Important
This release addresses the security vulnerability PSA-2026-4QX1WG, all users are recommended to upgrade immediately.
What's Changed
- docs(security): a role address for time-critical reports instead of a personal one by @egelhaus in #2195
- fix(settings): hide the Teams tab from the User role by @giladresisi in #2200
- feat(tags): expose tag editing in the tags dropdown by @giladresisi in #1828
- fix(tags): readable calendar tag labels on any tag color by @giladresisi in #1829
- feat(calendar): open-post link icon that resolves the release URL on click by @giladresisi in #2194
- fix(calendar): surface curated provider errors in the calendar, public API and MCP by @giladresisi in #2119
- fix(billing): persist cancelAt on cancel/reactivate instead of waiting for the webhook by @giladresisi in #2112
- fix(frontend): skip the Sentry report dialog for errors from browser extensions by @giladresisi in #2165
- feat(channels): rename a channel in Postiz while keeping its original name by @giladresisi in #2190
- docs(claude): code invoked by external webhooks must not throw by @giladresisi in #2202
- feat(subscription): re-enable disabled channels when the new plan can hold all of them by @giladresisi in #2160
- fix: guard against duplicate Stripe subscriptions per customer by @giladresisi in #2061
- feat: show login method in Global Settings by @giladresisi in #2203
- fix(calendar): make the post delete icon and confirmation red, swap Delete and Preview by @giladresisi in #2204
- fix(posts): find-slot never responds when all channels are disabled by @giladresisi in #2207
- feat(calendar): channel multi-select filter above the calendar by @giladresisi in #2205
- feat(calendar): frame published posts in green with a checkmark by @giladresisi in #2206
- fix(permissions): look up the refreshed channel by internalId in the channel limit check by @giladresisi in #2208
- feat: auto text direction (RTL) in composer editor and previews by @giladresisi in #2209
- feat(sponsors): re-add chatbotx to readme by @egelhaus in #2210
- fix(instagram): map the Trial Reel publish limit error to a readable message by @giladresisi in #2215
- feat: point MCP upload tools to the CLI and public API for private files by @giladresisi in #2216
- feat: list media via public API and MCP mediaListTool by @giladresisi in #1926
- fix(frontend): honor the AM/PM date metric in the post date picker time input by @giladresisi in #2217
- fix(calendar): open-post icon handles TikTok photo posts and links that are not ready by @giladresisi in #2211
- feat(tiktok): connect UPLOAD drafts to the published post from the open-post icon by @giladresisi in #2212
- fix(calendar): put Delete right-most in the post hover bar, after Preview and Duplicate by @giladresisi in #2221
- fix(integrations): log the error behind "Authentication failed" on social connect by @giladresisi in #2225
- fix(account): ignore disabled team members when deleting an account by @giladresisi in #2226
- fix(integrations): reconnecting a channel wiped its stored refresh token by @giladresisi in #1884
Full Changelog: v2.25.0...v2.25.1