Release 1.7.11

- Fix: selecting a profile ticked (and would scan) every M365-only and
  GWS-only account — regression in 1.7.10.
- VERSION, CHANGELOG and manual version strings.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

CHANGELOG.md

@@ -11,6 +11,14 @@ Version numbers follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html
 
 ---
 
+## [1.7.11] — 2026-09-28
+
+### Fixed
+
+- **Selecting a profile ticked accounts that aren't in it** — a regression in 1.7.10: applying a profile also ticked every Microsoft 365-only and every Google Workspace-only account in the sidebar, on top of the profile's own accounts. Only accounts present in both M365 and Google Workspace followed the profile correctly. Because a scan uses the ticked accounts, a scan started after selecting a profile in 1.7.10 could cover more accounts than the profile lists. Profiles now tick exactly their own accounts.
+
+---
+
 ## [1.7.10] — 2026-09-28
 
 ### Changed

VERSION

@@ -1 +1 @@
-1.7.10
+1.7.11

docs/manuals/MANUAL-DA.md

@@ -1,6 +1,6 @@
 # GDPR Scanner — Brugermanual
 
-Version 1.7.10
+Version 1.7.11
 
 ---
 
@@ -683,4 +683,4 @@ For en typisk skole- eller kommunescanning er omkostningen ubetydelig — Claude
 
 ---
 
-*GDPR Scanner v1.7.10 — teknisk opsætning og konfiguration: se README.md*
+*GDPR Scanner v1.7.11 — teknisk opsætning og konfiguration: se README.md*

docs/manuals/MANUAL-EN.md

@@ -1,6 +1,6 @@
 # GDPR Scanner — User Manual
 
-Version 1.7.10
+Version 1.7.11
 
 ---
 
@@ -683,4 +683,4 @@ For a typical school or municipality scan the cost is negligible — Claude Haik
 
 ---
 
-*GDPR Scanner v1.7.10 — for technical setup and configuration see README.md*
+*GDPR Scanner v1.7.11 — for technical setup and configuration see README.md*

static/js/profiles.js

@@ -238,7 +238,10 @@ function _applyPendingProfileUsers() {
   if (!ids || !ids.length || !S._allUsers.length) return;
   const wanted = new Set(ids);
   // A saved google:<email> may since have merged onto an M365 user (platform 'both')
-  const matches = u => wanted.has(u.id) || (u.googleEmail && wanted.has('google:' + u.googleEmail));
+  // Must return a real boolean: the sidebar and getSelectedUsers() treat any
+  // selected value other than `false` as ticked, so an `undefined` here (users
+  // without googleEmail) ticked — and scanned — every M365-only/GWS-only user.
+  const matches = u => wanted.has(u.id) || !!(u.googleEmail && wanted.has('google:' + u.googleEmail));
   S._allUsers.forEach(u => { u.selected = matches(u); });
   renderAccountList();
   const found = S._allUsers.filter(matches).length;