v0.99.0

[0.99.0] — 2026-02-18

Bug Fixes

• core: Fix failing and flaky tests across multiple test modules
• core: Remove unused LinkAccessPolicy alias in theme integration test
• core: Move @moduletag after use in all test modules
• core: Add @moduletag :security to rate_limiter_dashboard_test
• core: Add @moduletag taxonomy tags to test modules
• core: Remove @moduletag inserted inside alias blocks in test files
• core: Sort Tymeslot.Security aliases alphabetically in auth modules
• core: Rename anonymous _ variables to _error in input validators test
• core: Remove unreachable list guard in booking orchestrator
• core: Remove unreachable catch-all clause in theme customization rate limiter
• core: Correct @SPEC type for assign_form_errors from list() to map()
• core: Remove unreachable nil guard in assign_theme_customization_data
• core: Address review issues in webhook input validation sanitization
• core: Add UniversalSanitizer to webhook name and URL validation
• core: Update rhythm theme confirmation page layout and label
• core: Fix reCAPTCHA v3 hook so booking form token is populated on submit
• core: Fix honeypot visibility and recaptcha disclaimer layout in booking themes
• core: Fix logger_json formatter config for OTP 28
• core: Remove unreachable clause in sanitize_css_class
• core: Fix type errors in proxy verifier
• test: Make availability fetch truly synchronous in tests
• core: Align credo version and resolve sitemap routing issues
• core: Handle HTML entity escaping in theme readiness error test
• core: Resolve compiler warnings and test failures
• core: Exclude Credo checks from compilation paths
• core: Add Phoenix.CodeReloader listener to mix.exs
• core: Resolve Credo warnings for nested module aliases and line length
• core: Handle empty string meeting_id in custom video provider

Features

• core: Add rate limiting to all dashboard write operations
• core: Add rate limiting to all dashboard write operations
• core: Implement structured logging with logger_json
• security: Add spam protection to booking forms with honeypot and reCAPTCHA v3
• security: Add rate limiting to theme customization and meeting operations
• core: Add Zimbra calendar provider with SSRF protection
• core: Fix proxy authentication and add verification tools