6.3.0

Changes

Three bigger things and many small updates in this release. The two big things are:

1. Block linkbots (i.e. MS Outlook) from consuming tokens in one time links. User need one extra click on a landing form.
2. The requested amount field can now accepts locale formated values.
3. Partners role is removed in favour of the new Co-applicant feature. Migration in place to move Partners users to become Co-applicants instead.

Then we have a long list of smaller changes. Test coverage is increased significantly. Attempts at making Hypha have lower RAM usage and make fewer db queries.

🚀 Features

• Prevent linkbots from consuming tokens in one time links (#4775) @frjo
• Make the Requested amount field accepts locale formated values (#4767) @frjo

⚙️ Enhancements

• Fix the rounds dropdown menu search on the all view. (#4784) @frjo
• Lower memory usage in submissions and projects (#4795) @frjo
• When a submission uploaded file is missing, give nice error and not a 500 (#4794) @frjo
• Minor changes in placement and background of nprogress spinner (#4801) @frjo
• Remove partner role (#4790) @wes-otf
• Use count() instead of len() where possible. (#4760) @frjo
• Added url to open calls API (#4750) @wes-otf
• Add a notice to notifications if recived as co-applicant. (#4744) @frjo

🐛 Bug Fixes

• Permission issues in view_comments and can_bulk_archive_submissions (#4758) @frjo
• Add missing site context to passwordless mails. (#4799) @frjo
• Hypha should not send e-mails to none users unless they are signing up. (#4798) @frjo
• Fix for ManagementForm data is missing errors on 2FA logins. (#4792) @frjo
• Add background to tinymce buttons so one can see them in dark mode. (#4793) @frjo
• Make active option in language switcher readable in light mode. (#4785) @frjo
• Update text only on clicked button on application form (#4773) @frjo
• Fix visibility display on the all reviews view. (#4759) @frjo
• Only target the first title column, not all of them (#4766) @frjo
• Added a button to disable 2FA for a specific user (#4747) @wes-otf

🔧 Maintenance

• Add missing migration for Partners & AssignedReviewers (#4804) @wes-otf
• Python updates 2026-04-10. (#4810) @frjo
• Update github action workflows. (#4807) @frjo
• Python updates 2026-04-08. (#4806) @frjo
• Python updates 2026-04-07. (#4803) @frjo
• Increase test coverage in Hypha (#4800) @frjo
• Add a health test to Hypha. (#4797) @frjo
• Python updates 2026-04-01. (#4796) @frjo
• Make translate test handle no translate packages installed. (#4786) @frjo
• Make submission tests only create files when needed. (#4782) @frjo
• Add license_key to TinyMCE, update esm and vendor js (#4783) @frjo
• Python updates 2026-02-26. (#4780) @frjo
• Bump picomatch (#4778) @dependabot[bot]
• Bump flatted from 3.3.3 to 3.4.2 (#4769) @dependabot[bot]
• Python updates 2026-03-18. (#4765) @frjo
• Add missing str to flag and task models. (#4761) @frjo
• Remove code in View that is already the default since Django 2.2. (#4762) @frjo
• Python updates 2026-03-14 (#4756) @frjo
• Missed updating uv lock. (#4751) @frjo
• Python updates 2026-03-11 (#4745) @frjo

Contributors to this release: @dependabot[bot], @frjo, @wes-otf and dependabot[bot]

Full changelog: v6.2.0...v6.3.0