What's Changed

🌍 Translations & Localization

• Added Slovak (sk) translation and fixed missing strings across all locales by @pipozzz in #1210
• Improved French translation by @lionep in #1240

🎟️ Ticketing & Checkout

• Prevented purchase of hidden products via public checkout by @daveearley in #1259 (Thanks to @0xh3lix for the report.)
• Rendered offline payment instruction tokens by @realicon23 in #1235
• Prefilled public checkout from URL query params, including name, email, and optional locking by @skvost in #1234

🔐 Security & Privacy

• Prevented XSS via event titles in inline script contexts by @daveearley in #1260 (Thanks to @0xh3lix for the report.)

⚙️ Configuration & Infrastructure

• Exposed SMTP TLS controls for local relays by @realicon23 in #1244

New Contributors

• @pipozzz made their first contribution in #1210
• @lionep made their first contribution in #1240
• @skvost made their first contribution in #1234

Full Changelog: v.1.10.0-beta...v.1.11.0-beta

What's Changed

🌍 Translations & Localization

• Added Spanish translations by @sandraR01 in #1177
• Completed Spanish (es) translations and fixed hardcoded English labels by @sandraR01 in #1219
• Updated Italian translations by @albanobattistella in #1201
• Added Greek (el) language support by @angelospk in #1193
• Fixed localized delete confirmations by @rayhan206 in #1230

🎟️ Ticketing & Checkout

• Added ticket date display options by @daveearley in #1214
• Added organizer setting to hide the checkout “Copy my details to attendees” control by @giuliosmall in #1218
• Fixed issue where unrelated capacity assignments could block checkout by @realicon23 in #1222
• Rejected negative product quantities during order creation by @daveearley in #1231
• Enforced promo code usage limits at order reservation by @daveearley in #1233

🔐 Security & Privacy

• Sanitized question and organizer descriptions on write by @daveearley in #1232
• Hid attendee email addresses from the public check-in resource by @realicon23 in #1229

🧪 Tests & Maintenance

• Aligned email template token assertions with current dot-notation tokens by @mrjbj in #1190

New Contributors

• @sandraR01 made their first contribution in #1177
• @realicon23 made their first contribution in #1222
• @rayhan206 made their first contribution in #1230
• @giuliosmall made their first contribution in #1218
• @angelospk made their first contribution in #1193

Full Changelog: v1.9.0-beta...v.1.10.0-beta

What's Changed

• feat: add organizer tracking pixels with cookie consent by @daveearley in #1166
• feat: add date range event dashboard charts by @mrjbj in #1161
• feat: add homepage font controls by @manaskumar3003 in #1169
• fix: unhide hidden categories in event manage view by @Viburnum in #1138
• fix: wrap hardcoded "at" in order summary email in translations by @dalsoop in #1171
• fix: prevent SSR crash on unhandled locale in LanguageSwitcher by @dalsoop in #1170
• fix: handle CHARGE_REFUNDED and REFUND_CREATED events for non-SaaS Stripe refunds by @mrjbj in #1156
• fix: preserve sized image dimensions after page reload by @mrjbj in #1158
• i18n: update Italian translations by @albanobattistella in #1151

New Contributors

• @Viburnum made their first contribution in #1138
• @dalsoop made their first contribution in #1171
• @mrjbj made their first contribution in #1156
• @manaskumar3003 made their first contribution in #1169

What's Changed

• Add docker-compose.override.yml to .gitignore by @officialJCReyes in #1137
• Add AI development guidelines and improve contribution docs by @daveearley in #1148
• Add dropdown item on order to copy customer checkout summary url by @LogFlames in #1147
• Expose webhook signing secret on creation by @ptaranat in #1149

New Contributors ❤️

• @officialJCReyes made their first contribution in #1137
• @LogFlames made their first contribution in #1147
• @ptaranat made their first contribution in #1149

Full Changelog: v1.7.1-beta...v1.8.0-beta

What's Changed

• feat: Add environment variable to bypass NoInternalIP rule for specific webhook hosts by @MineTech13 in #1122
• fix: Clone question description by @veym-it in #1125
• fix: Validate sort_by parameter against allowlist in repositories by @tikket1 @daveearley in #1128

New Contributors

• @MineTech13 made their first contribution in #1122
• @veym-it made their first contribution in #1125
• @tikket1 for their security fix

Full Changelog: v1.7.0-beta...v1.7.1-beta

What’s Changed

• ✨ Feature: Waitlist for sold out products (#1043) by @daveearley

• ✨ Feature: Add scheduled message support (#1036) by @daveearley

• ✨ Feature: Introduce organizer-level webhooks for event lifecycle management (#1050) by @Sipioteo

• ✨ Feature: Add congrats modal when making event live (#1031) by @daveearley

• ✨ Feature: Support any currency for application fees (#1029) by @daveearley

• ✨ Feature: Improve overselling safety (#1045) by @daveearley

• ✨ Feature: Add event and organizer delete, archive, and management improvements (#1104) by @daveearley

• 🐛 Fix: Update attendee statistic updates (#1071) by @daveearley

• 🐛 Fix: Waitlist race conditions and capacity double-counting (#1072) by @daveearley

• 🐛 Fix: XSS, SSRF, and missing session verification (#1081) by @daveearley

• 🐛 Fix: Negative quantity validation error on tiered products (#1087) by @daveearley

• 🐛 Fix: Widget color validation rejecting uppercase hex values (#1103) by @daveearley

• 🐛 Fix: Null price error in attendee ticket email context (#1102) by @daveearley

• 🐛 Fix: Sanitize email template body with HTMLPurifier (#1105) by @daveearley

• 🐛 Fix: Cast page and per_page to int in QueryParamsDTO (#1113) by @daveearley

• 🐛 Fix: Handle empty enum values in BaseDTO and suppress ResourceConflictException reporting (#1114) by @daveearley

• 🐛 Fix: Skip payout events from Stripe Connect accounts (#1115) by @daveearley

• 🐛 Fix: Hardcoded database username and DB name in AIO compose file (#1111) by @anthonyrom

• 🐛 Fix: Capture document.currentScript before DOMContentLoaded (#1054) by @vianmora

• 🔧 Improvement: Move UTC handling (#1082) by @daveearley

• 🧹 Chore: Generic docs cleanup (#1046) by @daveearley

• 🧹 Chore: Update sentry settings (#1112) by @daveearley

• 🚀 Infra: Multi-arch Docker support (#1042) by @vianmora

• 🚀 Infra: Add Laravel scheduler to all-in-one Docker setup (#1090) by @daveearley

• 🚀 Infra: Add version management and system info endpoint (#1091) by @daveearley

• 🌍 Localization: Update Italian translations (#1039, #1088) by @albanobattistella

• 🌍 Localization: Fix Italian assets trailing character (#1070) by @zabaj1

• 🌍 Localization: Fix "Google Mapa" typo in location settings (#1034) by @anthonyrom

Upgrade Notes

To support waitlists and scheduled messages, you must ensure the Laravel scheduler is running.

If you are using the all-in-one Docker image, the scheduler is already included.
If you are running the backend image or from source, you will need to run it yourself.

See Laravel docs for setup:
https://laravel.com/docs/12.x/scheduling#running-the-scheduler

If the scheduler is not running, waitlists will not release tickets and scheduled messages will not be sent.

New Contributors

• @anthonyrom made their first contribution in #1034
• @vianmora made their first contribution in #1054
• @Sipioteo made their first contribution in #1050
• @zabaj1 made their first contribution in #1070

Full Changelog
v1.6.0-beta.1...v1.7.0-beta

What's Changed

Feat

• feat(stripe): allow bypassing application fee (#1002) by @daveearley
• feat(i18n): add Swedish localization (#882) by @VKronmar
• feat(i18n): add Polish language support (#1010) by @mikolajqc
• feat(invoice): design improvements (#1021) by @daveearley

Fix

• fix(orders): error when marking offline order as paid (#1007) by @daveearley
• fix(checkout): missing “Complete Order” button (#1009) by @nitinog10
• fix(settings): notify_organizer_of_new_orders toggle not persisting (#1022) by @daveearley

Chore

• chore(frontend): bump @tabler/icons-react from 2.47.0 to 3.35.0 (#842) by @dependabot[bot]
• chore(backend): bump laravel/vapor-core from 2.40.0 to 2.41.0 (#817) by @dependabot[bot]

Other

• update: Stripe Indian tax law compliance (#997) by @on3ss
• i18n: update it.po (#979) by @albanobattistella

New Contributors

• @on3ss made their first contribution in #997
• @VKronmar made their first contribution in #882
• @nitinog10 made their first contribution in #1009
• @mikolajqc made their first contribution in #1010

Full Changelog: v1.5.1-beta.1...v1.6.0-beta.1

What's Changed

• Feature: Messaging tiers by @daveearley in #986
• Feature: Add mail failover by @daveearley in #988

Full Changelog: v1.5.0-beta.1...v1.5.1-beta.1

What’s Changed

Features

• Checkout UI improvements by @daveearley in #915
• Admin ticket list enhancements by @daveearley in #916
• Locale-aware date formatting by @YoranSys in #782
• Organizer and event homepage redesign by @daveearley in #924
• Attendee ticket lookup by @daveearley in #927
• XML sitemap generation by @daveearley in #931
• EU VAT handling by @daveearley in #893
• VAT number validation by @daveearley in #938
• Extract image metadata on upload (LQIP, dimensions, average colour) by @daveearley in #947
• Disable event templates for unverified users by @daveearley in #948
• Allow passing platform fees to buyers by @daveearley in #956
• Marketing opt-in support by @daveearley in #957
• Platform fee enhancements by @daveearley in #958
• Fathom analytics event tracking by @daveearley in #961
• Admin UTM tracking by @daveearley in #963
• Event ended notice on frontend by @daveearley in #967
• Allow order creators to edit orders and attendee details by @daveearley in #970
• Platform fees reporting by @daveearley in #974
• Superadmin experience improvements by @daveearley in #980

Fixes

• Pin PostgreSQL to v17 to avoid startup issues with v18+ by @d3473r in #912
• Improve Docker Compose security and configuration by @hannes-lehmann in #911
• Fix incorrect product indexing with PER_ORDER checkout by @daveearley in #918
• Fix partial refund input validation by @daveearley in #919
• Fix homepage designer preview rendering by @daveearley in #921
• Fix non-SaaS checkout flow issues by @daveearley in #943
• Backfill missing Stripe payment currency data by @daveearley in #977
• Fix zero-value net application fee edge case by @daveearley in #978
• SSRF and IDOR security hardening by @daveearley in #982

UI and Styling

• Homepage styling refinements by @daveearley in #928
• Mobile sidebar style updates by @daveearley in #950
• Mobile breadcrumb styling updates by @daveearley in #952
• Organizer UI styling improvements by @daveearley in #954
• General style fixes by @daveearley in #930
• New logos and brand assets by @daveearley in #935

Translations

• Italian translation updates by @albanobattistella in #914
• Italian translation updates by @albanobattistella in #926
• Italian translation updates by @albanobattistella in #949
• Fix missing translations by @daveearley in #953
• Replace “Fahrkarte” with “Ticket” by @dsprayman in #934

New Contributors

• @d3473r made their first contribution in #912
• @YoranSys made their first contribution in #782
• @hannes-lehmann made their first contribution in #911

What's Changed

• Feature: Store Stripe platform fees by @daveearley in #869
• Feature: Add admin panel by @daveearley in #871
• Update de.po - Consistent and semantic translation wording: Menge vs. Betrag by @dsprayman in #878
• Feature: Attendee table improvements by @daveearley in #894
• Update Italian translations in it.po file by @albanobattistella in #900
• Feature: Upgrade Attendees table to Tanstack by @daveearley in #903
• Feature: Order table UI/UX improvements by @daveearley in #904
• Feature: Organizer reports by @daveearley in #909

New Contributors

• @dsprayman made their first contribution in #878

Full Changelog: v1.3.0-beta.1...v1.4.0-beta.1