BillTracker/client/lib/version.js

export const APP_VERSION = '0.22.3';
export const APP_NAME    = 'BillTracker';

export const RELEASE_NOTES = {
  version: '0.22.3',
  date: '2026-05-10',
  highlights: [
    { icon: '🐛', title: 'Skip First-Login for Seeded Users', desc: 'ENV-seeded users (admin, regular) no longer see the first-login flow on container restarts' },
    { icon: '🔒', title: 'Session Rotation on Password Change', desc: 'All other sessions are invalidated when you change your password. Current session gets a new ID.' },
    { icon: '🚪', title: 'Logout All Devices', desc: 'New /api/auth/logout-all endpoint lets you sign out from every device at once.' },
  ],
};
v0.22.3: fix ENV-seeded users skip first-login flow, add audit logging - setup/firstRun.js: reset first_login=0, must_change_password=0 on update - server.js: reset flags for existing regular users + add logAudit - db/database.js: fix must_change_password=0 in init code (was 1) - Add logAudit calls for seed.flag_reset events - database.js uses console.log for init-time resets (avoids circular dep) - Hudson audit: 6/6 PASS after audit logging fix 2026-05-10 04:24:51 -05:00			`export const APP_VERSION = '0.22.3';`
initial commit 2026-05-03 19:51:57 -05:00			`export const APP_NAME = 'BillTracker';`

			`export const RELEASE_NOTES = {`
v0.22.3: fix ENV-seeded users skip first-login flow, add audit logging - setup/firstRun.js: reset first_login=0, must_change_password=0 on update - server.js: reset flags for existing regular users + add logAudit - db/database.js: fix must_change_password=0 in init code (was 1) - Add logAudit calls for seed.flag_reset events - database.js uses console.log for init-time resets (avoids circular dep) - Hudson audit: 6/6 PASS after audit logging fix 2026-05-10 04:24:51 -05:00			`version: '0.22.3',`
v0.20.4: Explicit migration dependency management - Added dependsOn field to all 17 versioned migrations - Added validateMigrationDependencies() function for dependency validation - Migrations with unmet dependencies are skipped with error log (no crash) - Dependency satisfaction logged: [migration] vX depends on [vY] — satisfied - appliedVersions Set tracks newly applied migrations for subsequent checks - Hudson security audit: 7/7 PASS 2026-05-09 23:24:51 -05:00			`date: '2026-05-10',`
initial commit 2026-05-03 19:51:57 -05:00			`highlights: [`
v0.22.3: fix ENV-seeded users skip first-login flow, add audit logging - setup/firstRun.js: reset first_login=0, must_change_password=0 on update - server.js: reset flags for existing regular users + add logAudit - db/database.js: fix must_change_password=0 in init code (was 1) - Add logAudit calls for seed.flag_reset events - database.js uses console.log for init-time resets (avoids circular dep) - Hudson audit: 6/6 PASS after audit logging fix 2026-05-10 04:24:51 -05:00			`{ icon: '🐛', title: 'Skip First-Login for Seeded Users', desc: 'ENV-seeded users (admin, regular) no longer see the first-login flow on container restarts' },`
v0.22.2: Session Token Rotation on Auth Events - invalidateOtherSessions() in authService.js: deletes all sessions except current - Password change (auth.js + profile.js) now invalidates all other sessions - Password change rotates current session ID (sets new cookie) - New POST /api/auth/logout-all endpoint (deletes all sessions + clears cookie) - Audit logging for logout.all and password.change - Added last_password_change_at to auth.js change-password for consistency - Hudson security audit: 6/6 PASS 2026-05-10 03:55:14 -05:00			`{ icon: '🔒', title: 'Session Rotation on Password Change', desc: 'All other sessions are invalidated when you change your password. Current session gets a new ID.' },`
			`{ icon: '🚪', title: 'Logout All Devices', desc: 'New /api/auth/logout-all endpoint lets you sign out from every device at once.' },`
initial commit 2026-05-03 19:51:57 -05:00			`],`
v0.19.4: bump version to 0.19.4 in package.json and login screen 2026-05-09 20:25:05 -05:00			`};`