Bug Fixes + Duplicate Support (#1016)

* Update README.md supporter list

* Fix: Multiple bug fixes and features bundle (#888, #991, #617, #984) (#1007)

* fix: resolve location creation failures, broken image uploads, and invalid URL handling

- Add missing addToast import in LocationDetails.svelte for proper error feedback
- Add objectId check and error response handling in ImageManagement.svelte to prevent ghost images
- Add Content-Type check in +page.server.ts image action to handle non-JSON backend responses
- Add client-side URL validation in LocationDetails.svelte (invalid URLs → null)
- Improve Django field error extraction for user-friendly toast messages
- Clean up empty description fields (whitespace → null)
- Update BUGFIX_DOCUMENTATION.md with detailed fix descriptions

* feat: bug fixes and new features bundle

Bug fixes:
- fix: resolve PATCH location with visits (#888)
- fix: Wikipedia/URL image upload via server-side proxy (#991)
- fix: private/public toggle race condition (#617)
- fix: location creation feedback (addToast import)
- fix: invalid URL handling for locations and collections
- fix: world map country highlighting (bg-*-200 -> bg-*-400)
- fix: clipboard API polyfill for HTTP contexts
- fix: MultipleObjectsReturned for duplicate images
- fix: SvelteKit proxy sessionid cookie forwarding

Features:
- feat: duplicate location button (list + detail view)
- feat: duplicate collection button
- feat: i18n translations for 19 languages
- feat: improved error handling and user feedback

Technical:
- Backend: fetch_from_url endpoint with SSRF protection
- Backend: validate_link() for collections
- Backend: file_permissions filter() instead of get()
- Frontend: copyToClipboard() helper function
- Frontend: clipboard polyfill via server-side injection

* chore: switch docker-compose from image to build

Use local source code builds instead of upstream :latest images
to preserve our custom patches and fixes.

* fix: lodging save errors, AI language support, and i18n improvements

- Fix Lodging save: add res.ok checks, error toasts, isSaving state (#984)
- Fix URL validation: silently set invalid URLs to null (Lodging, Transportation)
- Fix AI description language: pass user locale to Wikipedia API
- Fix missing i18n keys: Strava toggle buttons (show/hide)
- Add CHANGELOG.md
- Remove internal documentation from public tracking
- Update .gitignore for Cursor IDE and internal docs

Co-authored-by: Cursor <cursoragent@cursor.com>

* feat: update location duplication handling, improve UI feedback, and enhance localization support

---------

Co-authored-by: AdventureLog Bugfix <bugfix@adventurelog.local>
Co-authored-by: madmp87 <info@so-pa.de>
Co-authored-by: Mathias Ponnwitz <devuser@dockge-dev.fritz.box>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Sean Morley <mail@seanmorley.com>

* Enhance duplication functionality for collections and locations; update UI to reflect changes

* Potential fix for code scanning alert no. 49: Information exposure through an exception

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Update Django and Pillow versions in requirements.txt

* Fix error logging for image fetch timeout in ContentImageViewSet

* Update requirements.txt to include jaraco.context and wheel for security fixes

* Update app version and add security vulnerabilities to .trivyignore

* Update backend/server/adventures/views/collection_view.py

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update frontend/src/lib/types.ts

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Reorder build and image directives in docker-compose.yml for clarity

* Refactor code structure for improved readability and maintainability

* Remove inline clipboard polyfill script injection from server hooks (#1019)

* Initial plan

* Remove inline clipboard polyfill script injection from hooks.server.ts

Co-authored-by: seanmorley15 <98704938+seanmorley15@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: seanmorley15 <98704938+seanmorley15@users.noreply.github.com>

* Fix unhandled promise rejections in copyToClipboard click handlers (#1018)

* Initial plan

* Fix: make copyToClipboard handlers async with try/catch error toast

Co-authored-by: seanmorley15 <98704938+seanmorley15@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: seanmorley15 <98704938+seanmorley15@users.noreply.github.com>

* Harden `fetch_from_url` image proxy: require auth, rate-limit, and strengthen SSRF protections (#1017)

* Initial plan

* Harden fetch_from_url: require auth, rate-limit, block non-standard ports, check all IPs, re-validate redirects

Co-authored-by: seanmorley15 <98704938+seanmorley15@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: seanmorley15 <98704938+seanmorley15@users.noreply.github.com>

* Fix subregion filtering in world travel page to exclude null values

* Update package.json to use caret (^) for versioning in overrides

* fix: update package dependencies for compatibility and stability

- Added cookie dependency with version constraint <0.7.0
- Updated svelte dependency to allow versions <=5.51.4
- Updated @sveltejs/adapter-vercel dependency to allow versions <6.3.2

* Refactor code structure for improved readability and maintainability

---------

Co-authored-by: madmp87 <79420509+madmp87@users.noreply.github.com>
Co-authored-by: AdventureLog Bugfix <bugfix@adventurelog.local>
Co-authored-by: madmp87 <info@so-pa.de>
Co-authored-by: Mathias Ponnwitz <devuser@dockge-dev.fritz.box>
Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>

frontend/src/locales/sk.json

@@ -483,7 +483,16 @@
 		"export_zip": "Exportovať ZIP",
 		"import_failed": "Import zlyhal",
 		"import_from_file": "Importovať zo súboru",
-		"import_success": "Import bol úspešný"
+		"import_success": "Import bol úspešný",
+		"duplicate": "Duplikovať",
+		"duplicate_location": "Duplikovať miesto",
+		"location_duplicate_success": "Miesto bolo úspešne duplikované!",
+		"location_duplicate_error": "Nepodarilo sa duplikovať miesto.",
+		"location_actions": "Akcie miesta",
+		"collection_duplicate_success": "Zbierka bola úspešne zduplikovaná! Presmerovanie...",
+		"collection_duplicate_error": "Nepodarilo sa zduplikovať zbierku.",
+		"hide_strava_activities": "Skryť Strava aktivity",
+		"show_strava_activities": "Zobraziť Strava Activities"
 	},
 	"worldtravel": {
 		"country_list": "Zoznam krajín",
@@ -853,7 +862,9 @@
 		"update_lodging_details": "Aktualizovať detaily ubytovania",
 		"create_new_lodging": "Nové ubytovanie",
 		"enter_lodging_name": "Zadajte názov ubytovania",
-		"enter_reservation_number": "Zadajte číslo rezervácie"
+		"enter_reservation_number": "Zadajte číslo rezervácie",
+		"invalid_link": "Zadajte platnú webovú adresu (napr. https://example.com).",
+		"save_failed": "Nepodarilo sa uložiť ubytovanie. \nSkúste to znova."
 	},
 	"search": {
 		"result": "Výsledok",

frontend/src/locales/sv.json

@@ -434,7 +434,16 @@
 		"export_zip": "Exportera ZIP",
 		"import_failed": "Importen misslyckades",
 		"import_from_file": "Importera från fil",
-		"import_success": "Importen lyckades"
+		"import_success": "Importen lyckades",
+		"duplicate": "Duplicera",
+		"duplicate_location": "Duplicera plats",
+		"location_duplicate_success": "Platsen har duplicerats!",
+		"location_duplicate_error": "Kunde inte duplicera platsen.",
+		"location_actions": "Platsåtgärder",
+		"collection_duplicate_success": "Samlingen har duplicerats! Omdirigerar...",
+		"collection_duplicate_error": "Misslyckades med att duplicera samlingen.",
+		"hide_strava_activities": "Göm Strava-aktiviteter",
+		"show_strava_activities": "Visa Strava-aktiviteter"
 	},
 	"home": {
 		"desc_1": "Upptäck, planera och utforska med lätthet",
@@ -998,7 +1007,9 @@
 		"create_new_lodging": "Inställning",
 		"enter_lodging_name": "Ange logi -namn",
 		"enter_reservation_number": "Ange bokningsnummer",
-		"update_lodging_details": "Uppdatera logiinformation"
+		"update_lodging_details": "Uppdatera logiinformation",
+		"invalid_link": "Ange en giltig webbadress (t.ex. https://example.com).",
+		"save_failed": "Det gick inte att spara boende. \nFörsök igen."
 	},
 	"google_maps": {
 		"google_maps_integration_desc": "Anslut ditt Google Maps-konto för att få sökresultat och rekommendationer av hög kvalitet.",