<![CDATA[Rallly - Package Updates]]>You can use this thread to track updates to the Rallly package.

Please open issues in a separate topic instead of replying here.

]]>https://forum.cloudron.io/topic/8245/rallly-package-updatesRSS for NodeMon, 14 Sep 2026 18:08:59 GMTMon, 19 Dec 2022 15:35:29 GMT60<![CDATA[Reply to Rallly - Package Updates on Mon, 14 Sep 2026 10:22:02 GMT]]>[2.15.1]

  • Update rallly to 4.15.1
  • Full Changelog
  • Send login code emails in the requester's language (#3275)
]]>https://forum.cloudron.io/post/129408https://forum.cloudron.io/post/129408Mon, 14 Sep 2026 10:22:02 GMT<![CDATA[Reply to Rallly - Package Updates on Sun, 13 Sep 2026 13:18:02 GMT]]>[2.15.0]

  • Update rallly to 4.15.0
  • Full Changelog
  • Who this affects: instances using Microsoft sign-in on a multi-tenant endpoint which is the default. MICROSOFT_TENANT_ID defaults to common, so this applies unless you have set it to your own tenant ID. Instances set to a single tenant are unaffected, as are OIDC and Google.
  • On a multi-tenant endpoint any tenant can assert any email address, so Rallly now needs Microsoft to confirm an address before creating an account from it. Microsoft only sends that confirmation if the app registration asks for it.
  • This release does not break these sign-ins. If the claims are missing, Rallly still creates the account and logs a warning. A future release will refuse them. Add the claims now so that release is uneventful:
  • Full instructions: https://support.rallly.co/self-hosting/single-sign-on#microsoft
  • In previous versions, responses were soft-deleted. In this release responses are hard-deleted and previously soft-deleted responses are purged. Back up before upgrading.
  • This release contains several security fixes. Upgrading is recommended. Advisories with full details, affected versions and credit to the reporters will follow shortly.
  • Hosts can now invite participants by email from the Share dialog: send personal invite links, copy an invitee's link, remove a pending invite, and see when a link has been opened.
  • Every response now carries an edit token, so the link in a confirmation email edits exactly the response it names. Hosts can still copy the invite link and hand it to someone who responded without leaving an email address.
  • Full Changelog: https://github.com/lukevella/rallly/compare/v4.14.0...v4.15.0
]]>https://forum.cloudron.io/post/129382https://forum.cloudron.io/post/129382Sun, 13 Sep 2026 13:18:02 GMT<![CDATA[Reply to Rallly - Package Updates on Fri, 04 Sep 2026 09:40:50 GMT]]>[2.14.0]

  • Update rallly to 4.14.0
  • Full Changelog
  • Enforce instance branding when the white label add-on is active (#3125)
  • Add List-Unsubscribe headers and tokenized per-poll unsubscribe (#3148)
  • Show role permissions in the invite member dialog (#3116)
  • Activity log: event vocabulary and writes from every poll mutation (#3076)
  • Add cookie consent banner, shown only when analytics are configured (#3114)
  • Require both SMTP_USER and SMTP_PWD for authenticated SMTP (#3064)
  • Unshare single-member spaces wrongly marked shared by backfill (#3118)
  • Restore dark mode muted text hierarchy on popover surfaces (#3084)
  • Fix muted icon color on the invite member button (#3097)
  • Comments: fix mobile footer overlap and polish the sheet (#3082)
]]>https://forum.cloudron.io/post/128996https://forum.cloudron.io/post/128996Fri, 04 Sep 2026 09:40:50 GMT<![CDATA[Reply to Rallly - Package Updates on Thu, 27 Aug 2026 08:17:19 GMT]]>[2.13.1]

  • Update rallly to 4.13.1
  • Full Changelog
  • Upgrade Next.js to 16.3.3 for the August 2026 security release (#3073)
]]>https://forum.cloudron.io/post/128592https://forum.cloudron.io/post/128592Thu, 27 Aug 2026 08:17:19 GMT<![CDATA[Reply to Rallly - Package Updates on Wed, 26 Aug 2026 07:32:21 GMT]]>[2.13.0]

  • Update rallly to 4.13.0
  • Full Changelog
  • Custom branding from the control panel: upload your logo and wordmark (SVG supported) through a new branding page. Settings are stored in the database, with existing env vars as fallback. White-labeling docs updated to match. (#2916, #2918, #2946, #2951)
  • Configurable footer links: instance admins can add custom links (imprint, privacy policy, etc.) that appear on auth, poll and invite pages. (#3030)
  • Mobile voting redesign: new voting footer with explicit "no" responses, redesigned vote icons, and comments moved into a sheet opened from a floating trigger. (#2903, #2893, #2879)
  • Calendar and ICS download on the events page: add scheduled events to your calendar or download an ICS file. (#3024)
  • Channel-aware update check: the version check now respects release channels and shows a notice when a new major version is available. (#2983)
  • Members page redesign: members moved from settings into the main navigation with a new list design. (#2923, #2929)
  • Reject localhost, IP addresses and dotless hostnames as the cookie domain, preventing a class of login loops on misconfigured instances. (#2941)
  • Restored 6 missing time zones and updated the time zone picker to show modern city names. (#3035)
  • Public calendar feeds no longer include stale, deleted or cancelled events. (#3027)
  • Changing your email no longer fails silently when the address is already in use. (#2970)
]]>https://forum.cloudron.io/post/128563https://forum.cloudron.io/post/128563Wed, 26 Aug 2026 07:32:21 GMT<![CDATA[Reply to Rallly - Package Updates on Mon, 17 Aug 2026 11:20:43 GMT]]>[2.12.3]

  • Update rallly to 4.12.3
  • Full Changelog
  • Honor HTTP_PROXY/HTTPS_PROXY for outbound fetch (#2897)
  • Never proxy loopback traffic and exempt the container healthcheck (#2901)
  • Assemble calendar dates from formatToParts for small-ICU builds (#2900)
  • Fix doubled "v" prefix on the control panel version tile (#2887)
]]>https://forum.cloudron.io/post/128197https://forum.cloudron.io/post/128197Mon, 17 Aug 2026 11:20:43 GMT<![CDATA[Reply to Rallly - Package Updates on Fri, 07 Aug 2026 19:33:04 GMT]]>[2.12.2]

  • Update rallly to 4.12.2
  • Full Changelog
  • Fix internal server error when re-activating an installed license key (#2883)
  • Close the license dialog when a key is activated (#2884)
  • Keep focus in the document after activating a license, instead of dropping it to the page body (#2884)
]]>https://forum.cloudron.io/post/127914https://forum.cloudron.io/post/127914Fri, 07 Aug 2026 19:33:04 GMT<![CDATA[Reply to Rallly - Package Updates on Thu, 06 Aug 2026 21:03:29 GMT]]>[2.12.1]

  • Update rallly to 4.12.1
  • Full Changelog
  • Prevent false success screen when participant submission fails (#2849)
  • Show participant friendly error messages on failed submissions (#2850)
  • Fix icon hover color in space settings sidebar menus (#2856)
  • Reset participant selection when a participant is deleted on mobile poll (#2862)
  • Pass i18n to server-side Trans to prevent cross-request language leaks (#2871)
]]>https://forum.cloudron.io/post/127865https://forum.cloudron.io/post/127865Thu, 06 Aug 2026 21:03:29 GMT<![CDATA[Reply to Rallly - Package Updates on Thu, 06 Aug 2026 18:34:17 GMT]]>[2.12.0]

  • Update rallly to 4.12.0
  • Full Changelog
  • Legacy /p/<id> and /admin/<id> poll links no longer work (#2781). These redirects served links created before v3. The backing columns are dropped by a migration, so this is irreversible. Old bookmarks and emailed links from pre v3 polls will return 404.
  • New polls have comments disabled by default (#2792). Comments are deprecated and will be removed in a future release. In most cases, participant response notes (new in this release) cover the same need. Organizers can still turn comments on in poll settings.
  • Gravatar support is removed (#2780). Participant avatars fall back to initials.
  • Poll retention semantics changed (#2720). Polls are now kept for at least 30 days after their final date, and any activity extends the window. Previously polls were removed when not updated for 30 days with all dates in the past.
  • Rich text descriptions for polls and events, with a proper editor and sanitized Markdown rendering (#2653)
  • Participant response notes: participants can attach a private note to their response, visible only to the host (#2789)
  • Language preference no longer resets after saving (#2664), and locale cookie writes no longer drop session cookies (#2670)
  • Fixed redirect loops between / and /login and with stale sessions; users are no longer signed out automatically on an invalid session (#2650)
  • Fixed a login loop caused by cookie deletions not surviving Next.js cookie merging (#2843)
  • All day events show the correct date in ICS files, emails, and the upcoming events list, regardless of the viewer's timezone (#2551)
]]>https://forum.cloudron.io/post/127839https://forum.cloudron.io/post/127839Thu, 06 Aug 2026 18:34:17 GMT<![CDATA[Reply to Rallly - Package Updates on Sun, 21 Jun 2026 15:58:51 GMT]]>[2.11.0]

  • Update rallly to 4.11.1
  • Full Changelog
  • Keep environment validation out of the client bundle (#2476, fixes #2474)
  • Polls now default to time-based options with a duration picker (#2466)
  • Hidden participants are anonymized instead of dropped, so the grid stays readable (#2422)
  • Redesigned poll settings form (#2423)
  • Faster first load: browser-cached manifest and icons, fewer round trips (#2438)
  • All-day polls stay on the same date across timezones (#2470)
  • Voters can edit responses from the confirmation email when participants are hidden (#2399)
  • OTP codes are reused on resend, so the latest email always works (#2439)
  • Gravatar is disabled on self-hosted instances; avatars fall back to initials (#2462)
]]>https://forum.cloudron.io/post/125942https://forum.cloudron.io/post/125942Sun, 21 Jun 2026 15:58:51 GMT<![CDATA[Reply to Rallly - Package Updates on Fri, 22 May 2026 05:20:44 GMT]]>[2.10.2]

  • Update rallly to 4.10.2
  • Full Changelog
  • Allow unregistered voters to edit their response from the confirmation email link when participants are hidden (#2399)
]]>https://forum.cloudron.io/post/124986https://forum.cloudron.io/post/124986Fri, 22 May 2026 05:20:44 GMT<![CDATA[Reply to Rallly - Package Updates on Fri, 15 May 2026 09:29:30 GMT]]>[2.10.1]

  • Update rallly to 4.10.1
  • Full Changelog
  • This release patches the Next.js May 2026 security advisory and CVE-2026-23870 (React Server Components DoS).
  • All self-hosted users should upgrade immediately.
  • Upgrade Next.js to 16.2.6
  • Upgrade React and React DOM to 19.2.6
  • Affected surface in Rallly includes middleware, App Router segment-prefetch, Image Optimization, Server Functions, and CSP nonces.
]]>https://forum.cloudron.io/post/124748https://forum.cloudron.io/post/124748Fri, 15 May 2026 09:29:30 GMT<![CDATA[Reply to Rallly - Package Updates on Thu, 30 Apr 2026 09:45:31 GMT]]>[2.10.0]

  • Update rallly to 4.10.0
  • Full Changelog
  • Version tile in the control panel showing the running version and whether an update is available (#2355, #2351, #2348)
  • Send poll response confirmation email in the respondent's locale (#2356)
  • Optimize invite page queries (#2350)
]]>https://forum.cloudron.io/post/124206https://forum.cloudron.io/post/124206Thu, 30 Apr 2026 09:45:31 GMT<![CDATA[Reply to Rallly - Package Updates on Thu, 23 Apr 2026 05:39:42 GMT]]>[2.9.2]

]]>https://forum.cloudron.io/post/123880https://forum.cloudron.io/post/123880Thu, 23 Apr 2026 05:39:42 GMT<![CDATA[Reply to Rallly - Package Updates on Wed, 22 Apr 2026 16:12:52 GMT]]>[2.9.1]

  • Update rallly to 4.9.1
  • Full Changelog
  • Fixed file uploads failing on self-hosted setups using Garage and some other S3-compatible storage backends.
]]>https://forum.cloudron.io/post/123863https://forum.cloudron.io/post/123863Wed, 22 Apr 2026 16:12:52 GMT<![CDATA[Reply to Rallly - Package Updates on Tue, 21 Apr 2026 15:20:44 GMT]]>[2.9.0]

  • Update rallly to 4.9.0
  • Full Changelog
  • Customize your space with your own brand identity. You can now set a custom primary color and upload a logo that appears across all polls in a space, including participant-facing pages and email notifications.
  • Custom primary color theming across the poll UI
  • Logo displayed on event cards, invite pages, and confirmation emails
  • Updated event card design
  • Dark mode improvements
  • Simplified sidebar navigation
  • Various styling refinements
  • Store the current locale when submitting a response (#2340)
  • Make initial admin check case insensitive
]]>https://forum.cloudron.io/post/123818https://forum.cloudron.io/post/123818Tue, 21 Apr 2026 15:20:44 GMT<![CDATA[Reply to Rallly - Package Updates on Thu, 02 Apr 2026 13:16:32 GMT]]>[2.8.0]

  • Update rallly to 4.8.1
  • Full Changelog
  • This patch fixes a client-side crash on the registration page and enables click and drag behaviour on the poll table view component.
  • Notification settings Configure global notification preferences (new responses, new comments) from your account settings. (#​2254)
  • Per-poll notification muting Mute notifications for individual polls using the bell icon in the poll admin view, replacing the previous watcher-based system. (#​2268)
  • Success dialog after poll creation After creating a poll, you'll see a shareable invite link with copy-to-clipboard before being taken to the poll page. (#​2281)
  • User avatars in participant list Profile pictures now display alongside participants in poll views for better visual recognition. (#​2284)
  • Improved time zone selector Replaced the modal-based selector with an inline searchable combobox showing city names and UTC offsets. (#​2261)
  • Improved error page Errors now show a user-friendly page with localized messaging and quick navigation links (home, create poll, support, GitHub). (#​2220)
  • SMTP_TLS_SERVERNAME env var Allows explicit SNI configuration for SMTP servers hosting multiple certificates. (#​2298)
  • Poll description missing from scheduled events Poll descriptions are now correctly passed through when booking a poll as a calendar event. (#​2202)
  • Crash on deleted poll Accessing a poll that no longer exists now shows a proper 404 page instead of crashing. (#​2218)
]]>https://forum.cloudron.io/post/122834https://forum.cloudron.io/post/122834Thu, 02 Apr 2026 13:16:32 GMT<![CDATA[Reply to Rallly - Package Updates on Sun, 15 Feb 2026 09:04:57 GMT]]>[2.7.3]

]]>https://forum.cloudron.io/post/120234https://forum.cloudron.io/post/120234Sun, 15 Feb 2026 09:04:57 GMT<![CDATA[Reply to Rallly - Package Updates on Wed, 04 Feb 2026 17:39:22 GMT]]>[2.7.0]

  • Update rallly to 4.7.0
  • Full Changelog
  • Update poll status names
  • Upgrade to prisma 7.3.0
  • Enable account linking
]]>https://forum.cloudron.io/post/119666https://forum.cloudron.io/post/119666Wed, 04 Feb 2026 17:39:22 GMT<![CDATA[Reply to Rallly - Package Updates on Wed, 14 Jan 2026 14:18:52 GMT]]>[2.6.1]

  • Update rallly to 4.6.2
  • Full Changelog
  • This patch fixes a client-side crash that occurred when accessing the profile and general settings pages.
]]>https://forum.cloudron.io/post/118507https://forum.cloudron.io/post/118507Wed, 14 Jan 2026 14:18:52 GMT<![CDATA[Reply to Rallly - Package Updates on Wed, 14 Jan 2026 08:54:21 GMT]]>[2.6.0]

  • Update rallly to 4.6.1
  • Full Changelog
  • This patch fixes an issue where the edit link that is emailed to participants would expire, preventing them from making changes to their response.
  • Full dark mode support across the entire application. Users can switch between light, dark, or system themes from their preferences.
  • Customize your Rallly instance with your own branding. Available as an add-on for Enterprise license holders. Learn more.
  • Custom application name
  • Custom primary colors (light and dark mode)
  • Custom logos
  • Option to hide "Powered by Rallly" attribution
  • Participant avatars now automatically display Gravatar images when available.
  • Various performance improvements, UI refinements, and bug fixes throughout the application.
]]>https://forum.cloudron.io/post/118473https://forum.cloudron.io/post/118473Wed, 14 Jan 2026 08:54:21 GMT<![CDATA[Reply to Rallly - Package Updates on Thu, 01 Jan 2026 09:16:47 GMT]]>[2.5.11]

  • Update rallly to 4.5.14
  • Full Changelog
  • Fixed an issue where anonymous users were incorrectly included in the total user count and displayed in the control panel.
]]>https://forum.cloudron.io/post/117801https://forum.cloudron.io/post/117801Thu, 01 Jan 2026 09:16:47 GMT<![CDATA[Reply to Rallly - Package Updates on Thu, 18 Dec 2025 16:10:36 GMT]]>[2.5.10]

  • Update rallly to 4.5.13
  • Full Changelog
  • This release contains updates to upstream dependencies that include important security fixes. Please update to this version as soon as possible.
]]>https://forum.cloudron.io/post/117295https://forum.cloudron.io/post/117295Thu, 18 Dec 2025 16:10:36 GMT<![CDATA[Reply to Rallly - Package Updates on Wed, 17 Dec 2025 10:36:28 GMT]]>[2.5.9]

  • Update rallly to 4.5.12
  • Full Changelog
  • Fixed an issue where some Microsoft users couldn't log in after signing up with an older version of the app
  • Fixed an issue where users with invalid/expired sessions were not able to access the login screen
  • Update translations
]]>https://forum.cloudron.io/post/117248https://forum.cloudron.io/post/117248Wed, 17 Dec 2025 10:36:28 GMT