<![CDATA[Rallly - Package Updates]]>You can use this thread to track updates to the Rallly package.

Please open issues in a separate topic instead of replying here.

]]>https://forum.cloudron.io/topic/8245/rallly-package-updatesRSS for NodeSat, 16 May 2026 20:51:56 GMTMon, 19 Dec 2022 15:35:29 GMT60<![CDATA[Reply to Rallly - Package Updates on Fri, 15 May 2026 09:29:30 GMT]]>[2.10.1]

  • Update rallly to 4.10.1
  • Full Changelog
  • This release patches the Next.js May 2026 security advisory and CVE-2026-23870 (React Server Components DoS).
  • All self-hosted users should upgrade immediately.
  • Upgrade Next.js to 16.2.6
  • Upgrade React and React DOM to 19.2.6
  • Affected surface in Rallly includes middleware, App Router segment-prefetch, Image Optimization, Server Functions, and CSP nonces.
]]>https://forum.cloudron.io/post/124748https://forum.cloudron.io/post/124748Fri, 15 May 2026 09:29:30 GMT<![CDATA[Reply to Rallly - Package Updates on Thu, 30 Apr 2026 09:45:31 GMT]]>[2.10.0]

  • Update rallly to 4.10.0
  • Full Changelog
  • Version tile in the control panel showing the running version and whether an update is available (#2355, #2351, #2348)
  • Send poll response confirmation email in the respondent's locale (#2356)
  • Optimize invite page queries (#2350)
]]>https://forum.cloudron.io/post/124206https://forum.cloudron.io/post/124206Thu, 30 Apr 2026 09:45:31 GMT<![CDATA[Reply to Rallly - Package Updates on Thu, 23 Apr 2026 05:39:42 GMT]]>[2.9.2]

]]>https://forum.cloudron.io/post/123880https://forum.cloudron.io/post/123880Thu, 23 Apr 2026 05:39:42 GMT<![CDATA[Reply to Rallly - Package Updates on Wed, 22 Apr 2026 16:12:52 GMT]]>[2.9.1]

  • Update rallly to 4.9.1
  • Full Changelog
  • Fixed file uploads failing on self-hosted setups using Garage and some other S3-compatible storage backends.
]]>https://forum.cloudron.io/post/123863https://forum.cloudron.io/post/123863Wed, 22 Apr 2026 16:12:52 GMT<![CDATA[Reply to Rallly - Package Updates on Tue, 21 Apr 2026 15:20:44 GMT]]>[2.9.0]

  • Update rallly to 4.9.0
  • Full Changelog
  • Customize your space with your own brand identity. You can now set a custom primary color and upload a logo that appears across all polls in a space, including participant-facing pages and email notifications.
  • Custom primary color theming across the poll UI
  • Logo displayed on event cards, invite pages, and confirmation emails
  • Updated event card design
  • Dark mode improvements
  • Simplified sidebar navigation
  • Various styling refinements
  • Store the current locale when submitting a response (#2340)
  • Make initial admin check case insensitive
]]>https://forum.cloudron.io/post/123818https://forum.cloudron.io/post/123818Tue, 21 Apr 2026 15:20:44 GMT<![CDATA[Reply to Rallly - Package Updates on Thu, 02 Apr 2026 13:16:32 GMT]]>[2.8.0]

  • Update rallly to 4.8.1
  • Full Changelog
  • This patch fixes a client-side crash on the registration page and enables click and drag behaviour on the poll table view component.
  • Notification settings Configure global notification preferences (new responses, new comments) from your account settings. (#​2254)
  • Per-poll notification muting Mute notifications for individual polls using the bell icon in the poll admin view, replacing the previous watcher-based system. (#​2268)
  • Success dialog after poll creation After creating a poll, you'll see a shareable invite link with copy-to-clipboard before being taken to the poll page. (#​2281)
  • User avatars in participant list Profile pictures now display alongside participants in poll views for better visual recognition. (#​2284)
  • Improved time zone selector Replaced the modal-based selector with an inline searchable combobox showing city names and UTC offsets. (#​2261)
  • Improved error page Errors now show a user-friendly page with localized messaging and quick navigation links (home, create poll, support, GitHub). (#​2220)
  • SMTP_TLS_SERVERNAME env var Allows explicit SNI configuration for SMTP servers hosting multiple certificates. (#​2298)
  • Poll description missing from scheduled events Poll descriptions are now correctly passed through when booking a poll as a calendar event. (#​2202)
  • Crash on deleted poll Accessing a poll that no longer exists now shows a proper 404 page instead of crashing. (#​2218)
]]>https://forum.cloudron.io/post/122834https://forum.cloudron.io/post/122834Thu, 02 Apr 2026 13:16:32 GMT<![CDATA[Reply to Rallly - Package Updates on Sun, 15 Feb 2026 09:04:57 GMT]]>[2.7.3]

]]>https://forum.cloudron.io/post/120234https://forum.cloudron.io/post/120234Sun, 15 Feb 2026 09:04:57 GMT<![CDATA[Reply to Rallly - Package Updates on Wed, 04 Feb 2026 17:39:22 GMT]]>[2.7.0]

  • Update rallly to 4.7.0
  • Full Changelog
  • Update poll status names
  • Upgrade to prisma 7.3.0
  • Enable account linking
]]>https://forum.cloudron.io/post/119666https://forum.cloudron.io/post/119666Wed, 04 Feb 2026 17:39:22 GMT<![CDATA[Reply to Rallly - Package Updates on Wed, 14 Jan 2026 14:18:52 GMT]]>[2.6.1]

  • Update rallly to 4.6.2
  • Full Changelog
  • This patch fixes a client-side crash that occurred when accessing the profile and general settings pages.
]]>https://forum.cloudron.io/post/118507https://forum.cloudron.io/post/118507Wed, 14 Jan 2026 14:18:52 GMT<![CDATA[Reply to Rallly - Package Updates on Wed, 14 Jan 2026 08:54:21 GMT]]>[2.6.0]

  • Update rallly to 4.6.1
  • Full Changelog
  • This patch fixes an issue where the edit link that is emailed to participants would expire, preventing them from making changes to their response.
  • Full dark mode support across the entire application. Users can switch between light, dark, or system themes from their preferences.
  • Customize your Rallly instance with your own branding. Available as an add-on for Enterprise license holders. Learn more.
  • Custom application name
  • Custom primary colors (light and dark mode)
  • Custom logos
  • Option to hide "Powered by Rallly" attribution
  • Participant avatars now automatically display Gravatar images when available.
  • Various performance improvements, UI refinements, and bug fixes throughout the application.
]]>https://forum.cloudron.io/post/118473https://forum.cloudron.io/post/118473Wed, 14 Jan 2026 08:54:21 GMT<![CDATA[Reply to Rallly - Package Updates on Thu, 01 Jan 2026 09:16:47 GMT]]>[2.5.11]

  • Update rallly to 4.5.14
  • Full Changelog
  • Fixed an issue where anonymous users were incorrectly included in the total user count and displayed in the control panel.
]]>https://forum.cloudron.io/post/117801https://forum.cloudron.io/post/117801Thu, 01 Jan 2026 09:16:47 GMT<![CDATA[Reply to Rallly - Package Updates on Thu, 18 Dec 2025 16:10:36 GMT]]>[2.5.10]

  • Update rallly to 4.5.13
  • Full Changelog
  • This release contains updates to upstream dependencies that include important security fixes. Please update to this version as soon as possible.
]]>https://forum.cloudron.io/post/117295https://forum.cloudron.io/post/117295Thu, 18 Dec 2025 16:10:36 GMT<![CDATA[Reply to Rallly - Package Updates on Wed, 17 Dec 2025 10:36:28 GMT]]>[2.5.9]

  • Update rallly to 4.5.12
  • Full Changelog
  • Fixed an issue where some Microsoft users couldn't log in after signing up with an older version of the app
  • Fixed an issue where users with invalid/expired sessions were not able to access the login screen
  • Update translations
]]>https://forum.cloudron.io/post/117248https://forum.cloudron.io/post/117248Wed, 17 Dec 2025 10:36:28 GMT<![CDATA[Reply to Rallly - Package Updates on Sat, 13 Dec 2025 08:21:18 GMT]]>[2.5.8]

]]>https://forum.cloudron.io/post/116949https://forum.cloudron.io/post/116949Sat, 13 Dec 2025 08:21:18 GMT<![CDATA[Reply to Rallly - Package Updates on Fri, 12 Dec 2025 09:19:27 GMT]]>[2.5.7]

  • Update rallly to 4.5.10
  • Full Changelog
  • This release includes important security updates to address vulnerabilities in React Server Components (RSC) protocol.
  • We've updated Next.js and React to fix two additional vulnerabilities (CVE-2025-55183, CVE-2025-55184) that were discovered while security researchers examined the patches for React2Shell.
  • Important: Neither of these new issues allow for Remote Code Execution. The patch for React2Shell remains fully effective.
  • These vulnerabilities originate in the upstream React implementation. This release addresses the downstream impact on Next.js applications using the App Router.
  • For full details, see the React blog post.
  • All users are strongly encouraged to update to v4.5.10 as soon as possible to ensure they are protected against these vulnerabilities.
]]>https://forum.cloudron.io/post/116865https://forum.cloudron.io/post/116865Fri, 12 Dec 2025 09:19:27 GMT<![CDATA[Reply to Rallly - Package Updates on Thu, 11 Dec 2025 07:59:02 GMT]]>[2.5.6]

  • Update rallly to 4.5.9
  • Full Changelog
  • This release fixes an issue where participants are not able to edit their response using the link they receive in their confirmation email when their session is expired or they are not logged in.
]]>https://forum.cloudron.io/post/116800https://forum.cloudron.io/post/116800Thu, 11 Dec 2025 07:59:02 GMT<![CDATA[Reply to Rallly - Package Updates on Tue, 09 Dec 2025 13:37:48 GMT]]>[2.5.5]

  • Update rallly to 4.5.8
  • Full Changelog
  • This release includes updates to dependencies, adds missing translations and fixes a bug where emails for scheduled events are not delivered to a participant's email address.
]]>https://forum.cloudron.io/post/116737https://forum.cloudron.io/post/116737Tue, 09 Dec 2025 13:37:48 GMT<![CDATA[Reply to Rallly - Package Updates on Fri, 05 Dec 2025 08:53:26 GMT]]>[2.5.4]

  • Update rallly to 4.5.7
  • Full Changelog
  • This is a critical security update that upgrades Next.js to address CVE-2025-66478. We strongly recommend all users upgrade to this version immediately.
]]>https://forum.cloudron.io/post/116523https://forum.cloudron.io/post/116523Fri, 05 Dec 2025 08:53:26 GMT<![CDATA[Reply to Rallly - Package Updates on Fri, 28 Nov 2025 12:33:42 GMT]]>[2.5.3]

  • Update rallly to 4.5.6
  • Full Changelog
  • Patched vulnerability where participant data is exposed through the API even when option to hide the participant list is enabled.
]]>https://forum.cloudron.io/post/116170https://forum.cloudron.io/post/116170Fri, 28 Nov 2025 12:33:42 GMT<![CDATA[Reply to Rallly - Package Updates on Sat, 22 Nov 2025 07:02:25 GMT]]>[2.5.2]

]]>https://forum.cloudron.io/post/115777https://forum.cloudron.io/post/115777Sat, 22 Nov 2025 07:02:25 GMT<![CDATA[Reply to Rallly - Package Updates on Fri, 21 Nov 2025 11:21:11 GMT]]>[2.5.1]

]]>https://forum.cloudron.io/post/115746https://forum.cloudron.io/post/115746Fri, 21 Nov 2025 11:21:11 GMT<![CDATA[Reply to Rallly - Package Updates on Tue, 18 Nov 2025 08:08:06 GMT]]>[2.5.0]

  • Update rallly to 4.5.3
  • Full Changelog
  • Handle legacy google and microsoft redirect uris
  • Enable PKCE for OIDC provider
  • Fixes an issue causing OIDC login to fail due to mismatched redirect URIs.
  • Update posthog
  • New Crowdin updates
  • Use next-runtime-env to read runtime env values
  • Trim user input
  • Fix broken compatibility with previous oidc redirect uri
  • Fix incorrect auth client base url
  • Added support for password-based login
]]>https://forum.cloudron.io/post/115533https://forum.cloudron.io/post/115533Tue, 18 Nov 2025 08:08:06 GMT<![CDATA[Reply to Rallly - Package Updates on Tue, 28 Oct 2025 11:26:21 GMT]]>[2.4.2]

  • Make pnpm use /home/cloudron to solve prisma issue
]]>https://forum.cloudron.io/post/114511https://forum.cloudron.io/post/114511Tue, 28 Oct 2025 11:26:21 GMT<![CDATA[Reply to Rallly - Package Updates on Fri, 12 Sep 2025 08:22:55 GMT]]>[2.4.1]

]]>https://forum.cloudron.io/post/112631https://forum.cloudron.io/post/112631Fri, 12 Sep 2025 08:22:55 GMT