Skip to content

v2.7.0

Choose a tag to compare

View all tags
@TeaCoder52 TeaCoder52 released this 19 Oct 12:12
· 133 commits to main since this release
v2.7.0
14209eb
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Features

  • feat(webhook): add logging for webhook processing
  • feat(heleket): add DTOs for webhook payload
  • feat(passkey): store userAgent, IP, lastUsedAt and increment counter on auth
  • feat(passkey): added recovery codes cleanup when deleting the last passkey
  • feat(auth): add passkey support for MFA
  • feat(bot): add subscription purchase notification

Fixes

  • fix(passkey): ensure MFA exists before generating registration options
  • fix(payment): parseFloat for crypto amount to match Prisma Float

Chores

  • chore: upgrade multer to 2.0.2 (fixes DoS vulnerability)
  • chore: bump form-data to 4.0.4 to patch CVE-2025-7783
  • chore(payment): remove YooMoney support
  • chore(deps): update axios to 1.12.0 and remove deep-email-validator

Refactors

  • refactor(robokassa): add async setup, signature algorithm, test support
  • refactor: CI workflow to simplify dependency installation
  • refactor(auth): extract external provider auth logic into shared library
  • refactor(mfa): rename MFA methods Totp/Recovery to lowercase

CI/CD Improvements

  • ci: add GitHub Actions workflow for build and deploy
  • ci: switch from Dokploy to Docker Hub deployment
  • ci: cache Yarn dependencies and build only amd64 for stability
  • ci: split workflow into jobs and optimize Docker build/push
Assets 2
Loading