Skip to content
Merged
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
33 changes: 33 additions & 0 deletions mintlify/docs/changelog/may-2026.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,39 @@ title: Changelog (May 2026)
description: What's new in urBackend — new features, improvements, and fixes for May.
---

<Update label="2026-05-25" description="Updates from May 12 – May 25" tags={["Feature", "Improvement", "Fix"]}>
Comment thread
yash-pouranik marked this conversation as resolved.
## New features

**Soft Delete & Trash Cleanup Worker** — Adds API support for soft‑deleting records and a background worker that permanently removes items from the trash after a configurable retention period.

**Mail Platform Expansion** — Expands the Mail API ecosystem with BYOK (Bring Your Own Key) support, Broadcast capabilities, and a comprehensive developer guide.

**Login Lockout Protection** — Introduces a Redis-backed per-email login lockout system after 5 failed attempts, handling lockouts with a 423 status code and a retry countdown.

## Improvements

**Timeline UI for Features Section** — Replaces the classic grid with a modern, scrollable timeline view for better visual navigation.

**Landing Page UI/UX** — Refines layout and interaction cues on the landing page for a smoother first‑time visitor experience.

**NoSQL Injection Sanitization** — Enhances API security by sanitizing root-level array payloads and recursively sanitizing nested MongoDB operators.

**Automated Release Notes** — Integrates a unified CHANGELOG.md following the "Keep a Changelog" standard and automates weekly release notes via GitHub Actions.
Comment thread
yash-pouranik marked this conversation as resolved.
Outdated
Comment thread
coderabbitai[bot] marked this conversation as resolved.
Outdated

## Bug fixes

- Handle 423 login lockout with retry countdown
- Address PR review feedback for AI Query Builder
Comment thread
yash-pouranik marked this conversation as resolved.
- Resolve remaining review issues from PR #124
- Make database empty‑state cURL snippet RLS‑aware to prevent 403 errors
- Replace hardcoded sender domains with environment variables and fallbacks
- Fix email parameter trimming and remove regex-based sender parsing
- Sanitize root-level array payloads and nested operators for NoSQL security
- Enforce broadcast gating with plan limits
- Address CodeQL server-side request forgery findings
Comment thread
coderabbitai[bot] marked this conversation as resolved.
Outdated
- Append run_id to changelog branch name to prevent same-day conflicts
</Update>


<Update label="2026-05-12" description="Week of April 28 – May 12" tags={["Feature", "Improvement", "Fix"]}>
## New features
Expand Down
Loading