Lauri Ojansivu d06b468629 Tests: ReplyBleed's mocha test counts the attempt in every ReplyBleed row. ...

ReplyBleed is one Problems row per source, and the webhook's source is the
client address, so the bounce and board-address tests leave rows of their
own in the test database, which persists between runs. The test's findOne
picked one of those (source "ses"), whose count the spoofed reply never
moves, and failed although the attempt was recorded under 127.0.0.1. It sums
the count over all ReplyBleed rows, the way emailBounces.tests.js already
does.

Thanks to xet7 !

2026-10-29 23:07:04 +02:00

..

activityIncarnation.tests.js

Give every activity a lifetime incarnation that notification recovery checks.

2026-09-30 11:08:10 +03:00

activityNotificationExpiry.tests.js

Drain the activity notification recovery list; index synced-cron's lookup.

2026-10-14 14:00:21 +03:00

activityNotificationIntent.tests.js

Activity notification intent test: name each intent by its activity, not by arrival order.

2026-10-07 16:15:44 +03:00

activityNotificationRecovery.tests.js

Retry busy operator actions in the activity recovery test.

2026-09-30 11:12:25 +03:00

announcementDismiss.tests.js

Add #6051: per-user permanent dismissal of the Announcement banner

2026-06-20 14:39:41 +03:00

apiResponseHelpers.tests.js

Fix REST authorization and error handling.

2026-08-22 23:50:26 +03:00

archiveListCards.tests.js

Archiving a list archives its cards, and restoring it brings them back.

2026-10-14 09:28:45 +03:00

archivePermission.tests.js

Fix #5810: comment-only members can no longer archive cards

2026-06-20 17:45:43 +03:00

attachedCards.tests.js

Attach a card to a card, as Trello's card attachments, and import them from Trello.

2026-10-10 14:24:44 +03:00

attachmentActivity.tests.js

Fix #5905: notify card members and record history when an attachment is added

2026-06-20 14:40:13 +03:00

attachmentApi.authContext.tests.js

Enforce disabled account status and revoke existing sessions.

2026-09-26 01:27:36 +03:00

attachmentApi.tests.js

attachmentApi test: the upload-limit refusal no longer times out.

2026-10-14 18:53:37 +03:00

attachmentDeleteActor.tests.js

Fix #5504: deleted-attachment notification credits the deleter

2026-06-20 17:45:43 +03:00

autoArchiveCards.tests.js

Archive cards automatically after a chosen number of days without activity.

2026-09-29 16:40:48 +03:00

boardKeys.tests.js

Give old boards their keys in one pass, not one query per board.

2026-10-14 13:13:55 +03:00

boardListFilter.tests.js

Fix #5582: hide internal caret ^board^ helper boards from lists and API

2026-06-20 19:16:35 +03:00

boards.security.tests.js

SortBleed (GHSA-xm8x-c8wg-jhmf): board sort allow rule privilege escalation

2026-07-13 19:08:29 +03:00

boardSearch.comments.tests.js

Fix #5910 and add #6034: board search matches comments, drag-drop search results

2026-06-20 14:38:28 +03:00

boardTriggersClass.tests.js

Board export: pin every section, and fix the mocha stage that stopped running.

2026-08-07 18:20:23 +03:00

bots.tests.js

Board Settings / Bots: hand cards to external runners, as kanbots does.

2026-10-14 13:39:18 +03:00

brokenCardsRepair.tests.js

Add a Repair button for "Broken cards N" in Admin Panel / Problems / Summary.

2026-07-24 03:23:37 +03:00

cardListEntry.tests.js

Track column entry time and filter old cards by list

2026-09-28 17:40:49 +03:00

cardMoveLabelActivities.tests.js

Stored Sync rules bring a card's labels to another board as Card.copy and Card.move do.

2026-10-10 11:44:19 +03:00

cardParents.tests.js

Let a card be a subtask of several parent cards.

2026-09-29 17:59:21 +03:00

cards.dependencies.move.tests.js

The five failures the .tools move and the card-move fix left behind.

2026-08-08 03:46:39 +03:00

cards.methods.tests.js

Server-side Mocha suite: fixed a startup crash and the 44 latent failures it had been hiding

2026-07-05 16:48:58 +03:00

cards.security.tests.js

Try fix tests.

2026-05-13 22:32:38 +03:00

cardsCopyDueFixes.tests.js

Fix #2970: copying a card no longer selects all/unnamed labels on destination

2026-06-20 17:44:51 +03:00

chatViewChannels.tests.js

Chat view: channels are the cards with a conversation, on every board, with unread counts.

2026-10-14 23:08:22 +03:00

checklistbleed.security.tests.js

Dragging a checklist item on one's own board is no longer reported as a cross-board attack.

2026-10-27 14:52:06 +02:00

checklistHideToggle.tests.js

Fix #5408: per-checklist 'Hide checked items' toggle direction and scope

2026-06-20 19:17:01 +03:00

clonebleed.security.tests.js

Give the applyListWidth test a writing member, and a read-only negative.

2026-10-03 09:44:45 +03:00

commentPrivateFields.tests.js

Protect private webhook comment evidence across reads writes and copies

2026-09-28 12:55:11 +03:00

comments.permissions.tests.js

Add #5907, #5906: threaded comment replies and admin comment-edit restriction

2026-06-20 14:40:13 +03:00

compatApi.tests.js

Optional APIs: Trello, Jira, GitHub and Gitea compatible, off by default.

2026-10-14 13:11:23 +03:00

continuousBackup.tests.js

Continuous backup: encryption at rest, cloud upload, and a SQLite restore applied on restart.

2026-10-03 08:52:16 +03:00

copySubtaskScope.tests.js

Refuse a card insert naming another board's list or swimlane (BoardBleed sibling).

2026-10-03 10:20:29 +03:00

customBoardRoles.tests.js

Custom roles apply in every board view: verified, tested and documented.

2026-10-16 15:23:16 +03:00

customFieldLinks.tests.js

Link the custom fields of two cards, so a change on one is carried to the other.

2026-10-10 15:26:46 +03:00

customNumberFormat.tests.js

Fix #2091: custom number field shows NaN when cleared after being set

2026-06-20 19:17:01 +03:00

deleteWebhookActivity.tests.js

Fix #1587: deleting a card fires the outgoing webhook

2026-06-20 19:54:30 +03:00

dependencies.metadata.tests.js

Red Strings: add tests for schema validation, REST/OpenAPI, filter, copy/import

2026-06-15 20:08:42 +03:00

dependencies.openapi.tests.js

Sandstorm uses the same Node.js, npm and FerretDB as other platforms.

2026-10-11 13:12:21 +03:00

dependencyLayers.tests.js

Make showing dependencies each user's own choice, and add My Dependencies.

2026-10-01 19:18:58 +03:00

dnsbleed.security.tests.js

Make the DnsBleed response stub a real stream, like IncomingMessage is.

2026-08-04 00:24:05 +03:00

dueDateEdits.tests.js

Add #6081: show how many times a card's due date was changed

2026-06-20 14:38:50 +03:00

editableCardIds.tests.js

Board role permissions apply to every board view and every path to a card.

2026-10-16 13:03:34 +03:00

emailBounces.tests.js

Fix GitHub CodeQL alerts #570-#580.

2026-10-14 07:35:20 +03:00

emailReceiptRetention.tests.js

Compact terminal email metadata while retaining replay receipts

2026-09-28 14:06:15 +03:00

emailSendReceive.tests.js

Email bounces with Amazon SES, Problems -> Email, and runtime tests for sending and receiving.

2026-10-13 18:27:25 +03:00

emailToCard.tests.js

Fix GitHub CodeQL alerts #570-#580.

2026-10-14 07:35:20 +03:00

externalScrumImport.tests.js

Import Scrum sprints and releases from GitLab, OpenProject and Asana.

2026-10-08 12:08:29 +03:00

fakeImapServer.js

Email bounces with Amazon SES, Problems -> Email, and runtime tests for sending and receiving.

2026-10-13 18:27:25 +03:00

fakeSmtpServer.js

Email bounces with Amazon SES, Problems -> Email, and runtime tests for sending and receiving.

2026-10-13 18:27:25 +03:00

filenameTruncation.tests.js

Make #6412 filename test negative-testable: extract pure helpers + Node test

2026-06-22 15:46:43 +03:00

fileStoreStrategy.security.tests.js

Server-side Mocha suite: fixed a startup crash and the 44 latent failures it had been hiding

2026-07-05 16:48:58 +03:00

fileValidationBypass.security.tests.js

Hall of Fame regression audit: every fixed vulnerability still fixed, siblings of six of them closed.

2026-10-27 16:28:12 +02:00

groupBoardMembership.tests.js

Custom board roles, and team memberships that leave with the team.

2026-10-14 08:20:49 +03:00

headerLoginAuth.tests.js

Server-side Mocha suite: fixed a startup crash and the 44 latent failures it had been hiding

2026-07-05 16:48:58 +03:00

icsImport.tests.js

Add #6323: import Google Calendar .ics files into board cards (MVP)

2026-06-20 14:40:13 +03:00

impersonationReportQuery.tests.js

Tests for newest Security/Reports features (positive + negative)

2026-07-14 17:01:35 +03:00

importAttachmentAuth.tests.js

Import: attachment files of Jira, Nextcloud Deck, OpenProject, Asana and GitLab.

2026-10-15 01:27:26 +03:00

importExportSecurity.tests.js

Tests + docs for Admin Panel / Features Security and Notifications options

2026-07-14 14:03:32 +03:00

inboundEmailRoute.tests.js

Tests: ReplyBleed's mocha test counts the attempt in every ReplyBleed row.

2026-10-29 23:07:04 +02:00

index.js

Import: attachment files of Jira, Nextcloud Deck, OpenProject, Asana and GitLab.

2026-10-15 01:27:26 +03:00

index.test.js

Add more tests. Fix tests.

2026-05-27 20:51:44 +03:00

instanceEditing.tests.js

Boards every signed-in user may edit, per-list permissions, board keys and shared labels.

2026-10-14 09:28:45 +03:00

instanceFeatures.tests.js

Let administrators choose which optional features WeKan offers.

2026-10-02 15:26:22 +03:00

jiraCreator.dependencies.tests.js

Add directed duplicate card relationships and Jira import mapping

2026-09-28 17:23:15 +03:00

jiraScrumImport.tests.js

Jira import: closed sprints, rebuilt from the issues.

2026-10-15 00:46:39 +03:00

languageNames.tests.js

Updated ChangeLog: 12 more open-Bug fixes; register tests; fix #3265 language test

2026-06-20 19:20:22 +03:00

listColor.tests.js

Fix #5382: setting a list/swimlane colour to silver saved it as None

2026-06-20 19:17:01 +03:00

listPermissions.tests.js

Boards every signed-in user may edit, per-list permissions, board keys and shared labels.

2026-10-14 09:28:45 +03:00

listSyncDurable.tests.js

Let administrators discard List Sync operations that cannot be replayed.

2026-10-08 11:53:06 +03:00

listSyncGitlabEstimate.tests.js

Sync GitLab's weight or time estimate into a numeric field.

2026-10-02 19:34:47 +03:00

listSyncPlanning.tests.js

Sync sprints and releases into Scrum planning.

2026-10-08 12:35:58 +03:00

listSyncWriteBack.tests.js

Tests: three guards follow the History fork and GitLab write-back fixes.

2026-10-14 22:56:34 +03:00

notificationAwaitedDelivery.tests.js

Prepare captured notification email content separately from enqueueing

2026-09-28 04:55:55 +03:00

notificationDelivery.tests.js

Choose what notifications contain, and group and schedule them, for e-mail, the tray and webhooks.

2026-10-10 15:28:26 +03:00

notificationPreparation.tests.js

Share ordinary notification audience selection with saved delivery preparation

2026-09-28 05:07:25 +03:00

orgTeamRestriction.tests.js

Admin Panel: the board-member restriction moves to Organizations and Teams, as two.

2026-07-26 03:18:31 +03:00

passkeys.tests.js

Passkey (WebAuthn) login, and Log out everywhere.

2026-10-14 14:59:25 +03:00

permissions.security.tests.js

Server-side Mocha suite: fixed a startup crash and the 44 latent failures it had been hiding

2026-07-05 16:48:58 +03:00

proxybleed.security.tests.js

Fix ProxyBleed (GHSA-jggc-qvfc-jr6x): header-login X-Forwarded-For allowlist bypass

2026-06-15 12:54:59 +03:00

removeMissingMember.tests.js

Fix #5330: remove a deleted (non-existent) user from a board's members

2026-06-20 19:16:35 +03:00

restCardFixes.tests.js

Fix #5398, #5399, #5537, #5546: REST card API move/sort/date/archive bugs

2026-06-20 19:17:00 +03:00

restoreListSwimlanes.tests.js

"Lists missing their swimlane" no longer counts board-wide lists, and Restore never hides cards.

2026-10-14 11:03:53 +03:00

ruleEmailFollowedMove.tests.js

A rule's email follows the card to the board the rule's own move took it to.

2026-10-03 14:26:15 +03:00

ruleTriggerScope.tests.js

Refuse a rule naming another board's trigger, and match rules on their own board (RepointBleed sibling).

2026-10-03 10:26:48 +03:00

scrumHistoryConfirmation.tests.js

Bind keyed Scrum undo and redo to their original selection

2026-09-28 23:43:32 +03:00

scrumHistoryRecovery.tests.js

Let a board admin resolve a Scrum undo or redo that stopped on a conflict.

2026-10-08 12:06:49 +03:00

scrumIncarnation.tests.js

Tell a recreated Scrum record from the one History planned against.

2026-09-30 10:20:20 +03:00

scrumMovedReferences.tests.js

Link a copied or moved item to the other board's sprint and release of the same name.

2026-10-02 20:53:38 +03:00

scrumScopeHistory.tests.js

Show a sprint's scope and burndown change by change, replayed from History.

2026-10-02 19:43:30 +03:00

scrumSnapshotRows.tests.js

Scrum: batch undo and redo of a large sprint is 2.6 times faster.

2026-10-14 21:45:54 +03:00

scrumTransferMerge.tests.js

Import Scrum planning into an existing board.

2026-10-08 12:36:57 +03:00

search.logic.tests.js

Added Playwright Tests 2026-05-07: 16 specs. 306/306 passing.

2026-05-07 15:57:42 +03:00

selectAllSwimlane.tests.js

Fix stale #5623 select-all-swimlane unit test after the doubled-cards fix.

2026-07-23 14:04:12 +03:00

sharedLabels.tests.js

Boards every signed-in user may edit, per-list permissions, board keys and shared labels.

2026-10-14 09:28:45 +03:00

smtpDeadline.tests.js

Share notification delivery slots across workers and cancel lost senders

2026-09-28 13:49:39 +03:00

sqrl.tests.js

Sign in with SQRL, from a phone or a computer.

2026-10-14 17:02:20 +03:00

storedHistoryChain.tests.js

Recover abandoned History writers online, fenced, without stopping servers.

2026-09-30 11:03:37 +03:00

storedNotificationDelivery.tests.js

Page retention sweeps in the full-app tests until their own record is compacted.

2026-09-30 12:17:20 +03:00

storedRuleChecklist.tests.js

Make the checklist rule actions durable in Sync.

2026-09-30 12:17:20 +03:00

storedRuleChecklistLifecycle.tests.js

Run the addChecklistWithItems rule action through durable Sync.

2026-10-02 16:52:15 +03:00

storedRuleCopyCard.tests.js

Stored Sync rules bring a card's labels to another board as Card.copy and Card.move do.

2026-10-10 11:44:19 +03:00

storedRuleMove.tests.js

Deliver board-level activities durably: a rule's new swimlane and cross-board moves.

2026-10-03 00:08:13 +03:00

storedRuleMoveBoard.tests.js

Stored Sync rules bring a card's labels to another board as Card.copy and Card.move do.

2026-10-10 11:44:19 +03:00

storedRulePlans.tests.js

Make rule moves to another list or swimlane, and move-all, durable on the card's own board.

2026-10-02 17:53:05 +03:00

storedWebhookHttp.tests.js

Persist guarded webhook HTTP responses before processing reply effects

2026-09-28 05:32:01 +03:00

storedWebhooks.tests.js

Page retention sweeps in the full-app tests until their own record is compacted.

2026-09-30 12:17:20 +03:00

subtaskCreation.tests.js

Fix #3868, #5788, #2256, #4782, #4037, #3562, #3328: subtask creation

2026-06-20 19:54:54 +03:00

subtaskDone.tests.js

Tick subtasks done from the parent card's Subtasks list, with done/total in its heading.

2026-10-10 15:25:16 +03:00

subtaskSettings.tests.js

Fix #3414, #3876, #4849, #4947: board Subtasks landing-list setting

2026-06-20 19:54:30 +03:00

sweepUntil.js

Page retention sweeps in the full-app tests until their own record is compacted.

2026-09-30 12:17:20 +03:00

swimlaneCopyLabels.tests.js

Fix #5158: copying a swimlane to another board preserves labels

2026-06-20 17:45:43 +03:00

syncedCronIndex.tests.js

Drain the activity notification recovery list; index synced-cron's lookup.

2026-10-14 14:00:21 +03:00

syncHookedActivities.tests.js

Preserve saved Sync activities through scoped collection hooks

2026-09-28 04:37:02 +03:00

syncHookedCards.tests.js

Run the server Mocha suite in --full-app mode so its integration tests run.

2026-09-29 16:51:47 +03:00

syncRuleArchiveEffects.tests.js

Bind archive activity plans to real collection hooks and verify replay

2026-09-28 16:21:11 +03:00

titleChangeActivity.tests.js

Fix #3619: updating a card title fires the outgoing webhook

2026-06-20 17:47:56 +03:00

undoRedoClaim.tests.js

Apply a raced undo or redo once instead of once per caller.

2026-09-30 02:41:45 +03:00

users.security.tests.js

Fix SECURITY ISSUE 2: Access to boards of any Orgs/Teams, and avatar permissions.

2025-11-02 09:11:50 +02:00

utils.tests.js

Let a global Admin Panel admin edit/delete any board, not only their own.

2026-09-10 20:04:07 +03:00

webhookNonBlocking.tests.js

Fix #1402: outgoing webhook no longer blocks setting card members

2026-06-20 19:54:30 +03:00

webhookPreparation.tests.js

Send act-editCard to webhooks that opt in.

2026-10-02 15:09:58 +03:00

webPush.tests.js

Browser push notifications, per device.

2026-10-14 15:44:01 +03:00