Skip to content

Tymeslot

v0.99.0 Feature

This release adds 5 notable features for engineering teams evaluating rollout.

Published 2mo Productivity & Wikis
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

appointment appointment-booking appointment-scheduling appointments calendar calendars
+6 more
calendly-alternative docker elixir phoenix-liveview postgresql scheduling

Affected surfaces

auth rbac rce_ssrf

Summary

AI summary

Fix reCAPTCHA v3 hook so booking form token is populated on submit.

Full changelog

[0.99.0] — 2026-02-18

Bug Fixes

  • core: Fix failing and flaky tests across multiple test modules
  • core: Remove unused LinkAccessPolicy alias in theme integration test
  • core: Move @moduletag after use in all test modules
  • core: Add @moduletag :security to rate_limiter_dashboard_test
  • core: Add @moduletag taxonomy tags to test modules
  • core: Remove @moduletag inserted inside alias blocks in test files
  • core: Sort Tymeslot.Security aliases alphabetically in auth modules
  • core: Rename anonymous _ variables to _error in input validators test
  • core: Remove unreachable list guard in booking orchestrator
  • core: Remove unreachable catch-all clause in theme customization rate limiter
  • core: Correct @spec type for assign_form_errors from list() to map()
  • core: Remove unreachable nil guard in assign_theme_customization_data
  • core: Address review issues in webhook input validation sanitization
  • core: Add UniversalSanitizer to webhook name and URL validation
  • core: Update rhythm theme confirmation page layout and label
  • core: Fix reCAPTCHA v3 hook so booking form token is populated on submit
  • core: Fix honeypot visibility and recaptcha disclaimer layout in booking themes
  • core: Fix logger_json formatter config for OTP 28
  • core: Remove unreachable clause in sanitize_css_class
  • core: Fix type errors in proxy verifier
  • test: Make availability fetch truly synchronous in tests
  • core: Align credo version and resolve sitemap routing issues
  • core: Handle HTML entity escaping in theme readiness error test
  • core: Resolve compiler warnings and test failures
  • core: Exclude Credo checks from compilation paths
  • core: Add Phoenix.CodeReloader listener to mix.exs
  • core: Resolve Credo warnings for nested module aliases and line length
  • core: Handle empty string meeting_id in custom video provider

Features

  • core: Add rate limiting to all dashboard write operations
  • core: Add rate limiting to all dashboard write operations
  • core: Implement structured logging with logger_json
  • security: Add spam protection to booking forms with honeypot and reCAPTCHA v3
  • security: Add rate limiting to theme customization and meeting operations
  • core: Add Zimbra calendar provider with SSRF protection
  • core: Fix proxy authentication and add verification tools

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Tymeslot

Get notified when new releases ship.

Sign up free

About Tymeslot

Privacy-first scheduling platform

All releases →

Related context

Beta — feedback welcome: [email protected]