Merge pull request #11586 from firefly-iii/release-1769358688

🤖 Automatically merge the PR into the develop branch.

app/Console/Commands/Correction/CorrectsUnevenAmount.php

@@ -369,7 +369,7 @@ class CorrectsUnevenAmount extends Command
                 continue;
             }
             if (!$this->isBetweenAssetAndLiability($journal)) {
-                Log::debug('Not between asset and liability, continue.');
+                // Log::debug('Not between asset and liability, continue.');
 
                 continue;
             }

app/Support/Models/AccountBalanceCalculator.php

@@ -93,7 +93,7 @@ class AccountBalanceCalculator
     public static function getLatestBalance(int $accountId, int $currencyId, ?Carbon $notBefore): string
     {
         if (!$notBefore instanceof Carbon) {
-            Log::debug(sprintf('Start balance for account #%d and currency #%d is 0.', $accountId, $currencyId));
+            // Log::debug(sprintf('Start balance for account #%d and currency #%d is 0.', $accountId, $currencyId));
 
             return '0';
         }

bootstrap/app.php

@@ -31,6 +31,7 @@ use FireflyIII\Http\Middleware\InterestingMessage;
 use FireflyIII\Http\Middleware\IsAdmin;
 use FireflyIII\Http\Middleware\Range;
 use FireflyIII\Http\Middleware\RedirectIfAuthenticated;
+use FireflyIII\Http\Middleware\SecureHeaders;
 use FireflyIII\Http\Middleware\StartFireflySession;
 use FireflyIII\Http\Middleware\VerifyCsrfToken;
 use Illuminate\Contracts\Debug\ExceptionHandler;
@@ -94,12 +95,16 @@ $app = Application::configure(basePath: dirname(__DIR__))
                   ->withMiddleware(function (Middleware $middleware): void {
 
                       // always append secure header thing.
-                      $middleware->append(\FireflyIII\Http\Middleware\SecureHeaders::class);
+                      $middleware->append(SecureHeaders::class);
 
                       // add stuff to the web group
-                      $middleware->appendToGroup('web', [
+                      $middleware->group('web', [
+                          Illuminate\Cookie\Middleware\EncryptCookies::class,
+                          Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
                           StartFireflySession::class,
+                          Illuminate\View\Middleware\ShareErrorsFromSession::class,
                           VerifyCsrfToken::class,
+                          Illuminate\Routing\Middleware\SubstituteBindings::class,
                           CreateFreshApiToken::class,
                       ]);
                       // new group?

config/firefly.php

@@ -79,7 +79,7 @@ return [
         // see cer.php for exchange rates feature flag.
     ],
     'version'                              => 'develop/2026-01-25',
-    'build_time'                           => 1769334802,
+    'build_time'                           => 1769358562,
     'api_version'                          => '2.1.0', // field is no longer used.
     'db_version'                           => 28, // field is no longer used.
 

config/trustedproxies.php

@@ -0,0 +1,26 @@
+<?php
+
+declare(strict_types=1);
+/*
+ * trustedproxies.php
+ * Copyright (c) 2026 james@firefly-iii.org
+ *
+ * This file is part of Firefly III (https://github.com/firefly-iii).
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, either version 3 of the
+ * License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ */
+
+return [
+    'proxies' => env('TRUSTED_PROXIES', ''),
+];

package-lock.json

@@ -4019,9 +4019,9 @@
             }
         },
         "node_modules/axios": {
-            "version": "1.13.2",
-            "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.2.tgz",
-            "integrity": "sha512-VPk9ebNqPcy5lRGuSlKx752IlDatOjT9paPlm8A7yOuW2Fbvp4X3JznJtT4f0GzGLLiWE9W8onz51SqLYwzGaA==",
+            "version": "1.13.3",
+            "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.3.tgz",
+            "integrity": "sha512-ERT8kdX7DZjtUm7IitEyV7InTHAF42iJuMArIiDIV5YtPanJkgw4hw5Dyg9fh0mihdWNn1GKaeIWErfe56UQ1g==",
             "dev": true,
             "license": "MIT",
             "dependencies": {