field 2026.10.25

What's Changed

• fix: home page loads in browsers without Object.hasOwn by @IAMSamuelRodda in #200
• chore: release 2026.10.25 by @IAMSamuelRodda in #201

Full Changelog: v2026.10.24...v2026.10.25

field 2026.10.24

What's Changed

• docs: one instruction file for every agent, replit.md included by @IAMSamuelRodda in #197
• chore: release 2026.10.24 by @IAMSamuelRodda in #198

Full Changelog: v2026.10.23...v2026.10.24

field 2026.10.23

What's Changed

• feat: the Replit workspace database follows production, so the database prompt stops appearing by @IAMSamuelRodda in #190
• fix: settings content starts right under the tabs in a tall, narrow window by @IAMSamuelRodda in #194
• chore: release 2026.10.23 by @IAMSamuelRodda in #195

Full Changelog: v2026.10.22...v2026.10.23

field 2026.10.22

What's Changed

• docs: publish docs/ as a docs site, as OpenClaw does by @IAMSamuelRodda in #181
• docs: Replit Agent gets its own runbook index, and the workspace update steps by @IAMSamuelRodda in #186
• fix: the account panel in Settings loads, and Profile no longer blanks the app by @IAMSamuelRodda in #182
• fix: the jobs list loads in 0.4 s instead of 1.6 s by @IAMSamuelRodda in #185
• fix: the site sends security headers and a report-only content security policy by @IAMSamuelRodda in #184
• feat: problem reports can ask for a reply by @IAMSamuelRodda in #176
• chore: release 2026.10.22 by @IAMSamuelRodda in #188

Full Changelog: v2026.10.21...v2026.10.22

field 2026.10.21

What's Changed

• fix: release numbers count the month's releases (YYYY.M.N), not the day by @IAMSamuelRodda in #177
• chore: release 2026.10.21 by @IAMSamuelRodda in #178

Full Changelog: v2026.10.20...v2026.10.21

field 2026.10.21-beta.1

What's Changed

• fix: release numbers count the month's releases (YYYY.M.N), not the day by @IAMSamuelRodda in #177
• chore: release 2026.10.21 by @IAMSamuelRodda in #178

Full Changelog: v2026.10.20...v2026.10.21-beta.1

field 2026.10.20

What's Changed

• fix: payment milestones can be reordered, and a long business name no longer runs under the PDF title by @IAMSamuelRodda in #174
• chore: release 2026.10.20 by @IAMSamuelRodda in #175

Full Changelog: v2026.10.19...v2026.10.20

field 2026.10.19

What's Changed

• fix: a beta and a stable release of one commit run their CI lanes in parallel by @IAMSamuelRodda in #158
• fix: sign-in inputs and Google button show a clear edge by @IAMSamuelRodda in #159
• fix: make every theme readable (WCAG AA), with a contrast audit in CI by @IAMSamuelRodda in #169
• fix: a republish no longer fails while the live copy holds the storage lock by @IAMSamuelRodda in #170
• fix: the invoice amount report reads emailed invoices in one query, not one per job by @IAMSamuelRodda in #172
• feat: Sentry events carry product and client tags, and a cancelled fetch is not reported by @IAMSamuelRodda in #171
• chore: release 2026.10.19 by @IAMSamuelRodda in #173

Full Changelog: v2026.10.17...v2026.10.19

field 2026.10.17

What's Changed

• fix: Gmail authorization callback hardening
• chore: Bump actions/setup-node from 4.4.0 to 7.1.0 by @dependabot[bot] in #98
• chore: Bump better-sqlite3 from 12.8.0 to 13.0.3 by @dependabot[bot] in #101
• chore: Bump jsdom from 27.4.0 to 30.1.2 in /client by @dependabot[bot] in #104
• chore: Bump globals from 16.5.0 to 17.13.0 in /client by @dependabot[bot] in #105
• chore: Bump @playwright/test from 1.63.0 to 1.64.0 in /e2e by @dependabot[bot] in #131
• chore: Bump the actions-minor-and-patch group across 1 directory with 2 updates by @dependabot[bot] in #142
• chore: Bump the server-minor-and-patch group across 1 directory with 7 updates by @dependabot[bot] in #143
• fix: Field rate-limits every route, with smaller budgets for sign-in, email, PDFs and integrations by @IAMSamuelRodda in #151
• fix: email HTML is sanitised by a real HTML parser, and escaping, regex and prototype-key handling are fixed by @IAMSamuelRodda in #152
• fix: release jobs build from the release tag, and stop if it moved by @IAMSamuelRodda in #149
• fix: passwords are stored as salted scrypt, and older SHA-256 hashes are upgraded by @IAMSamuelRodda in #148
• chore: Bump the client-minor-and-patch group across 1 directory with 25 updates by @dependabot[bot] in #144
• fix: the MCP OAuth router carries its own rate limit, and job detail keys are checked where they are assigned by @IAMSamuelRodda in #153
• chore: CodeQL becomes a required check on main for high and critical alerts by @IAMSamuelRodda in #150
• fix: route tests stop their server before deleting its data directory by @IAMSamuelRodda in #157
• chore: release 2026.10.17 by @IAMSamuelRodda in #154

Full Changelog: v2026.10.16...v2026.10.17

field 2026.10.17-beta.1

What's Changed

• fix: Gmail authorization callback hardening
• chore: Bump actions/setup-node from 4.4.0 to 7.1.0 by @dependabot[bot] in #98
• chore: Bump better-sqlite3 from 12.8.0 to 13.0.3 by @dependabot[bot] in #101
• chore: Bump jsdom from 27.4.0 to 30.1.2 in /client by @dependabot[bot] in #104
• chore: Bump globals from 16.5.0 to 17.13.0 in /client by @dependabot[bot] in #105
• chore: Bump @playwright/test from 1.63.0 to 1.64.0 in /e2e by @dependabot[bot] in #131
• chore: Bump the actions-minor-and-patch group across 1 directory with 2 updates by @dependabot[bot] in #142
• chore: Bump the server-minor-and-patch group across 1 directory with 7 updates by @dependabot[bot] in #143
• fix: Field rate-limits every route, with smaller budgets for sign-in, email, PDFs and integrations by @IAMSamuelRodda in #151
• fix: email HTML is sanitised by a real HTML parser, and escaping, regex and prototype-key handling are fixed by @IAMSamuelRodda in #152
• fix: release jobs build from the release tag, and stop if it moved by @IAMSamuelRodda in #149
• fix: passwords are stored as salted scrypt, and older SHA-256 hashes are upgraded by @IAMSamuelRodda in #148
• chore: Bump the client-minor-and-patch group across 1 directory with 25 updates by @dependabot[bot] in #144
• fix: the MCP OAuth router carries its own rate limit, and job detail keys are checked where they are assigned by @IAMSamuelRodda in #153
• chore: CodeQL becomes a required check on main for high and critical alerts by @IAMSamuelRodda in #150
• fix: route tests stop their server before deleting its data directory by @IAMSamuelRodda in #157
• chore: release 2026.10.17 by @IAMSamuelRodda in #154

Full Changelog: v2026.10.16...v2026.10.17-beta.1