v4.7.2

4.7.2 (2026-03-19)

Bug Fixes

• password reset tokens now expire after 60 minutes (90bb618)
• vulnerability would allow to bypass 2fa (#1021) (90bb618)

v4.7.1

4.7.1 (2026-03-19)

Bug Fixes

• remove extra line on languages.php causing headers already sent (#1019) (f5c9a34)

v4.7.0

4.7.0 (2026-03-19)

Features

• add romanian translations (#1017) (e87387f)
• mask ai api key on the settings page (e87387f)

Bug Fixes

• ai recommendation numbering when deleting a recommendation (e87387f)
• calendar ocurrences to respect subscriptions start date (e87387f)
• logo search (e87387f)
• retain first and last name when switching language during registration (e87387f)
• set login cookie to httponly (e87387f)
• ssrf vulnerability on several endpoints (e87387f)
• unicode character on the css file (e87387f)
• xss vulnerability on payment method rename endpoint (e87387f)

v4.6.2

4.6.2 (2026-03-05)

Bug Fixes

• ssrf vulnerability on all test notifications endpoint (e8a5135)
• vulnerability allowed to delete avatars from other users (e8a5135)
• xss vulnerability on password reset page (e8a5135)

v4.6.1

4.6.1 (2026-02-10)

Bug Fixes

• vulnerabily on add subscription endpoint (#991) (76a53df)

v4.6.0

4.6.0 (2025-12-20)

Features

• add catalan translation (#970) (f5746e7)
• add robots.txt to disallow indexing. (f5746e7)
• add serverchan notifications. (f5746e7)
• notifications for subscription can be triggered up to 180 days before payment date. (f5746e7)

Bug Fixes

• use RFC 5545 compliant date format in iCal exports (#965) (b6b0abe)
• use RFC 5545 compliant date format in iCal exports. (f5746e7)
• use stable UID for iCal events to prevent duplicates. (f5746e7)

v4.5.0

4.5.0 (2025-10-18)

Features

• enforce CSRF protection and POST-only policy across endpoints (#940) (3247ce2)

v4.4.1

4.4.1 (2025-10-12)

Bug Fixes

• get_subscriptions api endpoint was not returning subscriptions (#937) (d6329a7)

v4.4.0

4.4.0 (2025-10-12)

Features

• add mattermost notifications (#923) (#934) (5629a31)
• add openrouter ai endpoint (#922) (5629a31)
• enhance get_subscriptions API with admin access (#928) (5629a31)

Bug Fixes

• add autocomplete attribute to inputes (#926) (5629a31)

v4.3.0

4.3.0 (2025-09-15)

Features

• add health endpoint and healthcheck to container (#919) (852cb48)