v2.2.0

What's Changed

Fixes

• Fixed embed code rendering differently across machines and browsers (#6).
• Fixed a memory leak affecting counter creation and logins.

Improvements

• Added callouts (notes) to guides and improved the guide documentation.
• Organized the codebase and introduced a shared/ folder inside public/js/.
• Updated Remix Icon from 4.8.0 to 4.9.1.

Full Changelog: v2.1.5...v2.2.0

v2.1.5

What's Changed

• Updated the in app guides
• Fixed some styling issues in the guides section.

Full Changelog: v2.1.4...v2.1.5

v2.1.4

What's Changed

• Added Automatic DB Backups (schedule + retention) in Settings.

Full Changelog: v2.1.3...v2.1.4

v2.1.3

What's Changed

• Fixed incorrect "Today" statistics.
• Cleaned up minor UI issues in the dashboard.

Full Changelog: v2.1.2...v2.1.3

v2.1.2

What's Changed

• chore(deps): bump qs from 6.14.1 to 6.14.2 by @dependabot[bot] in #5
• Bumped other dependencies
• Various UI fixes and improvements
• Added new Graphite theme and improved existing themes

Security Improvements

🔴 High

• Fixed a bug that could allow a logged-in user to delete files outside the avatars folder.

🟠 Medium

• Fixed a JavaScript injection issue in the /embed/:id.js endpoint when a counter was not found.
• Fixed a rate-limit bypass where attackers could fake their IP address to avoid login limits.
• Fixed a client-side XSS issue where some toast messages could render untrusted text as HTML.
• Blocked cross-site requests that could trigger actions on your account while logged in (CSRF protection).

🟢 Low

• Restricted avatars to safe local image files only (PNG/JPG) (previously, a user could set an avatar via the API to an external URL or
  data/SVG payload).
• Removed admin-only configuration details from the public API.
• Prevented malformed cookies from causing server errors.
• Fixed a theme value issue that could break HTML attributes.

Full Changelog: v2.1.1...v2.1.2

v2.1.1

What's Changed

• Fixed SVG embeds on GitHub not reporting view stats to the dashboard
• Integrated Prism JS code styling for embed snippets
• Minor UI/UX tweaks

Full Changelog: v2.1.0...v2.1.1

v2.1.0

New

• Counters can now be generated as SVGs, without Javascript
• Added documentation

Improvements

• Added user permissions #4

Fixes

• Fixed members not being able to create counters when private instance was enabled
• Changed avatar storage from base64 to data/uploads/avatars
• Fixed inactive counters button and description not updating based on .env
• Fixed various UI/UX and general issues

Full Changelog: v2.0.6...v2.1.0

v2.0.6

What's Changed

• Improved API performance by reducing overhead and speeding up config/session handling
• Added a progress bar to toasts to better show their duration
• Restricted delete actions to only your own counters when the toggle is enabled
• Small code cleanup and organization

Full Changelog: v2.0.5...v2.0.6

v2.0.5

What's Changed

• Fixed the edit form so it always shows the latest counter value

Full Changelog: v2.0.4...v2.0.5

v2.0.4

What's Changed

• Cleaned up a few mistakes from 2.0.3 (my bad...)

Full Changelog: v2.0.3...v2.0.4