: Security updates to webpack and micromatch packages (@dependabot)

v5.28.1 Fixes and Admin Panel

API

• Chore: Locale files updated (@weblate)

Client

• Feature: Beautify admin panel and add more editable fields (@phillipthelen)
• Fix: Await Orb of Rebirth API round trip before reloading the page (@CuriousMagpie)

v5.28.0 September 2024 Content

API

• Content: Upcoming releases for September 2024 (@CuriousMagpie)
• Fix: Prune __v and include id field even during API requests for completed To Do's (@SabreCat)
• Test: Correct an erroneously failing test related to premium hatching potion releases (@phillipthelen)

Client

• Chore: Updated axios (@dependabot)

v5.27.4 New Debug Route, Performance Fixes

API

• Feature: New route /debug/boss-rage, used to increment party Rage meter for testing (@CuriousMagpie)
• Performance: Request fewer fields when fetching user document, for better db roundtrip times (@phillipthelen)
• Chore: Locale files updated (@weblate)

Client

• Feature: Implementation of Rage increment button in debug tray (@CuriousMagpie)

v5.27.3 Performance Fixes and More

API

• Fix: Correct time zone calculation for turnover of item availability at the start of the month (@phillipthelen)
• Fix: Deprecate, and migrate to clean up, unused GROUP_INVITE_ACCEPTED notification type (@SabreCat)
• Fix: Make account creation more costly on rate limiting (@phillipthelen)
• Chore: Locale files updated (@weblate)

Client

• Performance: Don't load unnecessary data for non-logged-in static page visits (@phillipthelen)
• Performance: Trim unused JS from client bundles (@phillipthelen)
• Performance: Don't reload browser-script if client already has the appropriate language for the user's preference (@phillipthelen)
• Performance: Load static audio files from AWS asset storage instead of over Express server (@phillipthelen)