Ovumcy

Improved Italian localization consistency and resolved CI blocking issues.

Updated privacy and medical copy for accuracy, refined pregnancy-test feedback, and fixed future period entry rendering.

Unifies BBT ovulation detection using a 3-over-6 coverline with disturbance rejection and implements various security, accessibility, and performance improvements.

Adds notification surfaces, calendar feeds, per-user timezone and week-start preferences, and Italian localization, alongside security hardening and OIDC updates.

Upgraded the web framework to Fiber v3 to resolve a security vulnerability, with an updated CSRF validation process requiring TRUST_PROXY_ENABLED for HTTPS reverse proxies.

Introduces single-binary packaging, enhances OIDC security, updates BBT data handling, and improves accessibility, while removing a legacy day-delete endpoint and changing JSON export shapes.

Added the ability to restore data from JSON backups via settings or a new API endpoint, featuring additive importing and input validation.

Introduces declarative owner provisioning via the operator CLI and enables isolated household self-hosting with an owner-role-only model.

A security and quality release featuring a comprehensive security audit follow-up, medical alignment for cycle predictions, multi-language localization, and major frontend dependency upgrades to htmx 2 and Tailwind 4.

Added a pregnancy test day field to the dashboard, calendar, and API, and implemented owner-gating for all read endpoints to improve security consistency.

This release improves security through recovery-code normalization, dependency updates, and supply-chain verification, while enhancing documentation and testing infrastructure.

This release fixes a day-save bug for UTC-minus locales and improves security by requiring TOTP for OIDC account linking when 2FA is enabled.

v1.0.0 establishes a stable public API contract by moving all endpoints to /api/v1/, introduces GDPR compliance controls, and implements OIDC account-linking hardening.

Implements extensive security hardening for OIDC, 2FA, and session management, introduces new test suites, and adds a schema migration for register-pickup tokens.

Introduces TOTP two-factor authentication, comprehensive security hardening including rate limiting and new security headers, and fixes Docker healthchecks for scratch-based images.

Fixes a calendar day shift bug for users in UTC-minus timezones by adjusting how date-only values are read.

This patch release implements trusted continue-target tokens for recovery confirmation redirects and restores the Docker image publish workflow.

Introduces owner visibility controls, a dashboard cycle-overview hero, and enhanced security hardening for recovery UX and CI automation.

This patch release addresses Go Report Card warnings and refactors OIDC validation logic to reduce cyclomatic complexity without altering runtime behavior.

A patch release that corrects the v0.8.3 release commit and includes security hardening for the local OIDC browser-test runtime helper.

Fixed a runtime regression for SECRET_KEY_FILE absolute paths and updated README documentation and badges.

Introduces file-backed runtime secret sources, French and German UI localization, and updates repository and image registry paths.

Updates prediction explanation copy, improves owner-facing cycle-factor explanations, refines settings UX, and expands cross-browser testing coverage.

This release improves secure deployments with HSTS support, updates the runtime container to Alpine 3.22.3, and fixes Spanish localization and API error rendering.

Introduces owner-only cycle factor tracking, refines sparse-data insights, and improves dashboard UX and security coverage.

Introduces PDF export, expanded cycle tracking, registration controls, and a local operator CLI, along with security hardening and improved deployment defaults.

Added Spanish UI localization, replaced native date inputs with localized segmented fields, and expanded test coverage for language switching and accessibility.

Introduces owner-managed custom symptom lifecycles, timezone stability for onboarding and settings, and improved validation for custom symptom management.

The frontend was updated for strict Content-Security-Policy compliance by removing Alpine and inline scripts and correcting the web app manifest content type.

This patch release focuses on reorganizing transport responders, improving test coverage stability, and updating local startup documentation.

Introduces installable mobile PWA support, enhanced security automation, browser hardening headers, and general backend quality improvements.

Introduces optional Postgres support for advanced self-hosted deployments, including a compose stack, reverse-proxy examples, and enhanced security hardening, while maintaining SQLite as the baseline default.

Introduced dark mode, enhanced registration UX, improved mobile layouts, and shifted day editor to explicit saving.

Initial release of Ovumcy, a privacy-first self-hosted menstrual cycle tracker featuring cycle tracking, predictions, partner mode, and data export.