Skip to content

Releases: HostRepute/ReputeCast

Release list

v1.1.0

v1.1.0 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 25 Oct 09:37
v1.1.0
5146949

Highlights

ReputeCast 1.1.0 brings the design expansion (milestones M15–M32): transactional email, SMS, web push and WhatsApp, integrations, content in several languages and the app in Vietnamese, new ways to engage readers, grow and earn, and a publication website. Every feature is free under the AGPL, like the rest of ReputeCast.

It also fixes security issues in 1.0.0 and 1.0.1, one of them critical. Upgrade soon, especially if you use MCP agents.

Security. Five advisories cover what 1.1.0 fixes:

  • Critical: an MCP agent holding segments:edit could run SQL through a crafted segment definition.
  • High: a member with team:invite could copy the link of a more privileged pending invitation and raise their role.
  • High: members limited to some lists could export, mail and preview contacts outside their scope.
  • Medium: forged delivery reports sent to an SMTP bounce mailbox could suppress any subscriber.
  • Medium: the provider setup's webhook self-test could be redirected to internal addresses (SSRF).

New

  • Transactional email. Templates written in the composer with variables, test data and versions. A send, batch and render API with idempotency keys, send-only and test keys, an SMTP relay, a message log, category unsubscribes and delivery alerts. The Transactional stream fails over automatically and goes before broadcasts. Templates import from Postmark, SendGrid, Mailgun, Notifuse, MJML or HTML.
  • SMS, web push and WhatsApp. SMS through Twilio, Vonage, Plivo, Telnyx or AWS End User Messaging, with routing by country, consent per list, keywords and quiet hours. Web push with a prompt designer. WhatsApp through Meta's Cloud API. Each channel is also an automation step.
  • Integrations. An integrations hub with managed keys and webhooks; Zapier, Make and n8n apps; a WordPress plugin; Shopify and WooCommerce stores with synced orders, products and customers, store triggers and blocks, and an abandoned-cart starter.
  • Languages. Language versions of campaigns, automation emails and transactional templates; forms and public pages in each language; each contact's language, checked in Send Readiness. The app in English and Vietnamese, with each member's own language and region format.
  • Engaging readers. Recurring and RSS digests, conditional content, polls and surveys, contact scoring with bands and decay, growth sources, address verification, inbox placement tests, and accessibility checks in the composer and in Send Readiness.
  • Grow and earn. Referrals, recommendations with partner links, paid subscriptions through Stripe, offers, gift subscriptions, sponsorships and revenue attribution.
  • Website, pages and products. A publication website with posts, members, a meter and a paywall; a page builder for landing, sales and webinar pages; a shop for digital products.
  • AI assistant and agencies. Suggestions shown as diffs in the composer, for segments and in reports, through the workspace's own model key and monthly cap. Client workspaces for agencies, with staff assignments, client sign-off, a shared template library and usage per client.

Upgrading. This release adds 52 migrations.

  • Docker: docker compose pull && docker compose up -d. Migrations run at start.
  • Binary: replace it, then run reputecast migrate up.
  • Uploaded files (digital products, lead magnets) are stored in files next to the secret key (/var/lib/reputecast/files in Docker). Back the folder up along with the database.

The image is ghcr.io/hostrepute/reputecast:v1.1.0.

Changelog

844 commits since 1.0.1: v1.0.1...v1.1.0

Assets 9
Loading

v1.0.1

v1.0.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Oct 14:27
v1.0.1
6d1e83c

Highlights

Security. When an API request failed on an unexpected error, the 500 response carried the error's own text, which could include SQL or internal hosts. Such errors now answer with a reference (meta.reference), and the error is logged on the server under that reference with the request id (#4, GHSA-9xjq-4j36-pcgm).

Fixes

  • A notification list cursor beyond 2³¹ answered 500; it is now refused with 422 (#3).
  • The adapter SDK trims trailing slashes from URLs in one pass instead of a backtracking regular expression (#3).

Documentation

  • A shorter README with screenshots, plus guides for self-hosting, configuration, the reverse proxy, Postgres, the API and the architecture (#2).
  • The app's links to the API reference, the reverse-proxy guide and the Postgres tuning guide now open those pages.
  • A contributing guide, code of conduct, security policy and support page (#2).

Upgrading. This release has no new migrations.

  • Docker: docker compose pull && docker compose up -d.
  • Binary: replace it, then run reputecast migrate up.

The image is ghcr.io/hostrepute/reputecast:v1.0.1.

Changelog

Contributors

hostrepute-com
Loading

v1.0.0

v1.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Oct 11:54
v1.0.0
204f96f

Changelog

Read more
Loading