Releases: ellite/Wallos
Releases · ellite/Wallos
Release list
v5.4.2
v5.4.1
v5.4.0
5.4.0 (2026-07-18)
Features
- add Arabic localization (aff3ed0)
- add manual logo search box and png prioritization (aff3ed0)
- add OIDC_REQUIRE_EMAIL_VERIFIED environment variable and SSRF_ALLOWLIST environment variable (aff3ed0)
Bug Fixes
- ai recommendations not handling varied provider responses (aff3ed0)
- deleting orphaned logos not taking into account themed variants (aff3ed0)
- email notification test rejecting non-admin users (aff3ed0)
- notification test/send requests hanging on unreachable hosts (aff3ed0)
- pin discord notification action to a commit sha (aff3ed0)
- progress bar showing 100% when next payment is more than one cycle away (aff3ed0)
- service worker caching stale logo search results and broken images as logos (aff3ed0)
- stats page not using themed logo variants (aff3ed0)
v5.3.0
v5.2.0
5.2.0 (2026-07-14)
Features
- add new logo themed versions generation to add subscription api endpoint (921fcfd)
- better navigation inside logo search (921fcfd)
- bottom sheet slide up animation (921fcfd)
- improve menu navigation on grid mode (921fcfd)
Bug Fixes
- syntax error on nl.js translation file (921fcfd)
v5.1.1
v5.1.0
v5.0.0
5.0.0 (2026-07-11)
Features
- complete ui overhaul (#1108)
- Allow setting beginning of week as Sunday in calendar (#1010) (f01685e)
- complete ui overhaul (#1108) (11eaf40)
- dashboard icons image search (11eaf40)
- declarative oidc settings (11eaf40)
- google image search with serpapi (11eaf40)
- grid view for subscriptions (11eaf40)
- more statistics (11eaf40)
- option for the week to start on sunday (11eaf40)
- redesign login / registration pages (11eaf40)
- selfh.st image search (11eaf40)
- subscription details popup (11eaf40)
- translate categories with ai (11eaf40)
- v2.0 api - write endpoints (11eaf40)
Bug Fixes
- calendar occurrences to respect subscription start date (11eaf40)
- escape iCal property values to prevent crlf injection (11eaf40)
- honor configured outbound proxy for logo search without reopening httpoxy SSRF bypass (11eaf40)
- improve background removal feature for logos (11eaf40)
- include todays subscriptions on amount due this month (11eaf40)
- remove hardcode string from the admin page (11eaf40)
- require cron auth guard on storetotalyearlycost.php (11eaf40)
- ssrf via http proxy env var in payments logo search (11eaf40)
- validate per-user smtp host against ssrf (11eaf40)
v4.9.6
4.9.6 (2026-06-22)
Bug Fixes
- account takeover via email-based account linking (b75f13d)
- harden oidc state validation and session rotation (#1071) (b75f13d)
- missing fields when cloning a subscription (b75f13d)
- ssrf via oidc token/userInfo url configuration (b75f13d)
- ssrf via test email notification (b75f13d)
- zip slip path traversal in database restore writes files to webroot (b75f13d)