This release adds 3 notable features for engineering teams evaluating rollout.
Published 4mo
Productivity & Wikis
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
api
journal
stocks
trading
Affected surfaces
auth
deps
Summary
AI summaryUpdates Bug Fixes, New Features, and Performance across a mixed release.
Full changelog
New Features
- WebAuthn/Passkey login support - Passwordless authentication via biometrics and security keys
- Shell trade and fill order API endpoints - New API for creating shell trades and filling orders
- Automated trial conversion emails - Personalized emails with admin tracking
- Cookie consent banner - GDPR-compliant PostHog analytics consent
- Comprehensive CSV parser test suite - CI test gate for parser changes
Performance
- Eliminate live Finnhub calls from page loads - Cache analytics until invalidated, significantly reducing API calls
- Prevent unnecessary earnings/news re-fetches during auto-update cycles
Bug Fixes
- iOS app connectivity - Server discovery endpoints now use
INSTANCE_URLenv variable, fixing HTTPS detection behind reverse proxies - IBKR broker sync - Multiple fixes for duplicate trade/execution detection, multi-day positions, and Flex Query multi-section CSV support
- CSV parser timezone - Convert import times to UTC using user's timezone
- Alpaca - Fixed options price fetching
- TradingView - Unified parsers into single broker with auto sub-format detection, futures support, lastTradeEndTime error fix
- Webull - Support alternate CSV export format
- Lightspeed - Fix parseLightspeedTransactions return value
- Tradovate - Fix date parsing and auto-close expired options on broker sync
- Calendar - Fixed risk context, totals display, and added YTD profit
- R-Multiple - Use backend weighted_target_r for planned risk:reward consistency
- API key auth - Fix authentication on GET /trades/:id
- Partial fills - Fix closing trades prematurely
- Strategy filter - Fix strategy filter behavior
- Time period filter - Include exit dates in filtering
- Account identifier - Fix overflow display issue
Improvements
- Updated date handling with support for multiple target hit analysis entries
- Improved import page responsiveness
- IBKR flex query sync now includes older trades
- Hardened backend against Snyk code findings
- Added nginx security headers
- Direct SQL for broker sync operations (replacing ORM for reliability)
- Docker build compatibility fixes
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]