LiftTrace

Ninth dev pre-release toward v1.3.0.

Changed

• The container now listens on port 3002, the same as the host port. Action needed when you update. If your compose file has "3002:3003", change it to "3002:3002". If a reverse proxy or tunnel reaches the container directly (lifttrace:3003, or a Traefik loadbalancer.server.port=3003 label), point it at 3002. Until you do, LiftTrace won’t respond after the update. The host port stays 3002, so bookmarks and the Android app’s server address keep working. Installs that set PORT themselves are not affected.

Fixed

• Android: Statistics showed zeros and “Failed to load stats” (#101, reported and diagnosed by @kgenerozov). The phone now gives the same numbers as the server. Connected to a server, Statistics asks the server, and anything that fails to load shows an error with a Retry button instead of zeros.
• Android: a workout disappeared from the Diary when the connection dropped (#102, reported and diagnosed by @kgenerozov). The workout now stays on screen and offline edits sync once you’re back online, along with several related sync fixes.
• Auto-Fill Last Weights could skip your last session (#103, reported and diagnosed by @kgenerozov). It now uses your last session with completed sets, the same one the Last row shows, and warm-ups are no longer copied in as working sets.
• The bottom of the side columns was hidden behind the Radio player (#104, reported by @LeVraiRoiDHyrule). On wider screens, rows like Delete Workout could sit behind the player or the rest timer. The columns now leave room for them.
• The Android back button closes what’s open first. An open sheet, dialog, menu, picker, the full-screen player or the Trace chat closes before back leaves the page.
• Sheets no longer slide under the status bar on Android. Body Stats, Gym Tools, the Diary date picker, the workout summary, Smart Log and the shared sheet, including with the keyboard up.
• Dragging the Trace button, the Diary’s add button or the progress photo sliders no longer triggers pull-to-refresh on Android.
• A Settings category now opens at its top, and going back returns you to where you were on the list.
• Delete Workout could leave the workout in place on a day with more than one session.
• Weekly charts put workouts in the wrong week on servers set to a time zone west of UTC.
• Spanish translation updates.

Security

• No dependency changes in this release. A new high-severity adm-zip advisory published today (GHSA-7q85-xj36-vmfc, denial of service from oversized archives) is fixed in 0.6.1, which dev already uses. npm audit reports 0 vulnerabilities for both the app and the server.

Full detail in the CHANGELOG.