Dependency maintenance: updated lucide-react to v1. This release includes routine dependency hygiene improvements with no breaking changes to the dashboard or component APIs.

Dependency maintenance: updated non-major dependencies to their latest patch and minor versions. These updates include security and reliability hardening across the dependency tree. No breaking changes or migration required.

**Dependency Updates** Updated esbuild to v0.28.1, bringing security and reliability hardening to the build pipeline. This ensures your dashboard builds remain stable and performant as you scale. No breaking changes. Update at your convenience.

Updated nodemailer to ^9.0.1 to address security and reliability concerns identified during CI validation. This ensures email delivery components meet current security standards. **Update recommended** for all users relying on email functionality. No breaking changes or migration steps required.

Documentation: aligned licence terms in project documentation for clarity and consistency.

Dependency hygiene: updated @vitejs/plugin-react to v6. This is a routine maintenance release with no breaking changes to the template or its build output.

Dependency hardening: applied override to brace-expansion range to ensure consistent, secure dependency resolution across installations. No changes to product features or APIs.

Dependency hygiene: updated @types/uuid to v11 for improved type definitions and compatibility with the latest UUID tooling.

Documentation: added universal buyer documentation to improve onboarding and reference materials. No functional changes to the template.

Improved clarity in the import column mapping interface. Updated instructional copy to better guide users through data import workflows.

Fixed prose typography styling on the legal page to improve readability and maintain consistent type hierarchy across the dashboard. **Changes:** - Legal page prose typography alignment (#76)

Dependency maintenance: updated jsdom to v29. This improves test environment compatibility and aligns with current ecosystem standards. No changes to dashboard functionality or API surface.

Dependency maintenance: updated all non-major dependencies to their latest patch and minor versions. This release includes routine security and stability updates across the dependency tree with no breaking changes or new features.

Dependency update: bumped @types/nodemailer to v8. This is a maintenance release with no breaking changes or new features.

Dependency maintenance: updated all non-major dependencies to their latest patch and minor versions. This release includes routine security patches and compatibility improvements with no breaking changes or new features. No action required to upgrade.

**Fixed:** Security page mobile overflow issue (#63). Resolved layout constraints that caused horizontal scroll on smaller viewports, improving the mobile experience for admin dashboard users reviewing security settings.

**Fixed:** Development database now guards against incorrect template schema application (#61). This prevents silent schema mismatches when switching between template variants or running multiple instances locally. No action required for production deployments.

**Fixed:** API key validation now executes before browser session fallback (#60). This prevents edge cases where an invalid API key could be bypassed if a valid browser session existed. The fix strengthens the authentication chain without changing the public API or requiring migration steps.

Fixed API key session boundary enforcement (#59). The authentication layer now properly isolates API key sessions, preventing cross-session token reuse and strengthening the security boundary between concurrent requests. This fix hardens the auth model without requiring code changes on your end. Recommended for all deployments handling sensitive API operations.

Documentation: cleaned up buyer-facing docs branding for consistency and clarity. No functional changes.

Security and reliability hardening. Update recommended.

Removed stale billing public route that was no longer in use. This cleanup reduces surface area and prevents accidental exposure of deprecated endpoints. No action required on upgrade.

Documentation: clarified production Docker Compose environment variable requirements for deployment workflows. No functional changes.

Internal quality improvements from phase 7 review cycle. No breaking changes or new features — safe to update.

Fixed console logging in the DSAR (Data Subject Access Request) compliance script that was inadvertently left in production code. This cleanup ensures compliance tooling runs silently in production environments without polluting browser or server logs.

**Fixed:** Compliance scaffold surfaces now propagate correctly through component hierarchy (#51). This resolves an issue where nested compliance-related components would not inherit surface styling and layout properties as expected. If you've noticed inconsistent rendering in compliance audit sections, this update restores the intended behavior.

Propagate phase 4 inherited safety fixes from upstream. Internal stability improvements with no breaking changes or new features.

Security: Fixed propagation of inherited phase 4 hardening configurations. This ensures security policies are correctly applied across component hierarchies without requiring manual intervention.

Fixed smooth scroll behavior declaration for Next.js environments. This ensures scroll-behavior CSS is properly applied across the dashboard layout without conflicts or resets.

**Fixed:** Browser-based Server-Sent Events (SSE) streams now correctly handle refresh cookie propagation. Previously, SSE connections would fail to maintain authentication when refresh tokens were involved. This fix ensures seamless real-time event streaming in authenticated dashboard contexts without manual cookie management workarounds.

Documentation: clarified default access control behaviour in activity module. No code changes.

**Data Table Primitives**: Expanded primitive components for data tables give you finer control over column rendering, sorting, and filtering. Build custom table layouts without fighting the component API. **Full-Width Dashboard Shell**: The dashboard container now respects full-width layouts, eliminating padding constraints for edge-to-edge content. Useful for immersive data visualizations and full-bleed sections. **Dependencies**: Updated Next.js to 16.2.6 for stability and performance improvements. No breaking changes. Existing dashboards continue to work; new primitives are opt-in.

Security and reliability hardening. Update recommended.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements, including a live demo banner for the hosted preview.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

_(no release notes provided)_

_(no release notes provided)_

A redesigned landing experience with a trust-first hero and refreshed feature sections tailored to this template. - New hero layout that leads with credibility - Reworked feature presentation - Security and reliability hardening across email links - Test stabilisation for a steadier build The result is a clearer, more polished first impression for visitors.

Backend refinements that make the template more complete out of the box. - Seed data for a realistic, ready-to-explore demo - Transactional email templates for common notifications - Breadcrumb navigation for clearer page hierarchy Together these reduce the setup work needed before the template feels production-ready.

Adds admin utilities that make navigating and configuring the console faster. - Centralised settings store for admin configuration - Command palette for quick keyboard-driven navigation and actions across the admin console

Adds a command-center dashboard to the admin console, surfacing key metrics and activity at a glance. - Widget-based dashboard summarising system state - At-a-glance view of important metrics and recent activity - A starting point for monitoring the areas that matter most

Adds an audit log viewer to the admin console, giving administrators a clear record of changes made across the system. - Browse a chronological history of administrative changes - Diff view shows exactly what changed between before and after states - Helps with traceability and accountability for record edits

Adds import and export to the admin console with a validation step before any data is written. - Export records for backup or external processing - Import data from files with a preview of changes - Validation preview surfaces errors and conflicts before committing

Expands the admin data tables with productivity features for working through large datasets faster. - Bulk operations to act on multiple records at once - Filters synced to the URL, so views are shareable and bookmarkable - Inline editing directly within table rows - Date-range filtering for time-bound queries

Maintenance and reliability improvements.

Introduces a user and role management interface in the admin console, so administrators can manage accounts and assign permissions without touching the database. - Create, edit, and deactivate user accounts from the UI - Assign roles and review each user's effective permissions - Built on the relational permission model for consistent access control

Adds a relational, role-based permission model to the admin console, giving you fine-grained control over what each user can see and do. - Roles and permissions backed by a relational data model - Reusable service helpers for enforcing access rules across admin actions - Strengthened access controls throughout the admin surface

Internal groundwork that resets the admin foundation ahead of the new management features in this release line. No buyer-facing changes in this version; maintenance and reliability improvements only.

Adds an activity timeline helper for presenting a chronological feed of events or user actions. - Reusable timeline helper you can drop into account, dashboard, or detail views - Renders ordered activity with consistent styling out of the box

Adds a file-upload abstraction that gives you a consistent interface for handling user file uploads. - Unified upload helper to standardise how files are received and processed - Keeps upload handling in one place so you can swap storage targets without rewriting call sites

Adds real-time update support through a lightweight event bus and server-sent events, so the interface can reflect changes as they happen. - In-process event bus for publishing and subscribing to updates - Server-sent events primitive for streaming live updates to the browser without polling

Adds a generic DataTable component for presenting structured data in sortable, consistent tables. - Reusable table primitive that works across different data shapes - Consistent styling and behaviour you can reuse anywhere tabular data is shown

Adds foundational support for marketplace-style payments built on Stripe Connect, enabling flows where funds are split between your platform and connected sellers. - New commerce primitive for Stripe Connect, ready to wire into multi-seller or marketplace checkout - Designed to slot into the existing payment configuration without reworking your storefront

Introduces configurable commerce behaviour so you can tailor how purchases work without editing core code. - Commerce mode setting to switch between supported purchasing flows - Option to require a signed-in account before checkout, giving you control over guest versus account-based purchasing

Adds per-family content override slots so you can customise marketing copy and content for each product family without forking shared layouts. - Override slots let individual families supply their own content where needed - Falls back to shared defaults when no override is provided, keeping maintenance low

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Adds site-level configuration for authentication and commerce, letting you adjust these areas from a central config rather than scattered code changes. - Auth and commerce settings consolidated into the site configuration - Makes it easier to enable, disable, or tune these features per deployment

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

Maintenance and reliability improvements.

v1.3.1 — backport user.login_failed + sweep from TL00-BASE v1.3.1 Backport from TL00-BASE v1.3.1 (commit 5926a75).