Changelog
What just shipped.
Plain-English log of every user-visible change. We ship most days; this page lists the ones you'd notice. Looking for what's next? See the roadmap.
May 30, 2026 · v2026.05.30
Unlimited uploads + add-on marketplace
- Pricing overhaul: every plan now ships unlimited uploads (no more per-event photo caps).
- New add-ons: AI moderation and bulk invitations available a la carte from /pricing.
- Vault-keyhole brand mark refreshed across favicon, OpenGraph, and the dashboard chrome.
- QR generation lifted into a shared helper + sharper hero / use-case imagery.
May 30, 2026 · v2026.05.30-v1
DJ, Menu, Invitation v1 + Lighthouse CI
- DJ tool + Menu tool + Invitation tool shipped at v1 — expert-level upgrade based on a competitor audit.
- CI now runs Lighthouse on every PR; structured-data is tested at build time.
- 80 SEO fixes across 14 dimensions (canonical, hreflang, OpenGraph, image dimensions, alt-text).
- Dashboard nav cleaned up; FAQ + stats + presets + QA flows tightened.
May 29, 2026 · v2026.05.29
Unguessable event slugs + plan polish
- Every new event now gets a 6-character random suffix on its slug — old guessable URLs were a confidentiality risk.
- Plan model rewritten: Free tier is now unlimited; Pro caps at 25 events per seat.
- Workspace card surfaces event-capacity at a glance; archive copy clarified.
- Vertical packs landed for Corporate, Memorial, and Conference events.
- Twilio webhook signature verification hardened.
- 16-dimension adversarial audit shipped — 55 verified findings closed.
May 28, 2026 · v2026.05.28
Galeira Maps + restaurant directory
- Galeira Maps Phase 1 + Phase 2: restaurant directory, dish-media plan, customer dish-photo contributions.
- Per-restaurant menu analytics page added.
- /api/health endpoint for uptime monitors.
- Magic-byte validation now runs on every upload completion (defence-in-depth against MIME spoofing).
- Use-cases pages + pre-login wizard funnel went live.
- Sharper homepage images + nav consolidated from 10 links into 4 groups.
May 27, 2026 · v2026.05.27
Homepage v2 + standalone makers
- Homepage v2 with HQ images and corrected corporate/birthday slots.
- Free standalone Menu Maker launched — restaurants, cafes, bars host menus on Galeira.
- Free standalone Invitation Maker launched as a new product surface.
- Invitation template gallery surfaced; venue + address now visible where guests need it.
- Bulk CSV export rolled out across the /admin tools.
- Pricing page now matches /pricing — Free first, real photos in the live preview.
May 26, 2026 · v2026.05.26
Audit fixes + cultural-weddings blog series
- 15-post bilingual cultural-weddings blog series shipped with full SEO (FAQ schema, bylines, related cultures).
- Kicked-out sessions, menu i18n bug, webhook idempotency, and RSVP defaults fixed.
- Email-injection guard added to outbound mail; feature-flag changes now write audit-log entries.
- i18n dates use the active locale's calendar correctly.
- Theme wiring + error boundary + N+1 query + audit-log actorId + enum-oracle issues closed in a re-audit pass.
May 25, 2026 · v2026.05.25
Safety + legal pack
- Granular cookie consent (necessary / analytics / marketing) with separate toggles.
- Abuse + takedown form at /report with admin queue.
- RFC 9116 security.txt published; public vulnerability-disclosure policy at /security.
- 13 jurisdiction privacy addenda live at /legal/regions/*.
May 24, 2026 · v2026.05.24
Push notifications + native moderation
- Web push notifications wired up via Firebase; triggers on moderation flag, payment success, and team-member joined.
- Native moderation: AI (Rekognition) + manual queue available in the host dashboard.
- Stripe Promotion Codes API plumbed through the checkout flow.
May 23, 2026 · v2026.05.23
Native mobile app + co-host roles
- Native Android + iOS apps shipped — all 20 host screens, no webview wrapper.
- Co-host roles introduced: owner, partner, moderator — each with scoped permissions.
- Mobile session via /api/auth/mobile-session + Bearer token auth.
May 22, 2026 · v2026.05.22
Cloud mirror to 6 providers
- Mirror uploads to Google Drive, Google Photos, Dropbox, OneDrive, S3-compatible storage, or any WebDAV target.
- Mirror status surfaced per upload + retried with exponential backoff on transient errors.
- Custom domain per event landed for the Forever tier.
Prefer the raw commit log? Read every commit on GitHub.