revel-backend

v1.63.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 1mo Productivity & Wikis

✓ No known CVEs patched

✓ No known CVEs patched in this version

Affected surfaces

auth deps

Summary

AI summary

Updates stripe, chore, and admin across a mixed release.

Type	Severity	Summary	CVE
Feature
Feature	Medium	Adds multi-secret verification for Stripe webhooks Adds multi-secret verification for Stripe webhooks Source: llm_adapter@2026-06-12 Confidence: high	—
Feature	Medium	Logs Stripe webhook events for auditability Logs Stripe webhook events for auditability Source: llm_adapter@2026-06-12 Confidence: high	—
Feature	Medium	Pins Stripe API version and fixes charge.refunded compatibility Pins Stripe API version and fixes charge.refunded compatibility Source: llm_adapter@2026-06-12 Confidence: high	—
Feature	Medium	Provides command to provision Stripe webhook endpoint Provides command to provision Stripe webhook endpoint Source: llm_adapter@2026-06-12 Confidence: high	—
Feature	Medium	Implements host‑as‑org binding and platform‑self guard for Stripe Implements host‑as‑org binding and platform‑self guard for Stripe Source: llm_adapter@2026-06-12 Confidence: high	—
Feature	Medium	Makes Stripe webhook task dispatch idempotent on duplicates Makes Stripe webhook task dispatch idempotent on duplicates Source: llm_adapter@2026-06-12 Confidence: low	—
Bugfix	Medium	Exposes SocialMediaMixin fields in Organization admin interface Exposes SocialMediaMixin fields in Organization admin interface Source: llm_adapter@2026-06-12 Confidence: high	—

Full changelog

chore: backfill CHANGELOG for 1.62.3 – 1.62.7 by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/490
feat(stripe): hardening phase 1 — multi-secret verify, webhook event log, idempotent dispatch (#483) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/491
fix(stripe): replay idempotent task dispatches on duplicate webhooks (#483) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/492
feat(stripe): hardening phase 2 — pin API version + charge.refunded compat fix (#483) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/493
feat(stripe): hardening phase 3 — webhook endpoint provisioning command (#483) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/494
feat(stripe): hardening phase 4 — host-as-org binding + platform-self guard (#483) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/495
fix(admin): expose SocialMediaMixin fields in Organization admin by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/496

Full Changelog: https://github.com/letsrevel/revel-backend/compare/v1.62.7...v1.63.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track revel-backend

Get notified when new releases ship.

About revel-backend

The Django backend of the Revel event platform project

v1.72.1 Makes payment base fields (`amount`, `currency`, `platform_fee`) read-only
v1.72.1 Restricts organization ownership transfer to superusers only
v1.71.0 Checkout flow now uses a two-step reserve then session creation process.
v1.68.0 check-in endpoint path renamed to use ticket code (UUID or series:<uuid>) instead of ticket ID.