0.4.0

Released on 2026-11-02

💌 Invites

You can now invite other people to your ties server! To get started, head to your ties start page and click "Invite a user". You can then send them a link which they'll use to set up their account.

We hope that an invite-only system will result in less spam than open signups.

⚡ One-click Bookmarking

Adding a bookmark now requires only the URL.
After submission, you'll be directed to the edit form where you can set the bookmark title and assign it to lists.
Bookmarks are not published until they are added to a public list.

Bugfixes

• Fix an error preventing bookmarks from being deleted.
• Only add the Secure flag to session cookies when the BASE_URL uses https://.

Security

• The demo signup page allowed anyone to create an account even when demo mode was disabled. This is now fixed.
  To check if any unauthorized users were created, you can use this command for the default docker-compose file:

  docker-compose exec db psql ties ties -c 'select username from users;'
  

  Check the resulting list of usernames for any users other than the admin user you've configured. Ties does not yet support deleting users - if you need this, please open an issue!

• Update all dependencies, fixing a vulnerability in quinn-proto and a a vulnerability in rustls

• Tighten rules for connections between links. Connections from private lists, or to private bookmarks may now be made by their owner only.

• Update the container to remove compromised CA certificates