Release v5.2.8 (#3375)

Upgrades to Better Auth 1.7, expands Custom Styles coverage of item headers, and adds a human-approval step to the AI agent's resume edits.

Breaking for self-hosters using a custom OAuth provider: the callback path changes from /api/auth/oauth2/callback/custom to /api/auth/callback/custom, and installs using OAUTH_DISCOVERY_URL need one additional UPDATE after upgrading. Both are documented in docs/self-hosting/sso.mdx.

- Better Auth 1.7, with the account issuer migration and the jwks alg/crv columns the 1.7 jwt plugin requires
- Agent edits gated behind an approval step, with crash-safe runs and context pruning
- item-header now covers every section header row on every template; adds the item-header-row part
- Fixes provider unlinking, auth error messages, and version conflicts on freshly created resumes
- New /auth/error page, translated across all 53 target locales
- DeepSeek Harness plugin moved into packages/dsh-plugin
- Dependency bumps across the workspace

apps/web/locales/sl-SI.po

@@ -679,6 +679,11 @@ msgstr "Priznanja"
 msgid "Azerbaijani"
 msgstr "Azerbajdžanščina"
 
+#. Action returning a signed-in user to the page where they manage linked providers
+#: src/features/auth/pages/error.tsx
+msgid "Back to authentication settings"
+msgstr "Nazaj na nastavitve preverjanja pristnosti"
+
 #. Secondary navigation button on 2FA verification screen
 #: src/features/auth/pages/verify-2fa.tsx
 msgid "Back to Login"
@@ -688,6 +693,11 @@ msgstr "Nazaj na prijavo"
 msgid "Back to resumes"
 msgstr "Nazaj na življenjepise"
 
+#. Action returning the visitor to the sign-in page after a failed sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Back to sign in"
+msgstr "Nazaj na prijavo"
+
 #: src/routes/builder/$resumeId/-sidebar/right/sections/design.tsx
 msgid "Background Color"
 msgstr "Barva ozadja"
@@ -1498,6 +1508,11 @@ msgstr "Opis"
 msgid "Design"
 msgstr "Oblikovanje"
 
+#. Label above the raw error text forwarded by the identity provider
+#: src/features/auth/pages/error.tsx
+msgid "Details from the provider:"
+msgstr "Podrobnosti ponudnika:"
+
 #. Destructive action button to turn off two-factor authentication
 #: src/dialogs/auth/disable-two-factor.tsx
 #: src/features/settings/authentication/components/two-factor.tsx
@@ -2981,6 +2996,10 @@ msgstr "Omrežje"
 msgid "Never expires"
 msgstr "Nikoli ne poteče"
 
+#: src/features/auth/pages/error.tsx
+msgid "New account sign-ups are currently disabled on this server."
+msgstr "Registracija novih računov je na tem strežniku trenutno onemogočena."
+
 #: src/features/command-palette/pages/navigation.tsx
 #: src/features/command-palette/pages/resumes.tsx
 msgid "New Application"
@@ -4209,6 +4228,11 @@ msgstr "Prijavite se z GitHub, Google ali poljubnim ponudnikom OAuth."
 msgid "Sign up"
 msgstr "Registracija"
 
+#. Title on the page shown after a failed or cancelled OAuth sign-in
+#: src/features/auth/pages/error.tsx
+msgid "Sign-in didn't complete"
+msgstr "Prijava ni bila dokončana"
+
 #: src/features/auth/components/social-auth.tsx
 #: src/features/auth/pages/login.tsx
 msgid "Signing in..."
@@ -4295,6 +4319,10 @@ msgstr "Nekaj drugega…"
 msgid "Something went wrong"
 msgstr "Nekaj je šlo narobe"
 
+#: src/features/auth/pages/error.tsx
+msgid "Something went wrong while signing you in. Please try again."
+msgstr "Pri prijavi je prišlo do napake. Poskusite znova."
+
 #: src/features/applications/components/application-actions-menu.tsx
 #: src/features/applications/components/application-detail-sheet.tsx
 #: src/routes/builder/$resumeId/-sidebar/right/sections/sharing.tsx
@@ -4570,6 +4598,18 @@ msgstr "tajščina"
 msgid "Thank you to our sponsors"
 msgstr "Hvala našim sponzorjem"
 
+#: src/features/auth/pages/error.tsx
+msgid "That provider account is already linked to a different user."
+msgstr "Ta račun ponudnika je že povezan z drugim uporabnikom."
+
+#: src/features/auth/pages/error.tsx
+msgid "That provider account uses a different email address than your account."
+msgstr "Ta račun ponudnika uporablja drug e-poštni naslov kot vaš račun."
+
+#: src/features/auth/pages/error.tsx
+msgid "That sign-in provider is no longer available on this server."
+msgstr "Ta ponudnik prijave na tem strežniku ni več na voljo."
+
 #: src/routes/agent/-components/agent-chat.tsx
 msgid "The agent needs your input."
 msgstr "Agent potrebuje vaše mnenje."
@@ -4582,6 +4622,10 @@ msgstr "API ključ je bil uspešno izbrisan."
 msgid "The API key will no longer be able to access your data after deletion. This action cannot be undone."
 msgstr "Po izbrisu API ključa ta več ne bo imel dostopa do vaših podatkov. To dejanje ni mogoče razveljaviti."
 
+#: src/features/auth/pages/error.tsx
+msgid "The application that sent you here made an invalid authorization request."
+msgstr "Aplikacija, ki vas je poslala sem, je poslala neveljavno zahtevo za pooblastitev."
+
 #. Empty-state message when no command palette results match the search query
 #: src/features/command-palette/index.tsx
 msgid "The command you're looking for doesn't exist."
@@ -4600,6 +4644,18 @@ msgstr "Stran, ki jo iščete, je bila morda premaknjena ali pa ne obstaja več.
 msgid "The password you entered is incorrect"
 msgstr "Vnesli ste napačno geslo"
 
+#: src/features/auth/pages/error.tsx
+msgid "The provider didn't share an email address, which is required to sign in."
+msgstr "Ponudnik ni posredoval e-poštnega naslova, ki je potreben za prijavo."
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider rejected this sign-in attempt. Please start again."
+msgstr "Ponudnik je zavrnil ta poskus prijave. Začnite znova."
+
+#: src/features/auth/pages/error.tsx
+msgid "The provider's response could not be verified. Please start again."
+msgstr "Odziva ponudnika ni bilo mogoče preveriti. Začnite znova."
+
 #: src/features/resume/preview/preview.browser.tsx
 msgid "The resume preview could not be updated. The last valid preview is still shown."
 msgstr "Predogleda življenjepisa ni bilo mogoče posodobiti. Še vedno je prikazan zadnji veljaven predogled."
@@ -4765,6 +4821,10 @@ msgstr "Ta razdelek se prikaže kot prazen naslov."
 msgid "This section sits in the sidebar."
 msgstr "Ta razdelek je v stranski vrstici."
 
+#: src/features/auth/pages/error.tsx
+msgid "This sign-in attempt expired or was already used. Please start again."
+msgstr "Ta poskus prijave je potekel ali je bil že uporabljen. Začnite znova."
+
 #: src/features/auth/pages/register.tsx
 msgid "This step is optional, but recommended."
 msgstr "Ta korak je neobvezen, vendar priporočen."
@@ -5310,6 +5370,14 @@ msgstr "Oblike ni bilo mogoče samodejno zaznati – izberite jo zgoraj."
 msgid "We couldn't find that page"
 msgstr "Te strani nismo mogli najti."
 
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't link that provider account. Please try again."
+msgstr "Tega računa ponudnika nismo mogli povezati. Poskusite znova."
+
+#: src/features/auth/pages/error.tsx
+msgid "We couldn't read your profile from the provider."
+msgstr "Vašega profila pri ponudniku nismo mogli prebrati."
+
 #: src/routes/agent/-components/tool-part-card.tsx
 msgid "Web search"
 msgstr "Spletno iskanje"
@@ -5400,6 +5468,10 @@ msgstr "Za prijavo lahko uporabite tudi svoje uporabniško ime."
 msgid "You can share your resume via a unique public URL, protect it with a password, or download it as a PDF to share directly. The choice is yours!"
 msgstr "Svoj življenjepis lahko delite prek edinstvenega javnega URL-ja, ga zaščitite z geslom ali prenesete kot PDF za neposredno deljenje. Izbira je vaša!"
 
+#: src/features/auth/pages/error.tsx
+msgid "You cancelled the sign-in before it finished."
+msgstr "Prijavo ste preklicali, preden se je dokončala."
+
 #: src/hooks/use-form-blocker.tsx
 msgid "You have unsaved changes that will be lost."
 msgstr "Imate neshranjene spremembe, ki bodo izgubljene."
@@ -5441,6 +5513,10 @@ msgstr "Vaši podatki so varni in se nikoli ne delijo ali prodajajo nikomur."
 msgid "Your data is stored securely and is never shared with third parties. You can also self-host Reactive Resume on your own servers for complete control over your data."
 msgstr "Vaši podatki so varno shranjeni in se nikoli ne delijo s tretjimi osebami. Reactive Življenjepis lahko tudi gostite sami na svojih strežnikih za popoln nadzor nad svojimi podatki."
 
+#: src/features/auth/pages/error.tsx
+msgid "Your email address isn't verified with the provider."
+msgstr "Vaš e-poštni naslov pri ponudniku ni preverjen."
+
 #: src/features/resume/builder/draft.ts
 msgid "Your latest changes could not be saved."
 msgstr "Vaših zadnjih sprememb ni bilo mogoče shraniti."
@@ -5546,4 +5622,3 @@ msgstr "Oddalji"
 #: src/libs/locale.ts
 msgid "Zulu"
 msgstr "Zuluščina"
-