chore: bump version to 0.47.2

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

CHANGELOG.md

@@ -7,6 +7,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.47.2] - 2026-05-05
+
+### Changed
+- **Dependencies**: updated express-rate-limit from 8.4.1 to 8.5.0 (async store initialization support) and tsdav from 2.1.8 to 2.2.0 (native fetch, enhanced OAuth token handling, improved CalDAV/CardDAV sync reliability, security improvements).
+
 ## [0.47.1] - 2026-05-04
 
 ### Fixed

package-lock.json

@@ -17,8 +17,7 @@
         "express-session": "^1.19.0",
         "helmet": "^8.1.0",
         "node-cron": "^4.2.1",
-        "node-fetch": "^3.3.2",
-        "tsdav": "2.2.0"
+        "node-fetch": "^3.3.2"
       },
       "devDependencies": {
         "sharp": "^0.34.5"

package.json

@@ -1,6 +1,6 @@
 {
   "name": "oikos",
-  "version": "0.47.1",
+  "version": "0.47.2",
   "description": "Self-hosted family planner - calendar, tasks, shopping, meal planning, budget and more. Private, open-source, no subscription.",
   "main": "server/index.js",
   "type": "module",