Merge branch 'main' of github.com:ghostfolio/ghostfolio

CHANGELOG.md

@@ -5,13 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## Unreleased
+## 2.141.0 - 2025-02-25
 
 ### Added
 
 - Extended the export functionality by the tags
 - Extended the portfolio snapshot in the portfolio calculator by the activities count
 - Extended the user endpoint `GET api/v1/user` by the activities count
+- Added `cusip` to the asset profile model
 
 ### Changed
 

SECURITY.md

@@ -0,0 +1,13 @@
+# Security Policy
+
+## Reporting Security Issues
+
+If you discover a security vulnerability in this repository, please report it to security[at]ghostfol.io. We will acknowledge your report and provide guidance on the next steps.
+
+To help us resolve the issue, please include the following details:
+
+- A description of the vulnerability
+- Steps to reproduce the vulnerability
+- Affected versions of the software
+
+We appreciate your responsible disclosure and will work to address the issue promptly.

apps/api/src/app/import/import.service.ts

@@ -293,6 +293,7 @@ export class ImportService {
         assetSubClass,
         countries,
         createdAt,
+        cusip,
         dataSource,
         figi,
         figiComposite,
@@ -367,6 +368,7 @@ export class ImportService {
             assetSubClass,
             countries,
             createdAt,
+            cusip,
             dataSource,
             figi,
             figiComposite,

package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "ghostfolio",
-  "version": "2.140.0",
+  "version": "2.141.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "ghostfolio",
-      "version": "2.140.0",
+      "version": "2.141.0",
       "hasInstallScript": true,
       "license": "AGPL-3.0",
       "dependencies": {

package.json

@@ -1,6 +1,6 @@
 {
   "name": "ghostfolio",
-  "version": "2.140.0",
+  "version": "2.141.0",
   "homepage": "https://ghostfol.io",
   "license": "AGPL-3.0",
   "repository": "https://github.com/ghostfolio/ghostfolio",

prisma/migrations/20250222084717_added_cusip_to_symbol_profile/migration.sql

@@ -0,0 +1,5 @@
+-- AlterTable
+ALTER TABLE "SymbolProfile" ADD COLUMN "cusip" TEXT;
+
+-- CreateIndex
+CREATE INDEX "SymbolProfile_cusip_idx" ON "SymbolProfile"("cusip");

prisma/migrations/migration_lock.toml

@@ -1,3 +1,3 @@
 # Please do not edit this file manually
-# It should be added in your version-control system (i.e. Git)
+# It should be added in your version-control system (e.g., Git)
 provider = "postgresql"

prisma/schema.prisma

@@ -174,6 +174,7 @@ model SymbolProfile {
   countries              Json?
   createdAt              DateTime                @default(now())
   currency               String
+  cusip                  String?
   dataSource             DataSource
   figi                   String?
   figiComposite          String?
@@ -196,6 +197,7 @@ model SymbolProfile {
   @@unique([dataSource, symbol])
   @@index([assetClass])
   @@index([currency])
+  @@index([cusip])
   @@index([dataSource])
   @@index([isin])
   @@index([name])