Liberu Accounting 5.0.0

What's Changed

• feat: complete accounting module progress by @curtisdelicata in #1052

Full Changelog: v4.0.0...v5.0.0

Liberu Accounting 4.0.0

Major release containing the latest accounting module progress, including the fixed-assets module scaffold and API/Filament integrations. The broader roadmap remains in active development.

What's Changed

• feat: scaffold fixed assets modules by @curtisdelicata in #1051

Full Changelog: v3.0.0...v4.0.0

Liberu Accounting 3.0.0

Major release containing the accounting roadmap module implementation merged through PR #1049, plus the Composer lock synchronization fix from PR #1050.

What's Changed

• feat: implement accounting roadmap modules by @curtisdelicata in #1049
• fix: synchronize Composer lock with roadmap modules by @curtisdelicata in #1050

New Contributors

• @curtisdelicata made their first contribution in #1049

Full Changelog: v2.0.0...v3.0.0

Liberu Accounting 2.0.0

Full Changelog: v1.0.0...v2.0.0

Liberu Accounting 1.0.0

Liberu Accounting 1.0.0 — first stable release.

Open-source double-entry accounting platform on Laravel 13 / PHP 8.5 / Filament 5 / Livewire 4.

Highlights

• Double-entry engine: journal entries, chart of accounts, general ledger, invoicing, bills, estimates, payments.
• Two Filament panels (admin + app), multi-tenant by Team.
• Bank & accounting integrations: Plaid, Revolut, Wise, Sage, Xero, QuickBooks Online, HMRC Making Tax Digital.
• Octane/RoadRunner production image; Horizon queues; Reverb websockets; Kubernetes manifests.

Security & hardening in this release

• Access control: admin panel gated to admin roles (closed a self-serve super_admin escalation); tenant-scoping sentinels on the REST API (no cross-tenant IDOR).
• Payments: Revolut idempotency keys (no double-spend on retry), payments:write token scope, and threshold maker-checker approval on outbound payments.
• Auth: mandatory 2FA by default for privileged users (opt out per deploy); OAuth state CSRF protection across all provider callbacks.
• Webhooks: real Plaid ES256/JWK signature verification (replaces shared-secret HMAC); all provider webhooks signature-verified with timing-safe comparisons.
• Data: mass-assignment protection restored app-wide (global Model::unguard() removed); bank credentials encrypted at rest.
• Config: fail-closed CORS, secure/encrypted session cookies, CSP, prod image no longer boots in debug mode.

Verification

• Full test suite green on SQLite and MySQL (600+ tests).
• Octane production-image boot smoke passes in CI.
• Panel smoke test mounts every Filament page (list/create/edit/view) with no render failures.
• composer audit / npm audit clean.

Known limitations

• Plaid webhook verification is covered by a cryptographic fixture test but has not been validated against live Plaid — run a Plaid sandbox smoke test before relying on Plaid webhooks in production.
• Advisory CI quality gates (php-insights, copy-paste, Codacy) report pre-existing repo-wide findings; they do not affect functionality.

v0.1.0-beta.1 — Liberu Accounting (beta)

First public pre-release / beta of Liberu Accounting — an open-source double-entry accounting platform (Laravel 13 · PHP 8.5 · Filament 5).

⚠️ Beta. Feature-complete against the internal backlog, but several capabilities ship as MVP slices (see Deferred below). Not yet 1.0. Test on non-production data.

Core engine

Double-entry general ledger (balanced journal entries, immutable-once-posted, account balances, trial balance), chart of accounts, multi-tenancy by Team.

Highlights this cycle

• Tenant provisioning — seed a team with a standard chart of accounts (tenants:provision-chart + Filament action).
• Subscription billing — recurring plans → catch-up draft invoices (subscriptions:process).
• Revenue recognition — straight-line schedules from an invoice, posting Dr Deferred / Cr Revenue per period (revenue:recognize).
• Invoice → GL posting — Dr AR / Cr {Deferred | Sales}, defer-aware, idempotent (invoices:post + action).
• Payment → GL posting — Dr Cash / Cr AR, recomputes invoice status (payments:post + action).
• Posting reversal (unpost) — reverse a posted invoice/payment, guarded, re-postable (invoices:unpost / payments:unpost + actions).
• PHP API SDK — Liberu\AccountingSdk client for the /api/v1 resources.
• Sales orders, procurement chains, forecasting, document versioning, approval engine, notifications (in-app + SMS), open-banking connectors (Plaid/Revolut/Wise/Xero/QBO/Sage), HMRC MTD.

Quality

• Full test suite green (603 tests / 1506 assertions, PHPUnit).
• PHPStan clean.
• migrate:fresh --seed verified clean on MySQL 8.4.

Deferred (not in this beta)

Subscription proration / upgrades / payment providers (Stripe · GoCardless · PayPal); milestone & prorated revenue recognition; sales-tax-payable posting; audit-trail reversing entries; tenant backups / cloning; TypeScript SDK; ecommerce / CRM / productivity integrations (Shopify · HubSpot · M365 …).

Notes

• A fresh tenant provisions its chart of accounts on demand (no global seeder).
• Production image uses Octane/RoadRunner (CONTAINER_MODE=http); smoke-test the container boot in your pipeline before promoting.