yaadegar: v0.16.0

0.16.0 (2026-09-06)

Features

• web: serve /privacy and /terms with a PLACE HOLDER until configured (#301) (a5b74be), closes #300

yaadegar: v0.15.0

0.15.0 (2026-08-26)

Features

• api: rate-limit password-reset requests, existence-blind (#296) (c26031b), closes #289

yaadegar: v0.14.0

0.14.0 (2026-08-24)

Features

• list-summary item previews for the dashboard card cluster (5f54a9c)
• web: complete the landing page — mockup, self-hosting, CTA, footer (#236) (#283) (36af6ec)
• web: instance-supplied landing page via YAADEGAR_ROOT_PAGE (#256) (#291) (24dc437)

yaadegar: v0.13.0

0.13.0 (2026-08-21)

Features

• build: report the nearest release tag on a source build (#259) (6ac1691)
• publish the web image as a matched pair (#268) (#271) (8413408)
• self-hosting compose that CI proves serves a site (#270) (#274) (5fd3aa8)
• version endpoints so a mismatched image pair says so (#269) (#273) (377e63e)

Bug Fixes

• web: call the app's own login action "Log in", not "Sign in" (#204) (224418c)
• web: read "Registration" when self-registration is off, not "Create an account" (eff05e9)
• web: show a not-enabled state on /register when self-registration is disabled (#253) (ab1505b)
• web: word the anti-bot notice for both reserve and pledge (#251) (214c2d3)

yaadegar: v0.12.0

0.12.0 (2026-08-20)

Features

• web: add the how-it-works, built-differently, and pull-quote landing sections (#236) (#254) (cf1864e)
• web: add the mobile shell — collapsed header + nav drawer (#232) (978d260)
• web: add the public marketing landing page and move the dashboard to /lists (#236) (#252) (30d3d40)
• web: credit the designer beneath the landing pull quote (#236) (#257) (1c571fe)
• web: migrate the account area — settings and reserved-by-me (#237) (e7846d5)
• web: migrate the list Settings tab to the design system (#230) (95ceebb), closes #222
• web: migrate the public guest page to the design system (#245) (34632c7)

Bug Fixes

• report a source build's version from its embedded VCS commit, not "dev" (#248) (5a07b44)
• web: clear the session cookie with protocol-derived secure so logout works over plain http (#240) (03910a1)
• web: exempt undo and read actions on the guest page from the anti-bot check (#249) (#250) (a7ff39a)
• web: give each cookie a single set/clear owner so their attributes can't drift (#244) (052304f)
• web: key display headings by role, not size (#226) (8aefaff)
• web: make the anti-bot widget's silent form-block visible on the guest page (#247) (0aa5a65)
• web: pin the desktop wordmark at 24px, responsive (#233) (41a5e2f)
• web: show an explicit note instead of a blank CNAME value when no target is configured (#242) (90e7298)

yaadegar: v0.11.0

0.11.0 (2026-08-18)

The interface in this release was designed by @mahboub8061, who drew every screen, the palette and the typography. This version is where that work lands in the product: the shared foundations, the auth screens, the signed-in shell, the dashboard, the list view, and the display typefaces are all implementations of it.

Features

• web: convert the signed-in area shell to the redesigned top bar (#206) (3ff2c96)
• web: rebuild the auth screens on the design foundations (#202) (af2acb5)
• web: rebuild the dashboard on the design foundations (#208) (2c50e91)
• web: rebuild the owner list view (List tab) on the foundations (#210) (1727e18)
• web: self-host Fraunces and Inter, land the display type (#218) (#219) (4f16c97)
• web: shared design foundations — tokens + components (#200) (3b87cd4)

Bug Fixes

• stamp the version into the released image at link time (#191) (6e2895e)
• web: correct --accent-green-tint to the card icon chip colour (#220) (#221) (9005bd3)
• web: wrap the signed-in top bar on narrow viewports (#212) (0718e99)

yaadegar: v0.10.0

0.10.0 (2026-08-10)

Features

• profile: self-serve display-name edit (#185) (#186) (27420ee)

yaadegar: v0.9.0

0.9.0 (2026-08-05)

Features

• captcha: Altcha proof-of-work provider on low-trust reserve, cut 2 (#45) (#181) (1aa992c)
• captcha: anti-bot CAPTCHA on low-trust reserve, cut 1 (#45) (#180) (46fc9aa)
• captcha: single-use Altcha solutions to defend against replay (#182) (#183) (6f4a7a1)
• cobuy: thank-you notes for co-buy contributors (#113) (#184) (dfe36b7)

Bug Fixes

• api: move reset-token persist off the request path (#159) (#176) (fe427de)
• storage: tenant-scope the AddOwner insert (#60) (#178) (4b9e0e3)

yaadegar: v0.8.0

0.8.0 (2026-08-04)

Features

• api: expose account_required on the public list (#170) (#174) (c4b4b09)
• api: resend verification on re-register of a pending email (#162) (#171) (1cff95d)
• auth: email+password self-registration + owner-role gate (ADR-0012 cut 1a) (#161) (485144d)
• auth: OAuth self-register + no-password reconciliation (ADR-0012 cut 2) (#167) (1a1a243)
• auth: unified invite onboarding + establish-password reconciliation (ADR-0012 cut 1b) (#165) (5ffe4e6)
• reserve: registered-tier authenticated reserve + reserver dashboard (ADR-0012 cut 3a) (#168) (348a9fa)
• web: reserve a registered-tier list from the browser (#170) (#175) (5ad3b37)
• web: reserver dashboard + giver landing + registered-tier option/warning (ADR-0012 cut 3b) (#169) (02cab31), closes #20

Bug Fixes

• auth: issue JWT with the account's real tenant role (#163) (#173) (cc95acb)
• storage: make password-reset/invite confirm transactional (#166) (#172) (941507d)

yaadegar: v0.7.0

0.7.0 (2026-08-03)

Features

• auth: authenticated change-password endpoint + Settings form (ADR-0011 cut 2) (2110fb9)
• auth: credential-version session invalidation + password funnel (ADR-0011 cut 1) (5b600c8)
• auth: enumeration-safe forgot-password reset (ADR-0011 cut 3) (#155) (6e33448), closes #142 #148
• cli: add set-password command for owner/admin password recovery (#141) (fa01752)
• web: list-level description with sanitized light-markdown (#143) (38f4122)
• web: make item price editable in add + edit forms (#140) (66d68e9)
• web: split list detail into List and Settings tabs (#128) (#136) (7085b18)
• web: transparent /api/v1 passthrough for external clients (#145) (ebd62d4)

Bug Fixes

• surface backend reason on failed reserve/chip-in; flag email-required lists (#144) (59fe54e)
• web: keep scraped prefill + pasted url on Fetch details (add-item form reset) (#139) (5dcaefb)
• web: make list-detail tab clicks switch the panel (#128) (#138) (76f6f30)