v1.2.0

Added

• File import wizard is complete: pick the file's date format, choose the account, review rows, skip duplicates, set categories, flip signs, and import. The page explains the accepted file format and offers a template. (#37)
• Import review is a paginated table with search and select-all, and you can name the date, description and amount columns when a file has several candidates.

Fixed

• Import parser handles Greek bank exports (cp1253, accented headers, metadata lines above the header) and reports unreadable rows instead of dating them today.
• A file import can no longer be confirmed twice.
• .xls files can be imported.

Docker image

docker pull ghcr.io/lefyd24/homefinance:1.2.0

What's Changed

• Finish the file import wizard by @Lefyd24 in #39

Full Changelog: v1.1.0...v1.2.0

v1.1.0

Adds migration 024. No new .env settings. Migrations apply automatically on start, so back up first.

Added

• Multiple API keys. Create up to 10 named keys from API Keys, each read-only (GET requests only) or full access, and revoke them one at a time. The list shows when each key was created and last used.
• API key guide. The API Keys page now explains how to authenticate with the X-API-Key header, what read-only and full access mean, and lists the main endpoints grouped by area with copy-able curl examples.
• Last login column on the Admin users table.
• Delete invite codes from the Admin page, in any state. Anyone who already registered with a deleted code keeps their account and data.
• How to invite someone guide on the Admin page, and used invites now show the user's email instead of an id.

Changed

• API keys are now stored as hashes and shown once. Your existing key is migrated to a "Default key" with full access, so current integrations keep working.
• API keys can no longer create or revoke API keys; that requires being signed in.
• /api/auth/api-key is replaced by /api/auth/api-keys. Only the bundled web app used it.

Docker image

docker pull ghcr.io/lefyd24/homefinance:1.1.0

Full Changelog: v1.0.1...v1.1.0

v1.0.1

No new migrations and no new .env settings.

Fixed

• The app could stall for about 30 seconds, mostly while loading the dashboard, and then return a 500. Authentication and file-upload handlers ran blocking database calls on the event loop, so once the connection pool filled up nothing could release a connection. They now run in the thread pool.
• The AI chat no longer holds a database connection for the whole streamed answer; tool calls and usage bookkeeping use short-lived sessions.
• The investments watchlist refreshes stale prices concurrently under a 5 second limit instead of one ticker at a time, and no longer holds a connection while waiting on Yahoo.
• Investment sync fetches chart-history candles before opening its write transaction, so a slow broker no longer blocks other writes.
• Every request was logged twice (once by uvicorn, once by the app logger). Only the app logger remains.
• A brand-new Docker install started with an empty database: the entrypoint created no tables but still stamped Alembic at head, so account creation failed with no such table: users. init_db() now registers all models itself. If you hit this, delete the empty data/finance.db* files and start again.

Changed

• Investment sync and the notification check now start 2 minutes and 1 minute after boot instead of immediately, so they don't compete with the first page load after a restart.
• The SQLite connection pool is larger (20 + 20 overflow) with a 10 second timeout, so exhaustion fails fast.

Docker image

docker pull ghcr.io/lefyd24/homefinance:1.0.1

What's Changed

• feat(site): add landing page and GitHub Pages deploy by @Lefyd24 in #11
• docs: update links for the HomeFinance repo rename by @Lefyd24 in #12
• Security hardening: auth token checks, upload headers, repo hygiene by @Lefyd24 in #13
• build(deps): bump the actions group with 12 updates by @dependabot[bot] in #20
• build(deps): bump cryptography from 49.0.0 to 50.0.0 by @dependabot[bot] in #14
• build(deps): bump anyio from 4.12.1 to 4.14.2 by @dependabot[bot] in #15
• build(deps): bump urllib3 from 2.7.0 to 2.8.0 by @dependabot[bot] in #16
• build(deps): bump pyasn1 from 0.6.2 to 0.6.4 by @dependabot[bot] in #17
• build(deps): bump aiohttp from 3.14.1 to 3.14.3 by @dependabot[bot] in #18
• build(deps): bump node from 22-alpine to 26-alpine by @dependabot[bot] in #19
• build(deps): bump the python group across 1 directory with 13 updates by @dependabot[bot] in #21
• build(deps): refresh lockfiles and split major bumps out of Dependabot groups by @Lefyd24 in #29
• build(deps): bump @shadcn/react from 0.2.1 to 0.3.1 in /frontend/app in the npm group by @dependabot[bot] in #30
• build(deps-dev): bump jsdom from 29.1.1 to 30.1.1 in /frontend/app by @dependabot[bot] in #31
• build(deps-dev): bump @types/node from 24.19.1 to 26.6.3 in /frontend/app by @dependabot[bot] in #32
• build(deps-dev): bump vitest from 4.1.11 to 5.0.2 in /frontend/app by @dependabot[bot] in #33

New Contributors

• @dependabot[bot] made their first contribution in #20

Full Changelog: v1.0.0...v1.0.1

v1.0.0

First public release.

Added

• Accounts, transactions (income, expense, transfer, split), categories and categorization rules.
• Budgets, recurring expenses, debts (snowball and avalanche comparison) and goals.
• Reports with saved views, scheduled report emails and CSV export, plus a dashboard.
• Bank sync through Enable Banking (PSD2, read-only), with consent-expiry reminders.
• Investments: Freedom24 and Binance sync, portfolio analytics, ticker comparison, backtesting and scenarios, technical analysis, company research.
• AI advisor through OpenRouter with a model picker, cost caps, skills and an investor profile with undo.
• Email and Web Push notifications with quiet hours and de-duplication.
• Documents, trackers, English and Greek interface, light and dark themes, installable PWA.
• Invite-only registration, email verification, password reset and rate limiting.
• Prebuilt multi-arch (amd64 and arm64) Docker image on GitHub Container Registry.
• Full documentation in docs/, an ISC LICENSE, and CI and release workflows.

Changed

• The Privacy Policy and Terms pages read the operator's name, contact email and jurisdiction from the server instead of compiled-in values. Action required: set LEGAL_OPERATOR_NAME, LEGAL_CONTACT_EMAIL and LEGAL_JURISDICTION in .env. Until you do, those pages show a "not configured" notice. See Configuration.
• docker-compose.yml now names the published image. docker compose pull && docker compose up -d updates without building.

Docker image

docker pull ghcr.io/lefyd24/homefinance:1.0.0

What's Changed

• React frontend migration by @Lefyd24 in #3
• refactor: update dashboard and page headers for improved accessibilit… by @Lefyd24 in #4
• feat(ui): retire glassmorphism for the portfolio's ink & navy system by @Lefyd24 in #5
• feat(ui): 3D card elevation, gradient account cards, Inter for figures by @Lefyd24 in #6
• fix(ui): quieten elevation, stop the account-card corner bleed by @Lefyd24 in #7

New Contributors

• @Lefyd24 made their first contribution in #3

Full Changelog: https://github.com/Lefyd24/HomeFinance/commits/v1.0.0