Ghost

Introduced social web handle preferences and fixed various bugs related to subscriptions, security logs, email previews, and member imports.

Introduces publisher gift links, configurable admin session age, and system appearance mode, alongside various UI improvements and bug fixes.

Added markdown and llms.txt support for AI tooling and fixed various UI and analytics bugs.

This release addresses several bugs related to newsletter delivery, theme uploads, and automation editor functionality and usability.

This release introduces a beta for the automations feature and includes various bug fixes and improvements to theme validation and member portal functionality.

This update introduces long-press context menus for touch devices, improves mobile layouts and accessibility, and fixes numerous bugs across the admin toolbar, checkout, and localization.

Introduces IndexNow support for search engine notifications alongside various UI improvements, webhook enhancements, and numerous bug fixes across Admin and Portal.

Included the site title in members export filenames and fixed a sidebar member count synchronization bug.

This release introduces Klipy as a GIF provider, updates core themes, enhances tier filtering and analytics exports, and fixes several bugs.

Fixed a bug where members-only 403 errors leaked when llms.txt was disabled.

Introduces relative date filters for members and comments, a frontend admin toolbar, and various bug fixes across analytics, theme editor, and social account fields.

Introduces pinned comments, threaded comments, and member comment dislikes, alongside fixes for permalink parameters and thread connector lines.

Introduced a unified pnpm test:watch for Vitest packages and fixed a crash in the Redis adapter when storeConfig is missing.

Added a Danger Zone action to reset all authentication.

Introduces gift subscriptions and resolves several bugs affecting file uploads, UI responsiveness in Safari, and embed functionality.

This release enables comments by default, introduces a built-in theme code editor, migrates redirects downloads to YAML, and fixes a social accounts type issue.

Introduced a social_accounts block helper for themes and fixed bugs related to member label updates and API timeouts.

Improved checks for complimentary subscriptions during the member creation process.

This release introduces an admin UI for social accounts, expands the file upload allowlist, and includes various bug fixes and translation updates.

Improved private site access controls and fixed various bugs related to RTL language rendering, admin redirects, and member imports.

This release fixes various UI bugs related to label filters, member filter visibility, and editor toolbar positioning.

This release includes bug fixes for admin session rotation, oEmbed bookmark card fallbacks, member email suppression, and Gmail inbox links.

This release adds a Preview tab to the welcome email editor and fixes several bugs related to the Portal share modal, scheduled emails, and email editor modals.

Updated Source and Casper themes and improved Members list filtering.

This release includes fixes for minor bugs and issues reported by users.

This release fixes bugs related to admin screen deep-linking when logged out and missing tiers in member edited webhooks.

Introduced share buttons for posts, added CDN base URL support for assets, and updated Source and Casper themes.

Added slug to the members tier filter search.

This release addresses minor bugs and issues reported by users.

This release addresses various minor bugs and issues reported by users.

This release includes minor bug fixes and general stability improvements reported by users.

Introduces Transistor.fm integration and fixes bugs related to content blockers, admin URLs, and email post attributions.

This update introduces file upload validation, updates theme dependencies, improves the signup flow, and fixes several bugs across font rendering, API member creation, and domain warming.

This release introduces retention offers, updates the About dialog with build versions, and fixes bugs in the comments API and Welcome Emails editor.

Updates Source and Casper themes and fixes bugs related to post images, the retention offer flow, and Editor settings views.

This release expands available cards in the welcome email editor and fixes several bugs related to CDN asset URLs, contributor navigation, and member label searches.

This release addresses various minor bugs and issues reported by users.

Added Feedbin support for Inbox Links and fixed a sign-out redirect issue for subdirectory sites.

This release includes several bug fixes for file uploads, permission checks, and the User API, along with performance optimizations for comment counts and new Turkish translations.

This release includes various bug fixes for inbox links, asset generation, redirects, and CORS errors, along with updated translations for multiple languages.

This release fixes several bugs related to the editor, email newsletter cards, member filters, and mobile responsiveness, while updating Bulgarian translations.

This release fixes a SQL injection vulnerability in the Content API slug filter and adds explanatory messages for hidden or deleted comment links.

This release fixes bugs related to post stats navigation, Content API settings, comment permalinks, and login redirects.

Fixed issues with email image rendering and the reply-to address for welcome emails.

Fixed an issue where welcome emails used the noreply address instead of the default newsletter reply-to address.

Introduces welcome emails for members, updates asset hashing to SHA256, and fixes issues with Gmail inbox links and Medium bookmarking.

Fixed the from address for Gmail inbox links.

Fixed an issue with Unsplash integration for Publication Cover images and added new translations for Serbian, Bulgarian, and Vietnamese.

Introduces comment permalinks, an admin moderation screen, and an email app button for signups, alongside various bug fixes and translation updates.

This release addresses minor bugs and issues reported by users.

This release includes UI improvements for paid members charts and disabled commenting states, alongside fixes for admin post loading and card editing scroll issues.

Fixed XSS vulnerabilities in Portal, updated member initials, introduced a new admin shell and sidebar, and renamed the dev:forward script.

Introduces automatic domain warm up, transitions to Stripe billing portal, and resolves various bugs related to analytics, membership upgrades, and sitemaps.

This release addresses minor bugs and issues reported by users.

Introduced web traffic filters, fixed reply form and upgrade mode bugs, and updated Chinese and Bulgarian translations.

This release includes fixes for minor bugs and issues reported by users.

Introduces IndexNow integration for faster search indexing, enhances paid subscription tooltips, and fixes sorting in the Growth tab Sources table.

This release addresses multiple critical security vulnerabilities including SQL injection and authorization bypasses, while adding an Admin API endpoint for comments and email clipping warnings.

This release addresses several security vulnerabilities, including SQL injection, SSRF, and authorization bypasses in staff tokens and 2FA flows.

This update includes several bug fixes for analytics, navigation, and UI, alongside enhancements to internationalization and signup form input types.

This release addresses minor bugs and issues reported by users.

This release includes minor bug fixes and issue resolutions reported by users.

This release includes various bug fixes for tier data, ActivityPub federation, analytics, and post formatting, alongside new Swedish, German, and French translations.

This release fixes Admin visual regressions, corrects email analytics timestamping and aggregation, and adds Russian translations for OTC strings.

Fixed bugs related to email analytics aggregation and recurrence timestamps.

This update introduces topic exploration in the Network tab, adds Analytics APIs to robots.txt, and provides new Finnish translations.

This release addresses various minor bugs and issues reported by users.

This update improves the members flow E2E framework and fixes bugs related to theme settings, member attribution stats, table loading states, and email comment links.

Added discovery feeds to the Network tab, moved password reset flow support, and fixed issues with magic link validity and onboarding redirects.

Fixed an issue where magic links were only valid for ten minutes.

Added a Banner component to the Shade design system, fixed various UI and environment bugs, and expanded translations for several languages.

Fixed an issue where gscan did not support the new split helper.

Fixed a bug in Safari where tags were loaded incorrectly during editing.

Fixed an issue where tags were loading incorrectly when edited in Safari.

Introduced a One-Time-Code flow for member sign-in and added a split helper to theme handlebars helpers.

This release includes various bug fixes for Portal, inbox previews, and billing upgrades, along with updated and new translations for multiple languages.

This release addresses minor bugs and issues reported by users.

Improved the What's New feature to hide updates for new users.

Fixed an issue where settings changes were not reflected in the Billing App.

Added a uuid column to the tokens table and fixed the MRR chart lookback in the Growth analytics tab.

This release fixes an issue with the Esc key in post previews and updates translations for Russian, Portuguese (Brazil), and Bulgarian.

Fixed a Server-Side Request Forgery (SSRF) vulnerability in the oEmbed endpoint.

Fixed bugs related to Analytics settings, duplicate posts in tag archives, and limit update refreshing.

Fixed a security vulnerability involving server-side request forgery (SSRF) via the oEmbed endpoint.

This release addresses minor bugs and issues reported by users.

This release includes fixes for minor bugs and issues reported by users.

Fixed validation issues for social media usernames, resolved Outlook header image bugs, added staff invitation pagination, and introduced Basque translations.

Updated Italian translations for comments and notifications.

This release fixes ActivityPub admin access, improves Instagram username validation, and updates Bulgarian translations.

Fixed an issue where the preview route for published posts bypassed the redirect to the post URL.

Fixed a bug where the preview route for published posts bypassed the redirect to the post URL.

Updated French translations across all packages.

Introduces native Web Analytics and ActivityPub federation, while removing AMP, legacy Node.js support, and several API endpoints.

This release addresses various minor bugs and issues reported by users.

Introduces native Web Analytics and ActivityPub federation while removing AMP, legacy endpoints, and support for Node.js v18 and v20.

Introduces native Web Analytics, ActivityPub federation, and various bug fixes, while removing AMP, legacy Node.js support, and several API endpoints.

This release addresses minor bugs and issues reported by users.

Introduces native Web Analytics and ActivityPub federation while removing AMP, legacy Node.js support, and several API endpoints.

Introduces native Web Analytics, ActivityPub federation for Ghost sites, security fixes, and several removals including AMP and Node.js v18/v20 support.

Implemented protection against homograph attacks using punycode domains during member sign-in.