Econumo

Econumo v1.0.0 is a complete rewrite — a new Go backend and a new React frontend, shipped as a single self-contained binary. Upgrading from v0.x involves breaking changes: please read the v0 → v1 migration guide before upgrading, and back up your database first.

⚠️ Breaking changes

• New tech stack — the PHP/Symfony backend and the Vue.js frontend are gone, replaced by a Go backend and a React 19 frontend. Everything is one self-contained binary. See the migration guide for the full upgrade path.
• New Docker image — the image moved from Docker Hub to the GitHub Container Registry: docker.io/econumo/econumo-ce → ghcr.io/econumo/econumo. The old image is no longer updated.
• .env must be rewritten — the Symfony-era variables are gone. Database selection is now a single DATABASE_URL DSN, MAILER_DSN changed meaning (a leftover v0.x value fails at boot), and several variables were renamed or removed. The migration guide has the full mapping table.
• ECONUMO_DATA_SALT is deprecated — v1 runs salt-free. If your v0.x instance had a salt set, you must run the one-off data:remove-salt migration once, or those users cannot log in. If it was never set, nothing to do.
• Everyone signs in again once — v1 stores auth tokens in the database instead of issuing JWTs, so existing login tokens are invalidated. Passwords are unchanged.

Your data is reused in place — there is no export/import. The schema is carried forward unchanged, and the new binary recognizes the old migrations on boot and applies only the genuinely new ones.

What's new

• Go backend replaces the PHP/Symfony backend (#46). One static binary in a distroless image serves the API and the web app, and runs database migrations automatically on boot. Memory consumption dropped from ~200 MB to ~10 MB, and the app got much faster. SQLite (default) or PostgreSQL, selected at runtime by DATABASE_URL.
• Redesigned React frontend replaces the Vue.js app (#58) — a rebuilt UI/UX on React 19, served from the same image, with selectable icon avatars replacing Gravatar (#71) and a range of interaction refinements.
• Revocable sessions and personal access tokens (#74) — opaque bearer tokens stored (hashed) in the database. Sign-ins create revocable sessions you can manage and revoke individually, and you can mint personal access tokens (PATs) for API access. Changing your password revokes your other sessions.
• Hardened authentication — argon2id password hashing for all new hashes (#70) and brute-force rate limiting on the public auth endpoints (#72).
• Simpler deployment — a single-service docker-compose.yml; password-reset mail via MAILER_DSN (console output by default, Resend supported).
• Dependency updates across the stack.

Migrating from v0.x

Follow the step-by-step migration guide: back up your database, switch the image, point the container at your existing data, rewrite .env, and start the stack.

The ghcr.io/econumo/econumo:latest image tag points to this build; to pin the exact version use ghcr.io/econumo/econumo:v1.0.0.

Full changelog: v0.10.1...v1.0.0