One Time Secret

What's Changed

• Colonel admin refactoring, domain improvements, and i18n support https://github.com/onetimesecret/onetimesecret/pull/3096
• Consolidate email validation into shared module https://github.com/onetimesecret/onetimesecret/pull/3102
• Add coupon and promotion code CLI commands and enable promo codes at checkout https://github.com/onetimesecret/onetimesecret/pull/3112
• Add HousekeepingJob for running Familia model maintenance chores https://github.com/onetimesecret/onetimesecret/pull/3113
• Add redirect parameter to signup/signin URLs on Pricing page https://github.com/onetimesecret/onetimesecret/pull/3121
• Refactor region configuration to use features.regions structure https://github.com/onetimesecret/onetimesecret/pull/3125
• Persist plan selection through email verification (#3126) https://github.com/onetimesecret/onetimesecret/pull/3127
• Add housekeeping chore infrastructure https://github.com/onetimesecret/onetimesecret/pull/3129
• feat(ops): add region-scoped bulk Stripe metadata update CLI https://github.com/onetimesecret/onetimesecret/pull/3131
• Add email validation documentation https://github.com/onetimesecret/onetimesecret/pull/3133
• Simplify plan validation: fail-closed, remove legacy detection https://github.com/onetimesecret/onetimesecret/pull/3136
• improve(install-dev): add caddy webroot symlink step and clarify no-build intent https://github.com/onetimesecret/onetimesecret/pull/3138
• Add CatalogValidationError and fail-closed accumulation https://github.com/onetimesecret/onetimesecret/pull/3137
• Migrate billing schema from JSON to Zod with generated JSON Schema https://github.com/onetimesecret/onetimesecret/pull/3141
• Materialize entitlement state on Organization (Phase 2) https://github.com/onetimesecret/onetimesecret/pull/3142
• Use Familia v2.9 each_record for batched org iteration in materialize command https://github.com/onetimesecret/onetimesecret/pull/3147
• Enhance domains CLI with sorting, limiting, and vhost display https://github.com/onetimesecret/onetimesecret/pull/3146
• Refactor WithEntitlements to idiomatic Familia Feature pattern https://github.com/onetimesecret/onetimesecret/pull/3149
• Extend materialize_entitlements_for_org with skip_if_fresh and dry_run (#3134) https://github.com/onetimesecret/onetimesecret/pull/3150

Fixes

• Fix free tier TTL: align DEFAULT_FREE_TTL with free_v1 plan (14 days) https://github.com/onetimesecret/onetimesecret/pull/3119
• Fix #3089: Remove silent tier fallback, fail-closed on plan cache miss https://github.com/onetimesecret/onetimesecret/pull/3097
• Fix custom logo sizing and disabled page vertical positioning https://github.com/onetimesecret/onetimesecret/pull/3139
• Fix logo sizing for authenticated users and add LOGO_PROMINENT config https://github.com/onetimesecret/onetimesecret/pull/3144
• fix(billing): require plan_id in product metadata, drop tier fallback https://github.com/onetimesecret/onetimesecret/pull/3124

Dependencies

• Update dependency axios to v1.15.2 [SECURITY] by @renovate[bot] in https://github.com/onetimesecret/onetimesecret/pull/3087
• Update actions/upload-artifact action to v7.0.1 by @renovate[bot] in https://github.com/onetimesecret/onetimesecret/pull/3092
• Update actions/cache action to v5.0.5 by @renovate[bot] in https://github.com/onetimesecret/onetimesecret/pull/3091
• Update dependency dompurify to ^3.4.0 by @renovate[bot] in https://github.com/onetimesecret/onetimesecret/pull/3123
• Bump fast-uri from 3.1.0 to 3.1.2 in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/onetimesecret/onetimesecret/pull/3103
• Bump nokogiri from 1.19.2 to 1.19.3 in the bundler group across 1 directory by @dependabot[bot] in https://github.com/onetimesecret/onetimesecret/pull/3090
• Bump faraday from 2.14.1 to 2.14.2 in the bundler group across 1 directory by @dependabot[bot] in https://github.com/onetimesecret/onetimesecret/pull/3143
• Update pnpm to v11.1.2 https://github.com/onetimesecret/onetimesecret/pull/3132

Full Changelog: https://github.com/onetimesecret/onetimesecret/compare/v0.25.2...v0.25.3