v2.2.0

OSS

The open-source edition gets payment reminders, e-invoicing, credit top-ups in money from the portal, SSRF protection on outgoing requests and API rate limiting, and its images are now published: ghcr.io/meteroid-oss/meteroid-oss-*, with a Compose override and a Helm edition: oss value.

• ci: a Rust cache that restores on Ubicloud and follows Cargo.lock
• feat(editions): payment reminders, e-invoicing and money top-ups in the portal are part of the open-source edition
• feat(editions): publish the open-source images from the public repository
• feat(portal): stored, expiring portal link tokens
• fix(security): outbound deliveries refuse private destinations and the API is rate limited in the open-source edition
• feat(payments): charge committed invoices without holding a connection
• fix(security): scope tax rate, coupon, quote, feature, subscription and token lookups to the tenant

Enterprise

• fix(editions): keep licensed features working after a license lapse
• fix(portal): keep embedded portals working after a license lapse

Upgrade notes

• Open-source installations that deliver webhooks or alerts to private addresses, plain http or ports other than 80 and 443 must set WEBHOOK_ALLOW_PRIVATE_DESTINATIONS=true (and EGRESS_ALLOW_PRIVATE_DESTINATIONS_SSO=true for an internal identity provider).