ChatbotX, an open-source alternative to ManyChat

v1.1.5 Feature

This release adds 5 notable features for engineering teams evaluating rollout.

Published 9d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agentic-ai agentic-chat-marketing llm marketing marketing-automation nextjs

+5 more

omnichannel postgresql redis sales typescript

Summary

AI summary

Broad release touches ✨ New Features, 🐛 Bug Fixes, worker, and builder.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Low	Adds reseller SMTP routing and account credentials email template in auth. Adds reseller SMTP routing and account credentials email template in auth. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Low	Enables Google Sheets steps in flows within worker component. Enables Google Sheets steps in flows within worker component. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Low	Restricts flow step menu to supported steps for TikTok channel in builder. Restricts flow step menu to supported steps for TikTok channel in builder. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Low	Adds "Get JSON for Messenger Ads" action to messenger feature set. Adds "Get JSON for Messenger Ads" action to messenger feature set. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Low	Adds phone and email filters in contacts functionality. Adds phone and email filters in contacts functionality. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Low	Adds blocked‑owner safe‑return guard, soft‑delete purge, and trial+7d cron jobs in worker. Adds blocked‑owner safe‑return guard, soft‑delete purge, and trial+7d cron jobs in worker. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Low	Adds trial‑expired banner, disables create surfaces, and adds deletion card with docs in billing. Adds trial‑expired banner, disables create surfaces, and adds deletion card with docs in billing. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Low	Adds identity‑verified access tokens with rate limiting to webchat. Adds identity‑verified access tokens with rate limiting to webchat. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Low	Adds smart response delay functionality. Adds smart response delay functionality. Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix
Bugfix	Medium	Unsubscribes pages from webhooks when a channel is disconnected in integrations. Unsubscribes pages from webhooks when a channel is disconnected in integrations. Source: granite4.1:30b@2026-07-17-audit Confidence: low	—
Bugfix	Medium	Fixes invalid quick replies and missing contact inbox read receipts in worker. Fixes invalid quick replies and missing contact inbox read receipts in worker. Source: granite4.1:30b@2026-07-17-audit Confidence: low	—
Bugfix	Medium	Resolves stuck conversations in conversations system. Resolves stuck conversations in conversations system. Source: granite4.1:30b@2026-07-17-audit Confidence: low	—
Bugfix	Medium	Resolves variables in get user data step message in worker. Resolves variables in get user data step message in worker. Source: granite4.1:30b@2026-07-17-audit Confidence: low	—
Bugfix	Low	Shows bubble chat only on main domain. Shows bubble chat only on main domain. Source: granite4.1:30b@2026-07-17-audit Confidence: low	—
Bugfix	Low	Removes unused Google Drive scope from google‑sheets integration. Removes unused Google Drive scope from google‑sheets integration. Source: granite4.1:30b@2026-07-17-audit Confidence: low	—
Bugfix	Low	Makes sequence step cards responsive instead of overflowing on narrow widths in builder UI. Makes sequence step cards responsive instead of overflowing on narrow widths in builder UI. Source: granite4.1:30b@2026-07-17-audit Confidence: low	—
Bugfix	Low	Preserves rich types in withCache via superjson envelopes in redis caching layer. Preserves rich types in withCache via superjson envelopes in redis caching layer. Source: granite4.1:30b@2026-07-17-audit Confidence: low	—
Bugfix	Low	States 24‑hour data deletion window in deletion card and alert for workspaces. States 24‑hour data deletion window in deletion card and alert for workspaces. Source: granite4.1:30b@2026-07-17-audit Confidence: low	—
Bugfix	Low	Honors hideHeader/hideMessageInput config and fixes visibility defaults in webchat. Honors hideHeader/hideMessageInput config and fixes visibility defaults in webchat. Source: granite4.1:30b@2026-07-17-audit Confidence: low	—
Refactor	Low	Replaces refresh‑permissions with OAuth reconnect for Messenger and Instagram in builder. Replaces refresh‑permissions with OAuth reconnect for Messenger and Instagram in builder. Source: llm_adapter@2026-07-17 Confidence: high	—

Full changelog

What's Changed

✨ New Features

feat(auth): add reseller SMTP routing and account credentials email template by @realcodesiman in https://github.com/ChatbotXIO/ChatbotX/pull/747
feat(worker): enable google sheets steps in flows by @viethung0o0 in https://github.com/ChatbotXIO/ChatbotX/pull/753
feat(builder): restrict flow step menu to supported steps for tiktok channel by @sung17 in https://github.com/ChatbotXIO/ChatbotX/pull/755
feat(messenger): add "Get JSON for Messenger Ads" action by @hoangle398 in https://github.com/ChatbotXIO/ChatbotX/pull/751
feat(contacts): add phone and email filters by @viethung0o0 in https://github.com/ChatbotXIO/ChatbotX/pull/756
feat(builder): replace refresh-permissions with oauth reconnect for messenger and instagram by @sung17 in https://github.com/ChatbotXIO/ChatbotX/pull/758
feat(worker): blocked-owner safe-return guard + soft-delete purge & trial+7d crons (2/3) by @realcodesiman in https://github.com/ChatbotXIO/ChatbotX/pull/727
feat(billing): trial-expired banner, disabled create surfaces, deletion card + docs (3/3) by @realcodesiman in https://github.com/ChatbotXIO/ChatbotX/pull/728
feat(webchat): identity-verified access tokens with rate limiting by @realcodesiman in https://github.com/ChatbotXIO/ChatbotX/pull/742
feat: add smart response delay by @viethung0o0 in https://github.com/ChatbotXIO/ChatbotX/pull/759

🐛 Bug Fixes

fix(integrations): unsubscribe pages from webhooks when a channel is disconnected by @viethung0o0 in https://github.com/ChatbotXIO/ChatbotX/pull/746
fix: only show bubble chat in main domain by @realcodesiman in https://github.com/ChatbotXIO/ChatbotX/pull/749
fix(worker) invalid quick replies and missing contact inbox read receipts by @viethung0o0 in https://github.com/ChatbotXIO/ChatbotX/pull/748
fix(google-sheets): remove unused google drive scope by @viethung0o0 in https://github.com/ChatbotXIO/ChatbotX/pull/750
fix(builder): make sequence step cards responsive instead of overflowing on narrow widths by @sung17 in https://github.com/ChatbotXIO/ChatbotX/pull/754
fix(conversations): stuck conversations by @viethung0o0 in https://github.com/ChatbotXIO/ChatbotX/pull/757
fix(worker): resolve variables in get user data step message by @viethung0o0 in https://github.com/ChatbotXIO/ChatbotX/pull/760
fix(redis): preserve rich types in withCache via superjson envelopes by @sung17 in https://github.com/ChatbotXIO/ChatbotX/pull/761
fix(workspaces): state 24-hour data deletion window in deletion card and alert by @realcodesiman in https://github.com/ChatbotXIO/ChatbotX/pull/762
fix(webchat): honor hideHeader/hideMessageInput config and fix visibility defaults by @realcodesiman in https://github.com/ChatbotXIO/ChatbotX/pull/763

Full Changelog: https://github.com/ChatbotXIO/ChatbotX/compare/v1.1.4...v1.1.5

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track ChatbotX, an open-source alternative to ManyChat

Get notified when new releases ship.

About ChatbotX, an open-source alternative to ManyChat

All releases →

Related context

Related tools

Earlier breaking changes

v0.2.5 Self‑hosted deployments must set ENCRYPTION_KEY environment variable and run migration and credential backfill scripts.
v0.2.5 Provider credentials now encrypted at rest using AES-256-GCM in new OrganizationCredential table.