1.24.0 (2026-03-05)
Features
- account linking and merge UI for cabinet (93f97d4)
- account merge flow — merge redirect, error handling, server-complete linking (2fc0759)
- add sales_stats RBAC permission section to frontend (262303d)
- add Telegram account linking UI with CSRF protection (a6fabb1)
- open OAuth linking in external browser from Telegram Mini App (7c30a1e)
- кликабельные имена пользователей в последних платежах (e278fec)
Bug Fixes
- accessibility, query cache clear, post-merge navigation (e447e99)
- add Referrer-Policy to prevent merge token leakage via Referer header (584f002)
- double-click guard on link, wall-clock timer, blur cleanup (8ad0500)
- harden merge UI and improve error handling (58cf1e3)
- merge: accessibility, token guard, state cleanup (579f47e)
- move useState before useMutation for consistent hook ordering (fba4481)
- prevent onBlur race cancelling unlink confirmation (3418ba9)
- remove unused linkTelegramWidget i18n key from all locales (9b4a851)
- replace window.confirm with inline confirmation for unlink (d0c01a0)
- review findings — polling fallback, sessionStorage cleanup, UX (da1926f)
- second round review fixes for merge UI (aa26059)
- заменить Tailwind green/emerald классы на success из темы (86f75f2)
- заменить хардкодный зелёный (#3EDBB0) на акцентный цвет из темы (d526d09)