v4.6.0

What's Changed

• [FINAL REVIEW] Complete security review — CSRF, prepared statements, transactions, merge with main by @marpisco with @Copilot in #149
• fix(admin): navbar theme not applied on page load — defer to DOMContentLoaded by @marpisco in #158
• Add toggles for OAuth/email OTP, improve login flow checks and robust OTP handling by @marpisco in #165
• Fix pending email OTP onboarding safeguards by @marpisco in #166
• chore(docs): do document update as of 02-07-2026, which are final and… by @marpisco in #168
• Adicionar token CSRF a ações em massa em admin/pedidos.php by @marpisco in #170
• Fix admin log table wrapping by @marpisco in #171
• Add ClassLink favicon to login pages by @marpisco in #175
• Add toggle to show/hide bulk reservation UI by @marpisco in #174
• fix(reservas): improve stat card theme colors by @marpisco in #176
• fix(reservas): unify filter button states by @marpisco in #177
• fix(reservas): align table header with theme by @marpisco in #178
• fix(reservas): improve action button hover styling by @marpisco in #179
• fix(reservas): make horario badge theme-aware by @marpisco in #192
• fix(reservar): make availability cells clickable by @marpisco in #180
• fix(admin): add logo to admin navbar by @marpisco in #181
• fix(admin): improve pedidos stat card theme colors by @marpisco in #182
• fix(reservas): apply ClassLink colors to page title by @marpisco in #194
• fix(admin): align pedidos title styling by @marpisco in #195
• feat(admin): load pedidos asynchronously by @marpisco in #190
• fix(admin): align email sender checkbox by @marpisco in #186
• fix(admin): update bulk reservation page copy by @marpisco in #187
• fix(admin): align config email security fields by @marpisco in #183
• fix(admin): simplify reports page text by @marpisco in #184
• fix(admin): simplify email notification copy by @marpisco in #185
• fix(admin): align TOTP config toggle by @marpisco in #189
• feat(reservar): load weekly statuses asynchronously by @marpisco in #191

Full Changelog: v4.5.0...v4.6.0

v4.5.0

What's Changed

• Aplicar revisão manual das mensagens do sistema no código by @Copilot in #147
• feat(admin): Enhance admin dashboard with new features and updates by @marpisco in #148
• Adicionar importação de reservas em massa via CSV com modal de pesquisa de IDs no painel admin by @Copilot in #152
• Release: PHPMailer 7.1.1, security guards, API improvements by @marpisco in #156

Full Changelog: v4.4.1...v4.5.0

v4.4.1

What's Changed

• Fix #130: Mudar Footer do Email com remetente no emailnotify by @marpisco in #137
• Relatórios: tornar funcionalidade nativa e refactor do gerador PDF by @marpisco in #139
• traz fix/reservar-action-first para dev by @marpisco in #141
• fix: Prevent double-submit on reservation forms by @marpisco in #142
• Issue #135: use DB-configured sender name for emails by @marpisco in #143

Full Changelog: v4.4.0...v4.4.1

v4.4.0

What's Changed

• feat: fix navbar content and other functional changes by @Copilot in #118
• Bump tecnickcom/tcpdf from 6.10.1 to 6.11.3 by @dependabot[bot] in #131
• Refactor login and DB picker; UI & CKEditor theming; various fixes by @marpisco in #134 ⬇️

Refactor login flow: passwordless OTP via email, centralized templates, admin TOTP enforcement, registration updates.
Add DB picker at login for multi-database support.
UI/theme updates: gradients, opaque navbar, particles color, development-mode banner.
CKEditor theming fixes for dark dashboard.
Session and migration fixes (prevent 'session already active' notices; OAuth user migration improvements).
Removed AEJICS branding and deprecated helpers.

Full Changelog: v4.3.2...v4.4.0

v4.3.2

What's Changed

• Bump phpmailer/phpmailer from 7.0.1 to 7.0.2 by @dependabot[bot] in #114
• document fixes, 01/04/2026 by @marpisco in #119
• fix(config.sample): remove Host Header Injection risk in OAuth redirectUri + doc improvements by @marpisco in #122
• WIP: feat(relatorios-sala): Funcionalidade de Relatórios de Sala em Formato PDF by @marpisco in #115
• feat(admin): remove version checker and new version alerts
  by @marpisco in #120
• Auto-detect OAuth provider branding from urlAuthorize by @Copilot in #116

Full Changelog: v4.3.1...v4.3.2

v4.3.1

What's Changed

• Add comprehensive logging for user actions with improved message clarity by @Copilot in #113

Full Changelog: v4.3...v4.3.1

v4.3

What's Changed

• Add bulk approve/reject for pending reservations in admin panel by @Copilot in #111
• [WIP] Restrict users from deleting their own past reservations by @Copilot in #112

Full Changelog: v4.2...v4.3

v4.2 - Script de Email

Esta atualização adiciona o script de email.

What's Changed

• Add admin script for BCC email notifications to weekly reservation holders by @Copilot in #108
• Add IP address logging to admin actions with toggle visibility in registos by @Copilot in #110

Full Changelog: v4.1...v4.2

v4.1 - Suporte a Dark Mode

Esta versão implementa Dark e Light mode automaticamente em todas as páginas da plataforma.

What's Changed

• Add automatic theme switching based on system light/dark mode preference by @Copilot in #107

Full Changelog: v4...v4.1

v4

Devido a este projecto já ser PAP, foram feitas bastantes alterações, incluindo um redesign completo do backoffice administrativo. Isso requer uma nova versão "major".

What's Changed

• Adicionar Página de Login by @marpisco in #87
• Bump phpmailer/phpmailer from 7.0.0 to 7.0.1 by @dependabot[bot] in #89
• Bump league/oauth2-client from 2.8.1 to 2.9.0 by @dependabot[bot] in #88
• Enhanced semanasrepetidas script with multi-select interface and user assignment by @Copilot in #86
• Add locked classroom reservations with admin-only booking by @Copilot in #90
• Add Motivo, Informação Adicional fields, modal user search, and Data de fim to semanasrepetidas script by @Copilot in #91
• Add pre-registration feature for users who haven't signed in yet by @Copilot in #92
• Replace admin/scripts/logsadmin.php with Registos tab featuring lazy-loaded table by @Copilot in #93
• Refactor admin users page: replace modal table with card grid and server-side search by @Copilot in #94
• Replace modal-based lists with inline tables and server-side search in salas.php and tempos.php by @Copilot in #95
• Redesign admin/pedidos.php with modern dashboard UX and update salas_postreserva.php by @Copilot in #96
• Add CanvasJS dashboard graphs for reservation statistics by @Copilot in #97
• Fix email system: correct recipients, add missing notifications, improve templates by @Copilot in #98
• Add email notification to semanasrepetidas.php recurring reservation script by @Copilot in #99
• Fix classroom switching bug: prioritize POST over GET parameter by @Copilot in #100
• Add preregistered user badge to admin users page by @Copilot in #101
• Add calendar highlighting for current day, gray out past days, and restrict past reservations to admins by @Copilot in #102
• Improve UI and organization for /reservas/index.php by @Copilot in #103
• [WIP] Fix auto reservation access for external users by @Copilot in #104

Full Changelog: v3.2.1...v4