This release includes 1 security fix for security teams reviewing exposed deployments.
Published 1mo
Productivity & Wikis
✓ No known CVEs patched
This release patches 1 known CVE
Affected surfaces
deps
Summary
AI summaryEvents now support ticket revenue reporting, timezone-aware notifications, and new schedule/timeline features; announcements added scheduling and new‑signup delivery; API exposes event timezone and feature flags.
Full changelog
What's Changed
- docs: document runtime-configurable frontend image for self-hosting (#396) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/503
- chore(locale): add inclusive French translations and fix German translation mismatches by @florimond-collette in https://github.com/letsrevel/revel-backend/pull/504
- fix: feedback-session quick wins (#514, #509, #520) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/525
- feat(tickets): expose applied discount code per ticket in admin (#516) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/526
- fix(questionnaires): expose requires_evaluation on submissions (#508) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/527
- feat(events): per-event ticket revenue endpoint (#515) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/529
- fix(observability): cut redundant 4xx log noise, lock in 500 traceback capture (#480) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/532
- feat(notifications): immediate transactional emails + digest overhaul (#506, #507) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/533
- chore(i18n): revert ADR-0006 — build .mo, enforce .po completeness by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/534
- fix(deps): bump aiohttp & cryptography to clear pip-audit CVEs by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/535
- feat(events): sortable admin ticket list (#517) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/536
- feat(events): track offline ticket refunds in event revenue (#528) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/537
- feat(announcements): scheduled announcements + send-to-new-signups (#521, #522) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/538
- feat(events): event schedule / timeline (#524) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/539
- claude: update CLAUDE.md to follow Karpathy and Ponytail approach by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/540
- feat(events): hard-delete unused discount codes, else deactivate (#519) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/541
- fix(notifications): always render event times in the event's timezone (#511) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/542
- feat(moderation): admin delete + food-item name blocklist (#545, #547) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/549
- feat(api): expose event timezone and announcement audience (#548, #543) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/553
- feat(events): revenue & VAT report bundle, scheduled delivery + org financial endpoints (#550, #551, #552, #556) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/554
- refactor(api): replace Ninja Query/Body type-arg ignores with Annotated idiom (#557) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/558
- feat: self-hosting support + feature-flag taxonomy (closes #561, #560) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/562
- feat(api): expose user-facing feature flags in /version (closes #563) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/564
- feat(seed): structured timeline schedules on bootstrap events by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/565
- chore: bump 1.64.0 + changelog by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/566
Full Changelog: https://github.com/letsrevel/revel-backend/compare/v1.63.1...v1.64.0
Security Fixes
- dep: bump aiohttp & cryptography to clear pip-audit CVEs
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v1.72.1 Makes payment base fields (`amount`, `currency`, `platform_fee`) read-only
- v1.72.1 Restricts organization ownership transfer to superusers only
- v1.71.0 Checkout flow now uses a two-step reserve then session creation process.
- v1.68.0 check-in endpoint path renamed to use ticket code (UUID or series:<uuid>) instead of ticket ID.
Beta — feedback welcome: [email protected]