v3.0.0-alpha.4

🔒 Security

• API: Prevented subscription_fee mutation on invoice updates to fix a business-logic bypass vulnerability that allowed wiping member balances without recording payments.
• Access Control: Prevented inactive users from authenticating and accessing the application panel.
• Access Control: Prevented privilege escalation vulnerabilities during user role assignments.

🧹 Maintenance & Chores

• Testing: Adjusted test configuration settings to skip vite.

Full Changelog: v3.0.0-alpha.3...v3.0.0-alpha.4

v3.0.0-alpha.3

🔒 Security

• API Authorization: Enforced role-based access control (RBAC) guards on all AnalyticsController and SettingsController endpoints to prevent Broken Access Control vulnerabilities (OWASP API3:2023).
• Dependencies: Updated multiple composer dependencies to address security advisories, including bumping dompdf/dompdf, filament/filament, guzzlehttp/guzzle, and league/commonmark to their latest secure patch versions.

✨ Features

• API Permissions: Added new granular API permissions to the database for analytics and settings endpoints to properly enforce RBAC.

🐛 Bug Fixes

• Dashboard Crashes (PHP 8.4): Patched the Filament loading-section.blade.php view to prevent a TypeError (trimming an array) when lazy-loading dashboard widgets under PHP 8.4's stricter type enforcement.
• Test Suite: Fixed failing API feature tests (AnalyticsApiTest and SettingsApiTest) by initializing and assigning the newly required permissions to the test users.

Full Changelog: v3.0.0-alpha.2...v3.0.0-alpha.3

v3.0.0-alpha.2

What's Changed

• Harden shared runtime for production readiness
• Fix shared PHPStan compatibility
• Fix shared PHPStan type safety

Full Changelog: v3.0.0-alpha.1...v3.0.0-alpha.2

v3.0.0-alpha.1

Migrating to filament

What's Changed

• Feat (user): add resource by @daspayalll in #138
• Feat: add settings page by @daspayalll in #140
• Feat: add Enquiry module by @daspayalll in #141
• Feat (users): setup roles and permission by @daspayalll in #139
• Feat: add Follow-Up module by @daspayalll in #143
• Feat(follow-up): add view page, factory and seeder by @daspayalll in #144
• Feat(enquiry): integrate related FollowUp data via Relation Manager by @daspayalll in #152
• Feat: add Service module by @daspayalll in #153
• Feat (service): add view page, seeder and factory by @daspayalll in #154
• Enquiry: enable service selection in form by @daspayalll in #155
• Doc: add README.md file by @daspayalll in #132
• Feat(module): Add Plans Module by @Verma-Punit in #157
• Feat: Setup Roles & Permissions by @Verma-Punit in #158
• Feat(module): Add member module by @Verma-Punit in #159
• Feat(module): Add subscription module by @Verma-Punit in #160
• Feat(module): Add invoice module by @Verma-Punit in #163
• Feat(sidebar-navigation): Organize Admin Sidebar with Navigation Grouping by @Verma-Punit in #169
• Feat(soft-deletion): Implement deletion prevention for related records by @Verma-Punit in #170
• Feat(invoice-module): Persist & auto-increment invoice number by @Verma-Punit in #171
• Feat(enquiry-form): Added Follow-Up, Lead Owner, and UI Tweaks by @Verma-Punit in #173
• Feat(member-module): Persist & auto-increment member code by @Verma-Punit in #177
• Refactor(relationship-name): Standardize Eloquent relationship methods to camelCase by @Verma-Punit in #178
• Feat(follow-module): Add handled by field by @Verma-Punit in #180
• Design(follow-up): Refine UI by @Verma-Punit in #181
• Feat(enquiry-table): Add Convert to Member Action by @Verma-Punit in #182
• Feat(service-resource): Use modals for Create, Edit, and View operations by @Verma-Punit in #184
• Feat(enquiries-table): Add filter by statuses tabs by @Verma-Punit in #186
• Feat(plans-table): Add filter by statuses tabs by @Verma-Punit in #188
• Feat(user-form): Add role field by @Verma-Punit in #192
• Design(user-resource): Enhance UI – View Page, Filters, Structured Form by @Verma-Punit in #194
• Feat(member-form): Add Subscription & Invoice Fields to Member Creation Form by @Verma-Punit in #195
• Feat(subscription-form): Auto-calculate subscription end date based on selected plan by @Verma-Punit in #197
• Feat(subscription): Add daily scheduler to auto-update subscription statuses by @Verma-Punit in #198
• Feat(invoice): Add Artisan Command and Scheduler to Mark Overdue Invoices by @Verma-Punit in #199
• Feat: add api endpoint by @Verma-Punit in #201
• Feat: upgrade filament package to 5.x by @Verma-Punit in #215
• feat(lang): add full Persian translation file by @PicoBaz in #225

New Contributors

• @Verma-Punit made their first contribution in #157
• @PicoBaz made their first contribution in #225

Full Changelog: https://github.com/lubusIN/gymie/commits/v3.0.0-alpha.1

Fix Fatal Error(s)

Fixes error accessing the dashboard

Bug Fixes & Refactor

• Fixes missing app assets
• Refactors models and blade templates
• Fixes additional fee calculation
• Updates installation instructions
• Fixes seeders
• Code cleanup
• Replace illuminate/html with laravelcollective/html
• Remove maatwebsite/excel
• Fixes DOB validation on member edit
• Subscription alerts exclude inactive members

Bug Fixes

• Fix NotFoundHttpException on role creation props @cracker182
• Fix missing image assets
• Update installation instruction
• Add troubleshooting & demo details

Public Release

• Database Migrations
• Database Seeder
• Sentry fix
• Code Style Fixes
• Cleanup