Senn v0.2.0 (Public Beta)

Senn v0.2.0 (Public Beta)

Access-control redesign and realtime sync.

Public Beta — usable, but bugs and missing features remain, and behavior may change between updates. Back up your data before updating.

Highlights

• Access control: public / private teams, team owners, guests and invitations. Only owners (and system admins) can nominate owners, change visibility, invite or delete a team.
• Sign-up: only the first account can sign up freely; everyone else joins by invitation. Without email settings, SENN shows a one-time invite link (valid 7 days) to share yourself. See "Adding people" in the README. Options: SENN_REGISTRATION_MODE=open, SENN_INTERNAL_EMAIL_DOMAINS.
• Realtime sync over WebSocket (nginx.oss.conf updated).
• Email links (password reset, invitations, verification) are built only from BASE_URL and the allowed origins.

Security

• SENN_AI_API_KEY no longer has a default value in docker-compose.yml. Earlier installs that left it empty had the AI agent API enabled with a publicly known key. After updating, the AI agent API stays disabled until you set your own key in .env.
• axios updated to 1.20.0 (npm audit: 0 high / critical).

Fixes

• docker-compose.yml now passes EMAIL_*, SENN_REGISTRATION_MODE and SENN_INTERNAL_EMAIL_DOMAINS to the backend (email settings in .env previously had no effect).

Upgrading from v0.1.x

1. Back up (docker compose exec db pg_dump -U senn senn > backup.sql, or copy the senn_pgdata volume).
2. git pull, then docker compose pull && docker compose up -d. New database migrations run automatically on start.
3. A database upgraded to v0.2.0 cannot be used with v0.1.x again. The previous release stays available as v0.1.1.

Images

ghcr.io/macplanning-labs/senn-backend and senn-web: v0.2.0 / latest / sha-554f591 (linux/amd64, linux/arm64)