Releases

What's new in each version of PastorApp.

v2026.5.21.0634May 21, 2026

Release v2026.5.21.0634

Released on 2026-05-21

Summary

This release introduces Anthropic-powered AI features (contact summaries and a message composer assistant), adds an audience-gating system for the global widget/query library so Catholic and non-Catholic tenants see only relevant items, and brings the codebase to a clean lint/build state under Next.js 16's stricter React Compiler rules.

What's Changed

New Features

Add Anthropic AI contact summaries with 1-hour Redis cache, plus a Sparkles-triggered AI message assistant inside mpCommunicationHub (cleanup, draft-from-notes, concise, friendly, formal, expand, translate) with mid-stream cancel (#277)
Gate global library queries and components by tenant audience (all / non_catholic_only / catholic_only) so super-admins can hide items like the birthday widget from Catholic tenants without code changes; render-time filter handles audience flips without destructive migrations (#284)

Improvements

Drive npm run lint to 0 errors and npm run build to green under Next.js 16's React Compiler rules — replaces setState-in-effect, impure render calls, and in-render component definitions with lazy initializers, prev-value sentinels, callback-ref measurement, and module-scope helpers (#278)

Dependencies

Fix high-severity liquidjs DoS advisory and collapse the postcss / next / better-auth dependency chain (3050765)
Bump safe patch/minor dependencies from audit (3b80578)

Notes

New env vars: ANTHROPIC_API_KEY (required for AI features) and ANTHROPIC_MODEL (optional override).
AI endpoints (/api/ai/contact-summary, /api/ai/message) gate on session + tenant + tenant.settings.general.ai_features; /api/ai/message returns a clear 503 when the API key is missing.
src/providers/neon/0003_audience.sql must be applied to any target environment before deploy — it adds the audience enum, the audience columns on queries and components, and partial indexes for global rows.

Contributors

Thanks to the following contributors for this release:

@chriskehayias

Full Changelog: v2026.4.29.1444...v2026.5.21.0634

Generated with Claude Code

View on GitHub

v2026.4.29.1444April 29, 2026

Release v2026.4.29.1444

Released on 2026-04-29

Summary

This release adds an AI-powered MP Chat assistant for querying MinistryPlatform data conversationally, completes a multi-phase cleanup that strips sensitive console logging from production runtime, and applies several rounds of security and dependency patches.

What's Changed

New Features

Add MP Chat integration: conversational AI assistant for querying MinistryPlatform data via the MP-MCP partner API, with floating action button, conversation history, and tenant-level admin toggle (#270)

Improvements

Strip sensitive non-error logging from production runtime — removed ~715 lines of console.* calls leaking PII (contact data, emails, names), tenant identifiers, OAuth/session details, and MP API payloads across pastoral data, communications, MP API layer, services, auth, providers, builder/dashboard/calendar UI, and app routes (#273)
Enable compiler.removeConsole in production builds (preserves error/warn) as a safety net against future log leaks (#273)
Add no-console ESLint rule (allows warn/error only) so future PRs fail lint if they reintroduce stray logging (#273)
Disable pull-to-refresh app-wide to prevent accidental page reloads
Add extra error logging in useTTS hook to aid TTS debugging

Bug Fixes

Fix TTS 500 error and DialogContent a11y warnings on contact detail page

Dependencies

Security patches: protobufjs (critical), liquidjs (high) + safe updates
Update dependencies: security patches for Next.js, React, LiquidJS + safe updates
Patch security vulnerabilities and apply safe minor bumps (AWS SDK, better-auth, dompurify, redis, dotenv, lucide-react, mixpanel-browser, openai, react/react-dom, etc.)

Other Changes

Update .gitignore

Contributors

Thanks to the following contributors for this release:

@chriskehayias

Full Changelog: v2026.4.7.1103...v2026.4.29.1444

Generated with Claude Code

View on GitHub

v2026.4.7.1103April 7, 2026

Release v2026.4.7.1103

Released on April 7, 2026

Summary

This release adds undo/redo support for the Liquid template editor, fixes mobile drawer positioning for private notes, migrates screenshot capture to html2canvas-pro, and updates several dependencies including a security-related better-auth upgrade.

What's Changed

New Features

Add undo/redo to Liquid template editor with keyboard shortcuts (Ctrl+Z / Ctrl+Shift+Z) and 50-entry history stack (#263) — Closes #186

Bug Fixes

Fix private notes and contact logs drawer jumping too high on mobile (#262) — Closes #58

Improvements

Migrate feedback screenshots from html-to-image to html2canvas-pro for oklch color support (#261)

Dependencies

Update @aws-sdk/client-s3 and @aws-sdk/s3-request-presigner (3.1022.0 → 3.1025.0), better-auth (1.5.6 → 1.6.0, security fixes), liquidjs (10.25.2 → 10.25.3), dotenv (17.4.0 → 17.4.1) (#266) — Closes #264

Contributors

Thanks to the following contributors for this release:

@chriskehayias

Full Changelog: v2026.4.6.1558...dev

Generated with Claude Code

View on GitHub

v2026.4.6.1558April 6, 2026

Release v2026.4.6.1558

Released on April 6, 2026

Summary

This release upgrades the feedback system with GitHub App bot authentication and a dedicated S3 bucket, and adds a releases page to the marketing docs site.

What's Changed

Improvements

Upgrade feedback system to use GitHub App bot authentication instead of PAT-based auth, add dedicated S3 bucket for feedback screenshots, and fix annotator UI sizing (#258)

Documentation

Add releases page to marketing docs that fetches GitHub releases via REST API, and link all Get Started buttons to the quick start guide (#256)

Contributors

Thanks to the following contributors for this release:

@chriskehayias

Full Changelog: v2026.4.6.1412...v2026.4.6.1558

Generated with Claude Code

View on GitHub

v2026.4.6.1412April 6, 2026

Release v2026.4.6.1412

Released on April 6, 2026

Summary

Hotfix release to resolve static assets not loading on the marketing site at the root domain.

What's Changed

Bug Fixes

Fix marketing site static assets (images, favicon, service worker, manifest) returning 404 on root domain (#253)

Contributors

@chriskehayias

Full Changelog: v2026.4.6.1104...v2026.4.6.1412

Generated with Claude Code

View on GitHub

v2026.4.6.1104April 6, 2026

Release v2026.4.6.1104

Released on April 6, 2026

Summary

Major release with 17 PRs including auth migration from NextAuth to BetterAuth, new marketing site, superadmin tenant management, screenshot annotation for feedback, SMS communication hub fixes, and numerous UX improvements across contact details and groups.

What's Changed

Bug Fixes

Fix SMS communication hub — corrected CommunicationType, wired outbound phone number from tenant settings (#250) — Fixes #228, #210
Fix Last Activity Date showing future dates (#244) — Fixes #227
Fix avatar image distortion for non-square profile pictures (#243) — Fixes #176
Fix contact search MP queries with fully qualified column names (#242)
Fix dependency vulnerabilities and update packages (#230)

New Features

Add screenshot annotation tool and improve feedback component (#249)
Add superadmin tenant management system (#239)
Add marketing site at root domain with docs (#237)
Add Groups navigation with search and contact search improvements (#241)
Add SMS tenant settings for Platform and Device texting (#236)
Add admin Pages configuration with menu visibility and contact controls (#245) — Fixes #226, #201
Add Member Status header badge to contact details (#246) — Fixes #169

Improvements

Migrate auth from NextAuth v5 to BetterAuth (#235)
Upgrade Next.js 15 → 16.1.6 with Serwist PWA migration (#224)
Upgrade OpenAI Node SDK v5 → v6 (#225)
Move SignInButton to src/components/ (#247)

Documentation

Overhaul marketing docs and remove dead nav links (#238)

Contributors

Thanks to the following contributors for this release:

@chriskehayias

Full Changelog: v2026.2.25.0051...dev

Generated with Claude Code

View on GitHub

v2026.2.25.0051February 25, 2026

Release v2026.2.25.0051

Released on February 25, 2026

Summary

Security and maintenance release that fixes critical dependency vulnerabilities and applies all safe dependency updates.

What's Changed

Security Fixes

Fix critical fast-xml-parser CVEs in AWS SDK (GHSA-37qj-frw5-hhjh, GHSA-jmr7-xgp7-cmfj, GHSA-m7jm-9gc2-mpf2) (#221)
Fix high-severity Next.js DoS vulnerabilities (GHSA-9g9p-9gw9-jx7f, GHSA-h25m-26qc-wcjf) (#221)
Fix transitive vulnerabilities: minimatch ReDoS, webpack SSRF, ajv ReDoS, lodash prototype pollution (#221)

Dependencies

Update @aws-sdk/client-s3 and @aws-sdk/s3-request-presigner from 3.972.0 to 3.997.0 (#221)
Update next from 15.5.9 to 15.5.12 (#221)
Apply all semver-compatible dependency updates: react, recharts, redis, tailwindcss, zod, and more (#222)
Reduced npm audit findings from 30 vulnerabilities to 4 moderate (dev-only)