gh-christianlouis-inboxconverge/CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Added

• GitHub issue templates (bug report, feature request, test needed)
• Pull request template with comprehensive checklist
• docs/CODING_PATTERNS.md with development best practices
• docs/ERRORS.md documenting all error codes
• docs/adr/ directory with Architecture Decision Records
• Makefile with common development tasks
• .pre-commit-config.yaml for code quality enforcement
• CHANGELOG.md for version tracking
• Security validation for SECRET_KEY and ENCRYPTION_KEY on startup
• CSRF protection middleware
• Security headers middleware (X-Frame-Options, CSP, HSTS)
• Rate limiting per user/tier
• Comprehensive test infrastructure setup
• CI/CD pipeline for testing and security scanning
• Dependabot configuration for automated dependency updates (pip, npm, GitHub Actions, Docker)
• Copilot instructions requiring TODO.md and CHANGELOG.md updates
• Unit tests for security middleware (SecurityHeadersMiddleware, CSRFProtectionMiddleware)
• Unit tests for JWT token lifecycle (access tokens, refresh tokens, decode, edge cases)
• Unit tests for credential encryption edge cases (empty, long, unicode, special chars)
• Unit tests for FastAPI application factory and core endpoints (root, health, OpenAPI)
• Unit tests for Pydantic schema validation (users, mail accounts, notifications, subscriptions)
• Reached 57% test coverage (up from 54%)

Changed

• Reorganized documentation into docs/ directory
• Improved error handling with specific exception types
• Updated datetime usage to timezone-aware
• Enhanced logging with structured context
• Bumped Docker Python base image from 3.11-slim to 3.14-slim
• Bumped CI Python version from 3.11 to 3.14
• Bumped CI Node.js version from 18 to 20
• Bumped GitHub Actions: actions/setup-python v5 → v6, actions/setup-node v4 → v6, docker/setup-buildx-action v3 → v4, codecov/codecov-action v3 → v5
• Bumped backend dependencies: pydantic 2.5.3 → 2.12.5, pydantic-settings 2.1.0 → 2.13.1, psycopg2-binary 2.9.9 → 2.9.11, asyncpg 0.29.0 → 0.31.0, stripe 7.11.0 → 14.4.1, aioimaplib 1.0.1 → 2.0.1, google-auth-httplib2 0.2.0 → 0.3.0, celery 5.3.6 → 5.6.2, redis 5.0.1 → 7.3.0, tenacity 8.2.3 → 9.1.4
• Bumped frontend dependencies: react 19.2.3 → 19.2.4, @tanstack/react-query ^5.90.20 → ^5.95.0, axios ^1.13.5 → ^1.13.6, zustand ^5.0.11 → ^5.0.12, eslint ^9 → ^10, eslint-config-next 16.1.6 → 16.2.1

Removed

• Removed CodeQL analysis from CI pipeline (was blocking builds)

Fixed

• Bare exception handlers replaced with specific types
• Open redirect vulnerability in OAuth redirect_uri
• Default encryption keys security issue

Security

• All dependencies updated to patched versions
• Security headers added to all API responses
• Input validation improved for all endpoints
• Credential handling audited and improved

[1.0.0] - 2026-02-01

Added

• Multi-tenant SaaS backend with FastAPI
• JWT and OAuth2 (Google Sign-In) authentication
• Encrypted credential storage with Fernet
• Subscription management with Stripe integration
• PostgreSQL database with SQLAlchemy ORM
• Redis for caching and session management
• Celery for background task processing
• Apprise for multi-channel notifications
• Docker and docker-compose support
• Comprehensive API documentation with OpenAPI
• Extensive documentation (README, ARCHITECTURE, SECURITY_REPORT, etc.)

Changed

• Upgraded from single-user script to multi-tenant platform

[0.1.0] - 2025-12-15 (Legacy Version)

Added

• Initial release of single-user pop3_forwarder.py script
• Docker support with docker-compose
• Multiple POP3 account support
• Gmail forwarding via SMTP
• Rate limiting and throttling
• Error notifications via Postmarkapp
• Environment-based configuration
• Basic logging

---

Version History

• [Unreleased] - Current development (agentic coding improvements, security hardening)
• [1.0.0] - Multi-tenant SaaS platform (2026-02-01)
• [0.1.0] - Legacy single-user script (2025-12-15)

---

How to Update This Changelog

Categories

Use these standard categories:

• Added - New features
• Changed - Changes in existing functionality
• Deprecated - Soon-to-be removed features
• Removed - Removed features
• Fixed - Bug fixes
• Security - Vulnerability fixes

Format

## [Version] - YYYY-MM-DD

### Added
- New feature description (#issue-number)

### Fixed
- Bug fix description (#issue-number)

Workflow

1. Add unreleased changes to [Unreleased] section
2. When releasing, move unreleased changes to new version section
3. Add version number, date, and comparison link
4. Create git tag: git tag -a v1.0.0 -m "Release v1.0.0"

---

Maintained by: Development Team Last Updated: 2026-03-23