TREK releases

No immediate action

v3.0.22 Bug fix · 10d

Details, Plan, Journey fixes

Open

No immediate action

v3.0.21 Bug fix · 19d

Photo upload count limit removed

Open

Config change

v3.0.20 Bug fix · 21d

Auth

CSP fix for HEIC

Open

Review required

v3.0.19 Bug fix · 21d

Auth

HTML escaping fix

Open

Upgrade now

v3.0.18 Breaking risk · 24d

Auth

Login timing side‑channel fix

Open

No immediate action

v3.0.17 Bug fix · 27d

APP_URL crash fix

Open

Config change

v3.0.16 Breaking risk · 28d

Service worker update required

Open

No immediate action

v3.0.15 Bug fix · 1mo

File upload fix

Open

Review required

v3.0.14 Bug fix · 1mo

Auth RCE / SSRF

Chat input visibility

Open

No immediate action

v3.0.13 Bug fix · 1mo

Notes field formatting

Open

No immediate action

v3.0.12 Bug fix · 1mo

Planner reservation exclusion

Open

No immediate action

v3.0.11 Breaking risk · 1mo

User deletion FK fix + OIDC hash preservation

Open

No immediate action

v3.0.10 Feature · 1mo

Proxmox script support

Open

No immediate action

v3.0.9 Bug fix · 1mo

Modal dismiss + reservation saves

Open

Review required

v3.0.8 New feature · 1mo

Auth Dependencies

Avatar path fix + HSTS env var

Open

Upgrade now

v3.0.7 Security relevant · 1mo

Dependencies

uuid security fix

Open

No immediate action

v3.0.6 Bug fix · 1mo

Journey sort & PDF multi‑day

Open

No immediate action

v3.0.5 Bug fix · 1mo

Attachment double‑open fixed

Open

No immediate action

v3.0.4 Bug fix · 1mo

Authentik login + delete dialog

Open

Review required

v3.0.3 Bug fix · 1mo

Auth

OIDC iss claim normalization

Open

Review required

v3.0.2 Bug fix · 1mo

Auth

OIDC issuer normalization

Open

Upgrade now

v3.0.1 Bug fix · 1mo

Breaking upgrade

Booking placement fix

Open

Config change

v3.0.0 Breaking risk · 1mo

Auth

Photos moved to Journey

Open

No immediate action

v2.9.14 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

No immediate action

v2.9.13 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

No immediate action

v2.9.12 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

Upgrade now

v2.9.11 Bug fix · 1mo

Auth

OIDC logout loop fix

Open

No immediate action

v2.9.10 Bug fix · 1mo

Reservations display + date handling + edit preservation

Open

No immediate action

v2.9.9 Bug fix · 1mo

Booking fix + download auth

Open

Config change

v2.9.8 Feature · 1mo

Auth

Configurable MCP session limit

Open

No immediate action

v2.9.7 Bug fix · 1mo

Region selection fix

Open

No immediate action

v2.9.6 Breaking risk · 1mo

Day Plan sorting fix

Open

No immediate action

v2.9.5 Bug fix · 1mo

Server crash fix

Open

No immediate action

v2.9.4 Bug fix · 1mo

Day Plan reorder fix

Open

No immediate action

v2.9.2 Bug fix · 1mo

CSP fix for OSRM routing

Open

Review required

v2.9.0 Breaking risk · 1mo

RBAC RCE / SSRF

Multi-day reservations + budget sync

Open

No immediate action

v2.8.4 Bug fix · 2mo

Corrected Docker image reference

Open

Review required

v2.8.3 Breaking risk · 2mo

Auth

OIDC_SCOPE default revert

Open

Review required

v2.8.0 Breaking risk · 2mo

Auth RBAC

In‑app notifications + Polish + Trip copy

Open

Upgrade now

v2.7.2 Breaking risk · 2mo

Auth RBAC RCE / SSRF +2 more

Security hardening

Open

Review required

v2.7.1 New feature · 2mo

Auth RBAC

Day plan transport & share links

Open

Review required

v2.7.0 Breaking risk · 2mo

Auth Breaking upgrade

Hotel → Accommodation

Open

Config change

v2.6.2 Breaking risk · 2mo

Auth

`FORCE_HTTPS` opt‑in

Open

Review required

v2.6.1 Breaking risk · 2mo

Auth RCE / SSRF Dependencies

Security fixes

Open

No immediate action

v2.6.0 New feature · 2mo

Collab add‑on enabled

Open

Config change

v2.5.7 Breaking risk · 2mo

Breaking upgrade

Reservations rebuild

Open

No immediate action

v2.5.6 New feature · 2mo

Open-Meteo integration

Open

No immediate action

v2.5.5 Bugfix · 2mo

PDF preview + tagline fixes

Open

No immediate action

v2.5.4 New feature · 2mo

Update banner

Open

No immediate action

v2.5.2 New feature · 2mo

PWA installation

Open

Review required

v2.5.1 Breaking risk · 2mo

Auth RCE / SSRF

Backup restore crash fix

Open

No immediate action

v2.5.0 New feature · 2mo

Vacay vacation day planner

Open

Config change

v2.4.0 New feature · 2mo

Auth

SSO + OSM search + self‑service

Open

No immediate action

v2.3.5 Breaking risk · 2mo

AGPL‑3.0 license

Open

Config change

v2.1.0 Breaking risk · 2mo

Auth

AGPL-3.0 license

Open