Packages
phoenix_kit
2.44.0
2.63.0
2.62.2
2.62.1
2.62.0
2.61.0
2.60.3
2.60.2
2.60.1
2.60.0
2.59.0
2.58.0
2.57.1
2.57.0
2.56.1
2.56.0
2.55.1
2.55.0
2.54.2
2.54.1
2.54.0
2.53.0
2.52.2
2.52.1
2.52.0
2.51.0
2.50.0
2.49.1
2.49.0
2.48.0
2.47.0
2.46.0
2.45.0
2.44.0
2.43.1
2.43.0
2.42.1
2.42.0
2.41.6
2.41.4
2.41.3
2.41.2
2.41.1
2.41.0
2.40.1
2.40.0
2.39.0
2.38.1
2.38.0
2.37.5
2.37.4
2.37.3
2.37.2
2.37.1
2.37.0
2.36.1
2.36.0
2.35.0
2.34.0
2.33.0
2.32.1
2.32.0
2.31.1
2.31.0
2.30.0
2.29.1
2.29.0
2.28.2
2.28.1
2.28.0
2.27.2
2.27.1
2.27.0
2.26.1
2.26.0
2.25.0
2.24.0
2.23.3
2.23.2
2.23.1
2.23.0
2.22.24
2.22.23
2.22.22
2.22.21
2.22.20
2.22.19
2.22.18
2.22.17
2.22.16
2.22.15
2.22.14
2.22.13
2.22.12
2.22.11
2.22.10
2.22.9
2.22.8
2.22.7
2.22.6
2.22.5
2.22.4
2.22.3
2.22.2
2.22.1
2.22.0
2.21.5
2.21.4
2.21.3
2.21.2
2.21.1
2.21.0
2.20.0
2.19.0
2.18.1
2.18.0
2.17.0
2.16.0
2.15.1
2.15.0
2.14.2
2.14.1
2.14.0
2.13.19
2.13.18
2.13.17
2.13.16
2.13.15
2.13.13
2.13.12
2.13.11
2.13.10
2.13.9
2.13.8
2.13.7
2.13.6
2.13.5
2.13.4
2.13.3
2.13.2
2.13.1
2.13.0
2.12.1
2.12.0
2.11.0
2.10.0
2.9.0
2.8.1
2.8.0
2.7.0
2.6.0
2.5.0
2.4.0
2.3.0
2.2.0
2.1.0
2.0.1
2.0.0
1.7.236
1.7.235
1.7.234
1.7.233
1.7.232
1.7.231
1.7.230
1.7.229
1.7.228
1.7.227
1.7.226
1.7.225
1.7.224
1.7.223
1.7.222
1.7.221
1.7.220
1.7.219
1.7.218
1.7.217
1.7.216
1.7.215
1.7.214
1.7.213
1.7.212
1.7.211
1.7.210
1.7.209
1.7.208
1.7.207
1.7.206
1.7.205
1.7.204
1.7.203
1.7.202
1.7.201
1.7.200
1.7.199
1.7.198
1.7.197
1.7.196
1.7.194
1.7.193
1.7.192
1.7.191
1.7.190
1.7.189
1.7.187
1.7.186
1.7.185
1.7.184
1.7.183
1.7.182
1.7.181
1.7.180
1.7.179
1.7.178
1.7.177
1.7.176
1.7.175
1.7.174
1.7.173
1.7.172
1.7.171
1.7.170
1.7.169
1.7.168
1.7.167
1.7.166
1.7.165
1.7.164
1.7.162
1.7.161
1.7.160
1.7.159
1.7.157
1.7.156
1.7.155
1.7.154
1.7.153
1.7.152
1.7.151
1.7.150
1.7.149
1.7.146
1.7.145
1.7.144
1.7.143
1.7.138
1.7.133
1.7.132
1.7.131
1.7.130
1.7.128
1.7.126
1.7.125
1.7.121
1.7.120
1.7.119
1.7.118
1.7.117
1.7.116
1.7.115
1.7.114
1.7.113
1.7.112
1.7.111
1.7.110
1.7.109
1.7.108
1.7.107
1.7.106
1.7.105
1.7.104
1.7.103
1.7.102
1.7.101
1.7.100
1.7.99
1.7.98
1.7.97
1.7.96
1.7.95
1.7.94
1.7.93
1.7.92
1.7.91
1.7.90
1.7.89
1.7.88
1.7.87
1.7.86
1.7.85
1.7.84
1.7.83
1.7.82
1.7.81
1.7.80
1.7.79
1.7.78
1.7.77
1.7.76
1.7.75
1.7.74
1.7.71
1.7.70
1.7.69
1.7.66
1.7.65
1.7.64
1.7.63
1.7.62
1.7.61
1.7.59
1.7.58
1.7.57
1.7.56
1.7.55
1.7.54
1.7.53
1.7.52
1.7.51
1.7.49
1.7.44
1.7.43
1.7.42
1.7.41
1.7.39
1.7.38
1.7.37
1.7.36
1.7.34
1.7.33
1.7.31
1.7.30
1.7.29
1.7.28
1.7.27
1.7.26
1.7.25
1.7.24
1.7.23
1.7.22
1.7.21
1.7.20
1.7.19
1.7.18
1.7.17
1.7.16
1.7.15
1.7.14
1.7.13
1.7.12
1.7.11
1.7.10
1.7.9
1.7.8
1.7.7
1.7.6
1.7.5
1.7.4
1.7.3
1.7.2
1.7.1
1.7.0
1.6.20
1.6.19
1.6.18
1.6.17
1.6.16
1.6.15
1.6.14
1.6.13
1.6.12
1.6.11
1.6.10
1.6.9
1.6.8
1.6.7
1.6.6
1.6.5
1.6.4
1.6.3
1.5.2
1.5.1
1.5.0
1.4.9
1.4.8
1.4.7
1.4.6
1.4.5
1.4.4
1.4.3
1.4.2
1.4.1
1.4.0
1.3.2
1.3.1
1.3.0
1.2.10
1.2.9
1.2.8
1.2.7
1.2.5
1.2.4
1.2.2
1.2.1
1.2.0
1.1.0
1.0.0
A foundation for building Elixir Phoenix apps — SaaS, social networks, ERP systems, marketplaces, and more
Current section
Files
Jump to
Current section
Files
phoenix_kit
CHANGELOG.md
CHANGELOG.md
## 2.44.0 - 2026-10-01
### Added
- **Email files can be written in Markdown, with a shared header, footer and layout groups
(#887).** A `markdown.md` part feeds both bodies: the HTML (links and a lone-link paragraph
as accent-coloured buttons, tables, lists) and the text (`label: url`). `{{variable}}` /
`{{{variable}}}` work as in an `html` part and a link target is checked after substitution —
only `http(s)` and `mailto:` become links. The layout gains `_header` / `_footer` parts, and a
group (`layout: "billing"` or the email's `layout.txt`) brings `_layout-billing`,
`_header-billing`, `_footer-billing`, each falling back to the shared one.
`Content.resolve_with_sources/5` says where every part came from. Raises the
`phoenix_kit_templates` floor to 0.2.2.
- **Email branding (#887, #890).** Every part of a file email sees `{{logo_url}}` (the site logo
as an absolute, permanently signed URL; empty for a private library's logo) and
`{{accent_color}}`. Settings → Emails Transactional has a Branding tab with the accent colour
(`email_accent_color`, `#rrggbb`, blank = neutral) and the logo emails carry; core's layout
draws an accent bar only once a colour is set.
- **Admin email preview (#890).** `/admin/settings/email-sending/preview` lists every email the
site sends — core's eight and those enabled modules declare through the new
`c:PhoenixKit.Module.email_templates/0` callback (default `[]`; collected by
`ModuleRegistry.all_email_templates/0`, `PhoenixKit.Email.Catalog`) — renders the chosen one
in a chosen language with sample values through the same resolution a send uses (HTML in a
sandboxed iframe, text, subject), and says for each part whether it came from a database
template, a host file or the built-in default, and which file overrides it. Gated by
`settings`.
### Changed
- Core's default email copy lives in `PhoenixKit.Email.CoreTemplates` (one function per email),
shared by the send and the preview; the text is unchanged.
### Fixed
- **A dialect language preference rendered core's default copy in English (#889).** A recipient
or web visitor on `es-ES` matched no Gettext catalogue and read English; the locale is now
chosen by `RecipientLocale.gettext_locale/1` (the locale, its `pt_BR` spelling, then its base
language), shared by the web and by emails and notifications rendered for a recipient.
- **A bare `{{url}}` on a line of a Markdown email** is documented as text, not a link (write
`[label]({{url}})`).
### i18n
- The strings the three PRs added (the Email preview page, the Branding tab, the core email
labels — 69 per locale) were never extracted, so every locale showed them in English. They
are extracted and translated in de, es, et, fr, it, pl and ru, and the fuzzy carry-overs the
merge produced were rewritten by hand.
## 2.43.1 - 2026-10-01
### Fixed
- **Uploaded and generated media no longer ship in the Hex package.** `priv/media` is
excluded even when its files are ignored by Git. The release gate inspects the built
package and refuses media or generated sitemaps before publication.
- **Restricted Media viewers cannot change another person's visible folder.** Folder
colour, header and cover events use `folder-uuid`; the ownership guard now checks that
parameter as well as the other folder identifiers.
- **Wall-clock cache deadlines survive slow loads and a busy cache process.**
`Cache.remember/4` subtracts loading time from a boundary-based lifetime and skips
caching a value loaded after its deadline. An explicit `Cache.put/4` expiry is measured
when called, so waiting in the cache's mailbox cannot extend it.
- **Admin-page generator tests no longer overwrite a concurrently running test's repo
configuration.** The generator tests run synchronously.
## 2.43.0 - 2026-10-01
### Added
- **Media shows each viewer only what is theirs.** A holder of `media` without the new
`media.view_all` sees, in a site library, the files they uploaded, the folders they
created or that hold their files, and those folders' ancestors: in the grid, folders,
tree, search, counts, trash and orphans, and on the file's own page. An Owner/Admin or a
holder of `media.view_all` sees everything, as before. Every event that names someone
else's file or a folder the viewer cannot see is refused, so is changing a folder they did
not create, and a hand-edited `?file=` link opens only a file of the library shown that the
viewer may see (it opened any file, of any library, before). A trashed file's URL answers its
uploader, an Owner/Admin or a `media.view_all` holder; changing another person's file needs
`media.view_all`. Emptying the trash and clearing orphans work for a restricted viewer on
their own files only.
- **User libraries join Media's switcher**, grouped "Site" and "Mine" (`/admin/media/my/<id>`).
A holder of `media` who is not an Owner/Admin is sent there from `/admin/libraries`; that page
remains for people who hold `storage` without `media` and for the admin's audited list of other
users' libraries. The profile's Media tab has an "Open" link on every library.
- **Two sub-permissions of `media`:** `media.view_all` (see everyone's files in the site's
libraries) and `media.manage` (Settings → Media: buckets, sizes, health). They appear under
Media in the permissions matrix.
- **Which services users may connect on their own is a site setting.** Settings →
Integrations has a "Personal integrations" card: a checkbox per provider that supports
personal use, and the personal "add integration" page offers exactly the ticked ones. The
list used to be fixed in code (Telegram and OpenRouter); until an admin saves a choice those
two are still what users are offered, so nothing changes on upgrade. A provider opts in with
`personal_default: true` (offered until the admin chooses), and Object Storage is also
offered while users may keep a library on their own bucket (`personal_also_while`). The
page refuses a provider it did not offer, even to a hand-made event.
- **A shared HTML layout for emails built from files and defaults** (`PhoenixKit.Email.Layout`).
Core's auth emails and the defaults a module passes to `Mailer.send_from_template/4` ship no
`html` part, so they went out as plain text; they now arrive as HTML — the site's name above
the body, the name and a link to the site below it, inline styles, no brand colours, no external
resources, and no words of its own to translate. A text-only message is escaped, split into
paragraphs and its `http(s)://` addresses linked (a link ends at invisible and bidirectional
format characters, so it cannot display one address and open another). A host overrides the
layout with `_layout/html.html` under its `phoenix_kit_templates` root (needs
`phoenix_kit_templates` 0.2.1; older releases skip the name and core's layout is used). A layout
without `{{{content}}}` is refused with one warning. `layout: false` opts out; an `html` part
that is already a whole document, and any database template, are never wrapped. A blank `html`
or `text` part (an empty override file) is now treated as missing. See `guides/email-templates.md`.
- **Module UI standardisation, core side.**
- `<.date_nav>` — previous / today / next over a date held in the URL (stateless patch links, optional
native picker, `DateNav.parse_param/2` clamps to min/max). Not in the global import list; import it.
- `line_chart hover={:crosshair}` — a snapping crosshair with a server-computed readout (x, value, optional
`point_note`, the rows active at that x), keyboard (arrows, Home/End, Escape), touch (tap to pin) and a
polite live region; the native tooltips stay as the no-JS readout.
- `SearchPicker` draws its list in the top layer (a modal body or overflow ancestor no longer cuts it off),
closes on blur, picks on touch-up, and takes `close_on_pick`, `row_layout="stacked"` and the input's
`form`/`maxlength`/`required`/`inputmode`.
- `table_default` gets a `toolbar_primary` slot, `bulk_actions_toolbar` a `primary` slot, `form_actions`
`submit_disabled`, `form_section` an `:actions` slot, an optional title, and `page_action` `show_label`.
`Utils.Reorder` and `sortable_row` take non-UUID keys; modals take heights in `dvh` as well as `vh`.
- `Utils.Date.short/1` and `short_with_year/1` — localized day-month dates.
- **Settings → Users → Profile Page:** an admin chooses which sections the user settings page shows (custom
fields, email, start page, annotation reset, password, connected accounts, sessions, notifications, and the
Google address inside the identity form). What is stored is the list of *hidden* sections, so a section added
later shows up; a tab whose sections are all hidden is not offered; name and avatar cannot be hidden. The
toggle is attributed to the admin. It hides the section on the page — it is not an access control.
- **`Storage.store_from_url/2`** — a fetch that cannot reach the server's own network: public addresses only
(`Utils.PublicAddress`, IPv4 and IPv6, with `config :phoenix_kit, :blocked_ip_ranges` for ranges only your
network knows), every redirect re-checked, https never downgraded to http, ports 80/443, size and time capped,
bytes sniffed for the type. `URLSigner.verify_url/2` is the file route's own check for a file URL.
- **`Cache.remember/4`** — get-or-compute with a wall-clock expiry (`until: {:end_of_day, "Europe/Tallinn"}`,
`:end_of_hour`, `:end_of_minute`); errors are returned, never stored. `Cache.put/4` takes `expires_in:`.
- **`PhoenixKitWeb.Plugs.ProbeBlock`** — answers scanner probes (`/.env`, `wp-login.php`, `*.php`) with a bare
404; `/.well-known/` always passes; `extra:` / `except:` adjust it.
- **Sitemap:** `config :phoenix_kit, sitemap: [extra_sources: [...]]` adds sources without restating the
defaults; a route with `metadata: %{sitemap: false}` stays out of the sitemap. The doctor warns when robots.txt
(a static file or a routed one) has no `Sitemap:` line, and counts image sizes made by an older pipeline.
- **Host hooks:** `config :phoenix_kit, host_live_view_locale: :leave` keeps a host LiveView's own locale;
`host_anonymous_scope: {Mod, :fun, args}` gives the host layout its own scope when nobody is signed in
(display only). `hidden_admin_tabs` now also covers host, legacy and runtime-registered admin tabs.
### Fixed
- **`PhoenixKit.System.Dependencies` compiles on OTP 28.** The external-tools list held compiled
`~r` sigils in a module attribute, which OTP 28 cannot escape into a function body; it is built
in a function now.
- **A file that merely starts with the letters `BM` is no longer an image.** A CSV or note beginning
"BMI,weight…" was sniffed as a BMP and stored as `image/bmp`; a BMP must also carry a valid file header.
- **A grayscale image is no longer treated as see-through.** `gray` contains the letter the alpha check
looked for, so black-and-white photos were written as PNG instead of JPEG.
- **An animated GIF or WebP resized to a still format makes its file.** ImageMagick wrote one file per
frame and never the one asked for, so the size failed on every retry; frame 0 is used unless the target is
itself a GIF or WebP.
- **A download whose response ends with trailers is kept.** The trailers re-opened the temporary file and
orphaned the downloaded one (`Storage.store_from_url/2`).
- **`Cache.remember/4` measures its boundary from before the load.** A load straddling midnight kept
yesterday's value for a day more; `end_of_minute`/`end_of_hour` are also right across the hour the clocks go back.
- **`host_anonymous_scope` no longer takes the login pages down.** The host's function runs only when the
layout has no scope yet, and one that raises leaves the scope absent and logs.
- **The hidden-profile-sections read fails open on a dead pool too** (it caught raises, not exits).
- **The profile's tabs stay on the personal integration "add" and edit pages.** They
disappeared after "Add integration", so the page no longer said where you were.
- **The Multiple Sessions setting reads "Enable multiple sessions"** (it said "multi-account
switcher in the header"; the switcher is in the user menu).
- **Image sizes keep transparency and are never enlarged.** A see-through image gets a PNG (or
`variant_alpha_format`) size instead of a black-backed JPEG, and a size larger than its original is the
original's size. Sizes made earlier keep working; `VariantSets.remake_all/0` remakes them (manual — it
queues every size of every file — and every spec hash changed, so an ordinary revision bump of a size set
also makes that set's files stale).
- **ImageMagick is pinned to the sniffed format and limited on every call.** A file is decoded only by the
coder its bytes name, never one chosen from its file name; bytes nothing recognises under an `image/*` claim
are stored as `application/octet-stream`.
- **The doctor no longer leaves a pooled connection with an empty `search_path`.** Behind PgBouncer in
transaction mode its session-level `SET`/`RESET` landed on different backends, and a host's pages then failed
with "relation does not exist" until the pool was reset; the setting is now transaction-local.
`PostgresPreflight` no longer calls a PgBouncer login rejection "unreachable".
- **`table_default` keeps its toolbar on an empty plain table**, `gen.admin.page` stops rewriting the host's tab
list and pointing gettext at the kit, `PublicAddress` no longer treats reserved IPv6 space as public, the
`SearchPicker` list no longer sticks on "Searching…" when focus is elsewhere, and phone form fields no longer
zoom iOS (including kit pages inside a host layout).
- **Core compiles on Elixir 1.18 with OTP 28.**
### Changed
- **`phoenix_kit_templates` floor is `~> 0.2.1`.** Core's email layout looks up the host's `_layout`
override, which 0.2.0 skips.
- **The storage administration screens (Settings → Media: buckets, sizes, profiles, health) need
`media.manage`, no longer just `media`.** So giving an end user Media does not hand them the
bucket form.
### Upgrading
- Every role that holds `media` when this boots is granted `media.view_all` and `media.manage`
once (and Admin gets them with the other new keys), so **nothing changes for existing roles**.
A role created afterwards gets neither by default: a holder of `media` alone sees only their own
files. Revoke `media.view_all` from a role to make it so; it is not given back.
- The media pickers (`MediaSelectorModal` and the featured-image picker) are not filtered by viewer.
---
Older releases are archived by quarter in
[`dev_docs/changelogs/`](https://github.com/BeamLabEU/phoenix_kit/tree/main/dev_docs/changelogs):
[2026 Q3](https://github.com/BeamLabEU/phoenix_kit/blob/main/dev_docs/changelogs/2026-Q3.md) ·
[2026 Q2](https://github.com/BeamLabEU/phoenix_kit/blob/main/dev_docs/changelogs/2026-Q2.md) ·
[2026 Q1](https://github.com/BeamLabEU/phoenix_kit/blob/main/dev_docs/changelogs/2026-Q1.md) ·
[2025](https://github.com/BeamLabEU/phoenix_kit/blob/main/dev_docs/changelogs/2025.md)