Rallly

Fixes a regression in v4.11.0 that caused self-hosted instances to crash by removing environment validation from the client bundle.

This release updates poll defaults to time-based options, improves participant anonymity, optimizes first load speeds, and fixes timezone and OTP bugs.

Fixed an issue allowing unregistered voters to edit responses via confirmation email links when participants are hidden.

This release addresses security vulnerabilities CVE-2026-23870 and the Next.js May 2026 advisory by upgrading Next.js and React versions.

Introduces the Rallly CLI for simplified instance management, adds a version tile to the control panel, optimizes invite page queries, and fixes a localization bug in confirmation emails.

Added a server-side upload proxy to support self-hosted S3 storage.

Fixed file upload failures forCH for self-hosted setups1ASNM setups using Garage and other S3-compatible storage backends.

Introduces custom space branding with primary color and logo options, alongside UI improvements and various bug fixes.

Fixes a client-side crash on the registration page and adds click-and-drag functionality to the poll table view component.

This release introduces notification settings, UI enhancements including a new time zone selector and error pages, and various bug fixes.

Fixed a bug that caused a redirect to login when accessing the poll admin.

Removed corepack and pnpm from the runtime image to reduce size and dependencies.

Fixed corepack cache directory permissions in the Docker image to resolve startup failures.

This release introduces server-side calendar link handling, iframe rendering prevention, redirect fixes, and a new poll list dropdown menu.

This update enables account linking, updates poll status names, and upgrades Prisma to v7.3.0.

Added links to the white labeling documentation on the License and Branding pages.

Fixed a client-side crash occurring when accessing the profile and general settings pages.

Fixed a bug where email edit links for participants would expire prematurely.

This update introduces full dark mode support, enterprise white-labeling options, Gravatar integration, and various performance improvements.

Fixed a bug where anonymous users were incorrectly included in the total user count and control panel display.

This release provides critical security fixes via updates to upstream dependencies.

Fixed login issues for certain Microsoft users and those with expired sessions, and updated translationsSSPtranslations.

Updates React to patch high-severity Denial of Service and source code exposure vulnerabilities including CVE-2025-67779.

This release provides security updates for Next.js and React to address vulnerabilities CVE-2025-55183 and CVE-2025-55184 related to the React Server Components protocol.

Fixes an issue allowing participants to edit responses via confirmation email links even when sessions are expired or they are logged out.

This release updates dependencies, adds missing translations, and fixes a bug affecting scheduled event email deliveries.

This critical security update upgrades Next.js to address CVE-2025-66478.

This patch release includes bug fixes and a security update to prevent participant data exposure via the API.

This release includes bug fixes for user deletion and email localization, updates to the Dockerfile, and UI improvements for pro spaces and pinging indicators.

This patch release provides critical security fixes and hardens permission checks to address multiple CVE vulnerabilities.

Improved OIDC provider security by enabling PKCE and added handling for legacy Google and Microsoft redirect URIs.

This release fixes OIDC login redirect URI issues, updates Posthog and Crowdin, and improves environment variable handling and user input trimming.

Fixed an incorrect authentication client base URL.

Added password-based login support and updated the user session strategy.

This release fixes the participant count and includes updated translations via Crowdin.

This release improves ICS calendar lifecycle management, adds environment variables to control email login and registration, and enhances SMTP security defaults.

Fixed a bug where a missing PORT environment variable caused healthcheck failures in Docker containers.

Introduces Spaces for organizing polls and events and re-adds ARM support for the official Docker image.

Fixed an event page start time bug and added the ability to cancel scheduled events.

This release fixes a broken link, updates the Microsoft Entra ID provider configuration, and includes new Crowdin translation updates.

This patch release includes updated translations, UI improvements, and bug fixes.

Introduces a new Control Panel Settings page with a user registration toggle, adds enterprise license support for unlimited seats, and fixes a vote submission bug.

Fixes an issue preventing S3-backed file storage from functioning correctly on self-hosted instances.

Rallly v4.0.1 now requires the OIDC_ISSUER_URL environment variable to be explicitly set for stableC OpenID Connect authentication to ensure stable logins.

Version 4.0.0 introduces a refreshed UI, S3 storage support, a new administrator control panel, and a licensing model for multi-user self-hosted instances.

Adds support for the Japanese language and fixes a bug related to deleting user accounts with deleted polls.

Fixed an issue with the file content of the event ICS download button.

This update introduces OAuth profile image integration, avatar UI improvements, and several bug fixes regarding sessions, emails, and ICS downloads.

Fixed an issue where guest users did not receive emails in their preferred language.

This release updates transactional email templates, adds support for localized email notifications, and fixes a page rendering issue.

This release introduces infinite query for polls, an 'add to calendar' button, Pro badge visibility, and several bug fixes related to timezone handling and account deletion.

Added support for custom OIDC claim paths for name, email, and picture via environment variables to improve identity provider compatibility.

Updated to Node 20, added an icon guide, improved participant selection persistence, and updated Crowdin translations.

This release introduces account deletion, asynchronous finalization emails, improved UI screens, and various security hardening and bug fixes.

This release updates time zone handling to use geographic zones, improves UI responsiveness for adding participants, and fixes bugs related to token rendering and verification links.

Fixed a bug preventing successful redirection to login when accessing the polls page.

This release includes layout and style updates, form validation feedback, Docker network improvements, plain text email versions, and customizable email sender names.

Added a fallback to the given_name field when parsing profiles from identity providers.

This update improves compatibility with OAuth providers using non-standard OIDC fields and includes various bug fixes and updated translations.

Fixed a bug when finalizing polls with deleted options and updated translations.

Fixed a bug that prevented the Single Sign On option from displaying on the login page.

Introduces Single Sign On (SSO) support for any identity provider that supports OpenID Connect (OIDC).

This update includes various bug fixes and internal improvements.

Fixed a bug that caused 6-digit verification codes to fail during login.

Updated session handling to fix guest session expiration and added a login option for invite pages.

This update includes important bug fixes and updated translations.

Added an option to make participant emails required and displayed them in the participant dropdown menu.

This update adds participant emails to the dropdown and fixes the allowed email address matcher.

Rallly 3.0.0 introduces a UI update, poll finalization, duplication, and custom settings, while requiring SMTP configuration and user authentication.

Fixes an issue where the incorrect end time was displayed when using the UTC time zone.

Introduces a NOREPLY_EMAIL configuration for transactional emails and updates email template styling and content.

This release introduces new support documentation, a new SMTP_TLS_ENABLED environment variable, a middleware bug fix, and various updates to legal pages and translations.

Fixed Docker image version formatting, updated translations, and improved query invalidation.

This release updates translations and fixes an issue where homepage links were incorrectly localized.

This update improves application performance by fixing bottlenecks in transactional email rendering and reorganizing the codebase into packages.

Fixes a bug where deleting a date option incorrectly reset votes for other date options.

Fixes a database issue where incorrect times were stored by ensuring all timestamps are stored in UTC and converted on the client side.

Updated poll option storage, fixed event end time bugs, improved the time picker component, and updated email placeholders and translations.

This update improves readability with a more saturated color palette and includes various bug fixes, translation updates, and internal maintenance.

Fixed an issue where user-entered links were not styled correctly.

This update streamlines poll creation for logged-in users, allows multiple users to receive notifications, displays poll status in lists, and includes various bug fixes and translation updates.

Added highlighting for the highest-scoring poll options, integrated a feedback form, and updated translations.

Added Vietnamese language support, updated existing translations, and implemented conditional PostHog initialization.

Added the ability to change a participant's name via the dropdown menu on both desktop and mobile.

This release fixes the DISABLE_LANDING_PAGE setting, adds participant email capture in PostHog, and updates translations.

Suspends arm64 docker builds and introduces new environment variables for securing self-hosted instances via authentication and email restrictions.

This release adds pollId to event capturing, allows SMTP configuration without authentication, and updates translations.

This update improves user onboarding, adds magic link login, updates the notification flow, and includes various bug fixes and UI enhancements.

Fixed the Dockerfile build process.

Fixed a bug regarding the wrong scope used in the Dockerfile.

This release introduces participant email edit links, improves the participant workflow, refactors email templating, and switches to turborepo alongside various dependency updates.

Introduced email-based edit links for participants, updated participant workflows, and performed significant internal refactoring including a switch to Turborepo and Next.js layout features.

This update improves the participant page width, restores the day of the week in date options, and includes several CI/CD and dependency updates.

Improved mobile poll usability, updated Swedish translations, and upgraded several dependencies.

This first versioned release reorganizes scripts into a dedicated folder and adds a release script.