Ovumcy v0.5.0

Release date: 2026-03-15

Highlights

Added PDF export with embedded fonts for printable cycle summaries alongside CSV and JSON export.
Expanded owner tracking with advanced cycle inputs and richer insights, including BBT and cervical mucus support.
Added REGISTRATION_MODE=open|closed so self-hosted operators can disable new self-service sign-ups on internet-facing instances.
Added a local operator CLI for account audit and removal: users list and users delete <email>.

Auth and settings flows were hardened so login passwords are no longer stored in browser storage, logout/delete-account clear all auth-related cookies consistently, and request/security logs avoid raw health-date paths.
Browser and backend regressions were expanded across auth, onboarding, settings, export, mobile layout, and destructive flows to keep HTML, HTMX, and JSON contracts aligned.
The base self-hosted compose path now binds to loopback by default, reducing accidental public exposure while keeping dedicated reverse-proxy stacks as the supported public deployment path.

This release includes forward-only database migrations. Back up your SQLite file or Postgres data before upgrading, then restart Ovumcy and let the built-in migration runner apply the new schema versions.
Existing deployments can upgrade in place and pin OVUMCY_IMAGE=ghcr.io/terraincognita07/ovumcy:v0.5.0 if they do not want to track latest.
If you run a public or otherwise operator-restricted instance, review REGISTRATION_MODE in your .env before restarting.