Planvio 1.2.0

An application release. The database version stays 1.0.0: this release adds no migrations.

Archive	Use	SHA-256
planvio-v1.2.0.zip	Fresh install. Extract into an empty directory and open the browser installer.	aec27c98d216de1cc491068458465b587e9555b91302c67c3b8e6118183ae96c
planvio-v1.2.0-update.zip	Update an installation that is already running 1.0.0. Extract it over that directory.	ebb2b7bfb7e4b6576faf897585530b38505087e8f09e0e1e33118ebe9edf0246

The update archive does not contain .env, storage/, or bootstrap/cache/. Uploads and the install lock stay where they are. The next request, or the next cron run, records application version 1.2.0 and clears compiled caches. Planvio does not download the archive and does not run migrations. The document root and the cron jobs stay where they are.

Do not extract the fresh archive over a live directory. It contains an empty storage skeleton.

Added

• Two release archives, as above.
• An in-place update. After the files are on disk, Planvio records application version 1.2.0, clears compiled caches, and removes resources/views/welcome.blade.php, which 1.0.0 shipped and nothing routes to.

Fixed

• Task descriptions are sanitised before they are stored, including descriptions written by the API and by CSV import. A stored script can no longer run when the description is shown.
• The task editor no longer throws when the toolbar acts on a selection the browser has dropped, and it no longer registers the link mark twice.
• Checklist items written by the editor survive sanitising: the checkbox markup is kept, and other inputs are still stripped.
• The description editor and its read-only view no longer share one Livewire identity, so opening the editor does not reuse the read-only node.
• The description Edit button stays in the corner of the description instead of shifting with the toolbar.
• Dragging a card you are not allowed to move shows "You cannot move this task." instead of a framework error, and the drag handle is not offered.
• A touch on a card waits before it starts a drag, so scrolling the board does not pick the card up. The Move button stays visible without a hover pointer.
• Dropping a card back where it already was, or choosing its current column, does not write a move.
• Reopening a task from Done restores the progress it had before it was completed, or the checklist's completion when it has one. Leaving Cancelled does not rewrite progress.
• An empty Done or Cancelled column says that done work is hidden, and offers to show it, instead of looking like a column with no tasks.
• Moving a card refreshes the board once.
• Project CSV export no longer repeats or skips a project, and it includes every task when a project has 500 or more.
• Filament 5.10 strings that the packaged Arabic was missing — copy, global search, list tabs, the query builder, the column manager — are translated.

Changed

• Laravel 13.36 and Filament 5.10.2.
• TipTap 3.32, Vite 8.3, and the HTML sanitiser and Markdown libraries current with their patch releases.
• The release builder reads .gitignore itself, refuses to package environment files, and publishes Filament's assets from the vendor/ directory the archive ships.
• Dependabot may open PHPUnit 12 patch updates. PHPUnit 13 stays closed, because it requires PHP 8.4.1 and Planvio still supports PHP 8.3.

Security

• Stored task descriptions are cleaned with the same sanitiser comments and wiki pages already used.
• shell-quote is pinned to 1.12.0 (GHSA-pqg4-j6r4-53mv). That build-time dependency does not ship in the release archive.

Notes

• Requires PHP 8.3 or 8.4 and MySQL 5.7+ / MariaDB 10.6+. Unchanged from 1.0.0.
• No schema change. db_version stays 1.0.0. There is no migration step for this release.
• A fresh install still starts at the browser wizard. An update does not.

Planvio 1.0.0

Planvio 1.0.0

Planvio is a free, open-source project management platform that you host yourself. It's built for business work: marketing campaigns, construction, events, product launches, client work and operations. You install it from your browser, and it runs on ordinary shared hosting.

Live demo: https://planvio.hatemswaileh.com
Sign in as admin@planvio.test or admin@planvio.test. The password for both is PlanvioDemo123.

---

Install

1. Download planvio-v1.0.0.zip from the assets below.
2. Upload it to your hosting account and extract it.
3. Point your domain's document root at planvio/public.
4. Create a MySQL or MariaDB database.
5. Open your domain and follow the installation wizard.
6. Add the two cron jobs: the scheduler and the queue worker.

You don't need a command line, and you never edit .env or run Composer. The archive already includes vendor/ and the compiled frontend assets.

The full cPanel walkthrough is in docs/CPANEL.md.

Requirements

PHP	8.3 or 8.4
Extensions	bcmath ctype curl fileinfo gd json mbstring openssl pdo pdo_mysql tokenizer xml
Database	MySQL 5.7+ or MariaDB 10.6+
Web server	Apache or LiteSpeed (Nginx also works)
Cron	Two entries

You don't need Docker, Redis, Supervisor, root access, SSH, or Node or Composer on the server.

---

What's in it

Work management. Projects with custom statuses, health, budgets and templates. Tasks with subtasks, checklists, dependencies, watchers, recurrence and custom fields. Milestones, tags, bulk actions, and CSV import and export.

Views. A drag-and-drop Kanban board, a list view with saved views, a calendar, and a timeline (Gantt) with dependency arrows. There's also a My Tasks page with Today, Upcoming and Overdue.

Delivery. Time tracking with a running timer, project budgets and expenses, and reports on progress, workload, timeline health, time and budget. You can also print a project status report.

Collaboration. Comments with mentions and reactions, a wiki for each project, file attachments, activity history, an inbox, and email notifications.

Teams and access. Separate workspaces, with a role for everyone from owner to guest. A project manager can run their projects without being an administrator, and guests only see the projects they're invited to.

AI that works through your permissions. An AI agent can use 39 defined tools, and every action it takes goes through the same permission checks, policies and audit trail as a person's. You choose one of three modes: Assistant only answers, Copilot proposes actions and waits for your approval, and Autonomous acts within limits you set. Destructive actions always need a person to approve them, and a kill switch stops autonomous work immediately. It works with OpenAI, Anthropic, any OpenAI-compatible endpoint, and local models such as Ollama. AI is off until you configure a provider.

English and Arabic. Arabic gets a full right-to-left layout, proper Arabic typography and a bundled Arabic font. Administrators can add more languages and translate them inside the app.

Platform. Browser installer, admin panel, System Health checks, maintenance mode, audit log, two-factor authentication, a REST API (/api/v1) and signed webhooks.

---

Before you start

• docs/LIMITATIONS.md lists what Planvio 1.0 deliberately doesn't do, and why.
• To try it with sample data, run php artisan planvio:demo. Run php artisan planvio:demo --remove before real use.
• Report security issues privately through the Security tab, never in a public issue.

Verify your download

planvio-v1.0.0.zip
SHA-256  5d96c7652ad06def0998b37e592e6ae0d94b42478a2da9eda0ab4e00c6eedbcc

• Windows: certutil -hashfile planvio-v1.0.0.zip SHA256
• macOS or Linux: shasum -a 256 planvio-v1.0.0.zip

---

Licensed under the GNU AGPL v3.0. Copyright © 2026 Hatem Sweileh.