Changelog

What's new?

No new features in this release.

What's fixed?

• Network access settings now show a clear active state, explain which areas are IP-restricted, list the effective allowlist, and move editing into a focused dialog consistent with other service settings.
• Catalog titles explicitly use the shared system typography.
• The feedback administration panel no longer shows an unrelated public GitHub privacy warning.
• Footers now include a compact link for reporting a software bug.

What's new?

No new features in this release.

What's fixed?

• Parent and child request workflows use consistent icon-only actions for approval, completion, revision, rejection, cancellation, reward requests, and reward or goal proposals.
• Lithuanian settings and feedback wording is shorter and clearer.
• Deployment prerequisites no longer include a maintainer-specific registry login command or a release-specific migration notice.
• Workflow action icons keep matching state colors and stay on one row across parent and child layouts.
• Child-device pairing actions share one responsive two-column row without overlapping.
• The parent feedback panel uses compact privacy guidance and relies on the existing footer GitHub link instead of a large duplicate bug-report button.

What's new?

• Parents can pair each child browser or installed PWA with a one-time, short-lived link, review paired devices, rename them, and revoke one or all devices. A child PIN remains a second authentication step.
• Parents can optionally restrict child pages or the entire application to explicit IP addresses and CIDR networks. A server command can disable the restriction after accidental lockout.
• Production deployment supports host Nginx/Caddy, container-based proxies such as Nginx Proxy Manager, and Traefik without coupling the base Compose configuration to one proxy.
• Release tags publish one multi-platform GHCR application image for AMD64 and ARM64 installations.

What's fixed?

• Existing child profiles and PINs remain valid after upgrade, but every child browser or PWA must be paired once. Existing child push subscriptions are removed and must be enabled again on a paired device.
• In-app feedback is explicitly private family feedback, while software defects link to GitHub Issues with a warning not to include family data.
• Installation and updates validate the configured UID/GID ownership of writable host directories and pull the versioned application image.
• Scheduled maintenance also expires stale security counters, pairing links, and sessions.
• Parent login, password-reset, and child-PIN attempts are rate-limited using server-side database counters.
• Forwarded client IP headers are accepted only from configured trusted proxies, and the optional network allowlist uses the resulting verified client address.
• Child push subscriptions are bound to an approved device, pairing links are one-use and short-lived, and stored device credentials are hashed.
• The Django administration route is disabled by default in production.
• A regression test verifies that the generated VAPID private key is an actual usable EC private key.

What's new?

No new features in this release.

What's fixed?

• Settings use shorter section, field, and save-action wording in English and Lithuanian.
• The application footer links to the KinKudos GitHub repository.
• Family and per-child lottery checkboxes keep a consistent compact size and align correctly on desktop and mobile layouts.
• Child cards use consistent punctuation for the credit limit and weekly lottery status, with the credit-limit information icon closer to its label.

What's new?

No new features in this release.

What's fixed?

• Parents can configure the lottery ticket price and per-child weekly purchase limit, disable the lottery family-wide, and disable it for individual children. The family-wide switch has priority, while an already-open ticket remains available to finish.
• Task and reward catalog names plus parent action-dialog explanations now use the shared interface font consistently.
• Parent child cards show remaining weekly lottery tickets and use tighter spacing below the credit limit.
• The Lithuanian feedback email label uses shorter wording.