We've upgraded the core framework and libraries that power Eventtia to their latest secure versions, closing known vulnerabilities before they can ever affect your events or attendee data. 🔒

Why it matters: Staying current on security patches means your attendee information, payment flows, and event data remain protected — without you lifting a finger or scheduling any downtime. It's one less thing for your IT and compliance teams to worry about. ✅

What's included in this update:

• ⬆️ Rails upgraded — the application framework behind Eventtia now includes the newest security fixes and stability improvements.
• 🛡️ Rack updated — hardens the layer that handles every web request coming into the platform.
• 📄 Nokogiri updated — patches the library used for processing HTML and XML content, reducing exposure in document and data parsing.

No action is required on your side. These updates are already live and fully backward compatible, so all your existing events, registrations, and integrations keep working exactly as before. 🚀

Group member payments now inherit the identifier and payment details from the latest accepted deposit instead of an older, potentially refused attempt. 💳✅

Previously, when a group payment was retried after a failure, member records could copy the transaction information of a refused attempt — which meant payment reports displayed an identifier that didn't match the actual successful transaction. That made reconciliation with your payment gateway confusing and time-consuming. 😬

What changed:

• 🔍 Group deposits are now evaluated by status and recency, so only the most recent accepted deposit is used as the source of truth
• 🧾 Member payment identifiers in payment reports now match the real, successful transaction
• 🔁 Retried payments no longer carry over information from failed attempts

Why it matters: Finance teams can reconcile group registrations against gateway records with confidence, avoiding manual investigation and mismatched payment data. 📊

Checkpoint and activity check-in exports now display every timestamp in the event's configured timezone instead of the server's. ⏰ No more mental math or second-guessing whether a 7:00 AM scan really happened at 7:00 AM.

Why it matters: on-site teams and post-event reporting rely on accurate access data. When timestamps drift by a few hours, attendance numbers, session capacity analysis, and badge-scan audits all become unreliable — and fixing them by hand is painful. 🎯

• Checkpoint Excel exports now render check-in and check-out times in the event timezone 📊
• Activity checkpoint exports corrected with the same timezone logic 🗓️
• Consistent formatting across all access-control reports, so files from different events can be compared side by side ✅

Event metrics are now calculated and displayed using your event's configured timezone instead of the server's timezone, so the numbers you see line up with what actually happened on the ground. 🌍⏰

Previously, date-based metrics could be grouped into the wrong day for events running in a different timezone, making daily registration counts, attendance trends, and activity reports look shifted or inconsistent. That's now resolved.

Why it matters: your reporting dashboards and exports now tell the same story as your event agenda — no more manual adjustments or second-guessing whether a spike really happened on day one or day two. 📊

• Metric dates are correctly converted to the event timezone before being grouped and reported
• Daily and period-based metrics now align with the event's real local calendar days
• Improved stability of the metrics module, including a fix for an internal error that could interrupt metric generation 🛠️

Sponsor data now loads noticeably faster when you pull the sponsors list through the v3 API. ⚡ We eliminated the repeated per-sponsor tag lookups that were slowing down large sponsor directories.

Why it matters: event teams with dozens or hundreds of sponsors get their data back in a fraction of the time, which means snappier sponsor directories, exhibitor pages, and integrations — with less load on your event. 🚀

• 🏷️ Sponsor tags are now preloaded in a single query instead of one query per sponsor (N+1 removed)
• 📉 Lower response times and reduced database load on the /api/v3/sponsors index endpoint
• 🤝 Zero changes to the response payload — existing integrations keep working exactly as before
• ✅ Covered by additional automated tests to keep performance from regressing

Surveys now travel with your events. 📋 When you clone an event, its surveys come along automatically — questions, settings, and audience targeting included — so you never have to rebuild a feedback form from scratch again.

Why it matters: Teams running recurring or multi-edition events can go from a fresh copy to a ready-to-send survey in seconds instead of spending an afternoon re-creating questions and re-assigning audiences. ⏱️

What's included in the clone:

• Full survey duplication — all survey content is carried over to the new event, ready to publish or tweak. ✨
• Smart attendee type remapping — surveys targeted at specific attendee types are automatically re-linked to the matching attendee types in the cloned event, so your audience rules stay intact. 🎯
• Attendee group cloning — attendee type groups are duplicated and reconnected alongside the surveys, preserving how your audiences are segmented. 👥
• Cleaner setup out of the box — stale or unresolvable targeting rules are dropped during the clone instead of being copied over broken, so you start from a consistent, trustworthy configuration. 🧹

Attendees can now always view their meeting results, even when rejection is enabled but no rejection reasons have been configured for the event. 🎯

Previously, the public meeting page would fail to render whenever the rejection reasons list was empty, leaving participants staring at a broken page instead of their meeting details. The rejection reasons modal now gracefully falls back to an empty list, so the page renders correctly in every configuration. ✅

Why it matters: Your attendees never hit a dead end when managing their meetings, and your team avoids support tickets caused by an optional setting that was never filled in. 🙌

• Fixed a rendering error on the public meeting page when rejection is enabled with no saved rejection reasons
• Rejection reasons modal now safely handles an empty options list
• Meeting expiration reminder emails display reliably in the same scenario

Creating an event with a very long name no longer breaks the save — you now get a friendly validation message instead of an unexpected error page. ✅

Previously, the event URL (slug) was auto-generated from the event name, and when that name was long enough, the resulting slug exceeded the 100-character limit of the database column, causing the event creation to fail with a server error. Organizers had no way of knowing what went wrong or how to fix it. 😤

Why it matters: Setting up an event is often done under time pressure. Turning a dead-end 500 error into an actionable validation message means organizers can correct the URL in seconds and keep moving, instead of losing their work and filing a support ticket. ⏱️

• 🛡️ Added validation so event URLs longer than 100 characters are rejected with a clear, readable error message
• ✍️ The event form now caps the URL field at 100 characters, preventing the problem before you ever hit save
• 🚫 No more unexpected server errors when creating or editing events with long names

Eventtia now runs on the latest Ruby and Rails foundation — the same product you know, running on a modern, fully supported engine under the hood. 🚀

Why it matters: newer runtimes mean faster page loads, up-to-date security patches, and a platform that can keep shipping new features without being held back by legacy dependencies.

This was a multi-phase migration touching the entire application:

• ⚙️ Framework and runtime upgraded end to end, including database adapters, background jobs, and real-time channels.
• 🧩 All third-party libraries refreshed to their current, maintained versions — closing known vulnerabilities and improving stability.
• 🗂️ Asset pipeline modernized, so stylesheets and scripts are compiled and delivered more efficiently.
• 🔄 Full compatibility preserved for existing sessions, cookies, and API integrations — no action required from you or your developers.
• ✅ Thousands of automated tests updated and passing to guarantee every module (registration, payments, networking, reporting) behaves exactly as before.

Everything you use day to day works the same way — it just runs on a stronger base.

Event logos now render at the right size in Outlook, so every email you send looks exactly the way you designed it. 📧✨

Outlook handles image sizing differently from other email clients, which could cause event logos to appear stretched, oversized, or broken in automated emails. We've added explicit HTML width attributes to logo images across our mailer templates so they display consistently, no matter which inbox your attendees use.

What's been fixed:

• 🖼️ Event logos now display at the correct dimensions in Outlook and other strict email clients
• ✅ Applied across welcome emails, check-in emails, and business conference meeting request, meeting confirmation, and cancellation emails
• 🎨 Consistent branding across every automated message your attendees receive

Why it matters: Your emails are often the first touchpoint attendees have with your event. A correctly rendered logo protects your brand credibility and saves your team from fielding "is this email legitimate?" questions. 🚀

We squashed a display issue that caused the footer on public registration forms to render incorrectly when searchable dropdown fields were present. 🎯

The culprit was in how the dropdown component calculated available space on the page, which could push or overlap the footer area and hide important content such as legal notices, contact details, and branding.

• ✅ Footer content now renders reliably on every public form, with or without searchable dropdowns
• 🔽 Dropdown fields open and close without disrupting the surrounding page layout
• 📱 Consistent behavior across desktop and mobile screen sizes

Why it matters: Your registration pages are often the first impression attendees get — a clean, complete footer keeps your forms looking professional and ensures required information stays visible to every registrant. 🙌

German-speaking attendees and organizers now see more natural, accurate terminology for speakers across the platform. 🇩🇪

Terminology inconsistencies can make an otherwise polished event site feel unprofessional — and confuse attendees who are trying to find out who's presenting. This update aligns the German wording with how event professionals actually talk about speakers, so your event looks credible in every language you publish in. ✨

• Updated the German translation of speaker for a more precise, natural-sounding term 🎤
• Applied the new wording consistently across app modules, event page modules, security settings, and speaker profiles 🔄
• No action needed on your side — the updated labels appear automatically in all German-language events and pages ✅

Images, icons, fonts, stylesheets and scripts across the Eventtia platform are now served from a content delivery network (CDN) instead of being loaded directly from the application servers. 🌍

Why it matters: your attendees and your admin team get faster page loads no matter where they are in the world — which translates into smoother registration flows, lower drop-off on public event pages and less waiting when you're managing an event live. ⏱️

• All static assets are uploaded to S3 and distributed through the CDN at build time 📦
• Icons and font files are now fully included in the asset pipeline, so nothing renders broken or unstyled 🎨
• Asset delivery is decoupled from application traffic, keeping the platform responsive during registration peaks 📈

Report exports to Excel now generate and download as expected. 📊

An issue in the export process could cause certain reports to fail while being built, leaving organizers without their data.

Why it matters: exports are how teams share attendance, registration, and revenue data with stakeholders who don't log into Eventtia — a failed export blocks the whole reporting chain.

Attendee records and social posts now save reliably without hitting unexpected processing errors. 🎉

A low-level issue caused certain text values to fail when they were being modified during save operations, which could interrupt actions such as updating attendee information or publishing social posts. That edge case has been resolved.

• ✅ Fixed an error triggered when text fields were modified on attendee records
• ✅ Fixed the same issue affecting social posts
• 🔒 Improved overall stability of save and update operations across both modules

Why it matters: Fewer unexpected interruptions mean your team spends less time retrying failed actions and more time running the event — attendee data and social content now save smoothly the first time. 🚀

Updating a user profile no longer risks overwriting the account the user belongs to. 👤

Under certain conditions, saving user details could unintentionally modify the associated account assignment. The update logic has been corrected so only the intended fields change.

Why it matters: account integrity drives permissions and data visibility — this fix prevents users from unexpectedly losing access to the workspaces they should see.

Duplicating an event now leaves the registration start and end dates clean, so your new event never launches with dates borrowed from the original. 🗓️

Previously, cloning an event carried over the source event's registration window. That meant a brand-new event could be created with a registration period that had already closed — silently blocking attendees from signing up until someone noticed and corrected it manually. 🚫

Why it matters: event organizers who build each new edition from a template can now clone with confidence, avoiding closed-registration surprises and the support tickets that follow. ✅

• Registration start and end dates are no longer copied when cloning an event
• Cloned events start with a clear registration window, ready to be set for the new edition
• Prevents newly created events from opening with an expired or invalid registration period

Changes to attendee types now save as expected — no more edits that appear to go through but silently revert behind the scenes. ✅

Previously, certain attendee type updates could trigger a silent rollback: the platform would accept the change without reporting an error, but the new values were never persisted. Organizers would only discover the problem later, often after registrations had already started under the wrong configuration. 😬

Why it matters: attendee types drive pricing, access and registration rules, so a change that doesn't stick can cascade into incorrect tickets, broken access rules and manual clean-up. With this fix, what you save is what your attendees get — the first time. 🎯

• Fixed the silent rollback that prevented attendee type updates from being saved
• Validation and persistence logic hardened so failures surface clearly instead of failing quietly
• No action required on your side — the fix applies automatically to existing events

Custom field labels no longer get unexpectedly wiped out when their text happens to match a translation already saved in another language. 🌍

Previously, if the alias (display label) you set for an attendee type custom field coincided with an existing translation in a different locale, the default alias could be silently reset — leaving fields in your registration forms with blank or unexpected labels. That's now resolved.

Why it matters: Multilingual events can rely on their form labels staying exactly as configured, with no surprise blanks for attendees mid-registration and no manual re-entry work for organizers. ✅

• Fixed the default field alias being reset when it matched another locale's translation
• Added test coverage to make sure the behavior stays correct going forward 🧪

Bulk importing attendees from a spreadsheet now runs through to completion reliably. 📥

The import flow could stall part-way through on larger files, leaving organizers unsure whether records had been created. The process has been corrected so progress is tracked accurately from start to finish.

Why it matters: onboarding hundreds or thousands of attendees is often the first thing you do when setting up an event — a dependable import saves hours of manual re-entry and prevents duplicate records.

Your systems can now react in real time the second someone is checked in at your event. 🎟️ Eventtia will automatically push a check-in event to the endpoint of your choice, so badge printers, CRMs, lead-capture tools, access control systems and internal dashboards stay perfectly in sync without anyone exporting a single spreadsheet.

Why it matters: attendance data that used to arrive hours later — or never — now lands in your stack instantly, which means accurate live headcounts, faster on-site decisions and no more manual reconciliation after the event. ⏱️

• New check-in webhook trigger fires automatically when an attendee is checked in, including workshop and session check-ins
• A dedicated check-in payload delivers clean, structured attendee and checkpoint data to your endpoint
• Every attempt is recorded as a webhook delivery, so you can confirm what was sent, when, and whether it succeeded
• Clear delivery error handling makes failed calls easy to spot and diagnose instead of silently disappearing
• Fully available through the API, so you can create and manage check-in webhooks programmatically

The payment_created webhook is now triggered only when a payment actually transitions to the accepted state — not when a payment record is created in a pending, failed, or intermediate status. 💳✅

Previously, integrations could receive webhook notifications for payments that were never confirmed, leading to duplicate or premature downstream actions such as sending confirmation emails, issuing tickets, or syncing revenue data to external systems. 🙃

Why it matters: your connected systems now receive a single, reliable signal per confirmed payment, which means fewer false positives to reconcile, cleaner financial reporting, and no more manual clean-up of orders that were triggered by payments that never went through. 🎯

• Webhook now fires strictly on the transition to the accepted status
• Eliminates duplicate and premature payment_created notifications
• Keeps external integrations (CRMs, accounting tools, custom endpoints) in sync with real, confirmed revenue
• Covered by additional automated tests to prevent regressions 🧪

Creating an event through the API no longer fails when the attendance mode is sent as physical — it's now automatically understood as an in-person (offline) event. 🎉

Previously, sending attendance_mode=physical to the v3 and v4 event creation endpoints triggered an error and the event was never created, forcing integrators to guess the exact accepted value. That friction is gone: your integrations keep working with the terminology they already use.

• 🔁 The physical value is now mapped automatically to offline when creating events through API v3 and v4.
• 🛡️ Unrecognized attendance mode values are safely ignored instead of breaking the request, so a single bad parameter no longer blocks event creation.
• ✅ Added test coverage for event creation and attendance mode handling to keep this behavior reliable going forward.

Why it matters: fewer failed API calls and less debugging time for teams automating event creation, which means events get published faster and integrations stay stable. 🚀

Webhook signing secrets have been reworked so you can confidently validate that each incoming payload genuinely came from Eventtia and wasn't tampered with in transit. 🔐 Secrets are now managed more securely and consistently across the webhooks screen and the API, and existing webhooks were migrated automatically — no action needed on your side.

Why it matters: signature verification is usually the first thing a security review asks about, so this removes a common blocker when connecting Eventtia to internal or customer-facing systems. ✅

• Redesigned signing secret handling with a safer storage and retrieval flow
• Automatic migration of existing webhook signing secrets, so current integrations keep working
• Consistent experience between the webhooks management screen and the API
• Refreshed webhooks list view with clearer labels in both English and Spanish 🌎

Location and city selectors now support search queries, so you can type a few letters and jump straight to the option you need instead of scrolling through long lists. 🔎

This is especially useful for events with global audiences, where city and location lists can run into hundreds of entries. Faster selection means fewer abandoned registrations and cleaner, more accurate attendee data. ⏱️

• Searchable location loader in forms: type to filter available locations on the fly
• Searchable city loader: quickly narrow down cities without endless scrolling
• Improved query handling on the event data layer so results return accurately and consistently 🚀

The Attendees in Sessions Excel export now processes data in batches 🧱, so events with thousands of attendees and dozens of sessions generate cleanly instead of timing out or producing incomplete files.

This means organizers of large conferences can trust that the file they download is complete and accurate the first time — no re-running exports, no missing rows, no manual stitching of partial spreadsheets. ✅

• ⚙️ Batched processing for faster, more memory-efficient report generation
• 🧮 More consistent row and column handling in the generated spreadsheet
• 🛠️ Multiple accuracy and formatting refinements based on QA testing

Opening an attendee group that no longer exists, belongs to another event, or has no joinable attendees now returns a clean 404 Not Found page instead of an unexpected application error. 🎯

Previously, the edit screen tried to load attendees from a group that couldn't be found, which resulted in a confusing error page and an interrupted workflow. Organizers now get an immediate, understandable response and can continue working without wondering whether something broke on their account. ✅

• Attendee group edit requests for unknown or inaccessible groups now consistently return a 404 response 🚫
• Behavior is aligned with how events and public attendee group pages already handle missing records, so navigation feels predictable across the platform 🔄
• Expanded automated test coverage around missing, cross-event, and empty attendee groups to prevent regressions 🧪

Why it matters: fewer dead ends and error screens means less time spent troubleshooting and more confidence that broken or outdated links simply lead to a clear message rather than a failure. ⏱️

Exhibitor attendee pages now load reliably, even when a stand reservation is missing or no longer linked to the exhibitor's account. 🛠️

Previously, if a reservation ID was absent — or belonged to a different account — the exhibitor attendee edit page would throw a server error (500) instead of handling the situation gracefully. Exhibitors hit a dead end with no explanation and no way forward.

Why it matters: Exhibitors managing their team members during event setup can keep working without unexpected errors blocking them, and your support team stops fielding tickets for a page that simply wouldn't open. ✅

• Missing or invalid stand reservations now return a clear, properly handled access response instead of a crash 🚫
• Reservations belonging to another account are correctly rejected, keeping exhibitor data properly isolated 🔒
• Expanded automated test coverage around reservation edge cases to prevent regressions 🧪

Sponsor websites with long tracking URLs no longer break the form. 🔗 Previously, any sponsor website address longer than 255 characters triggered a server error and the whole sponsor record failed to save.

Why it matters: Marketing and sponsorship teams rely on long UTM and campaign tracking parameters to measure sponsor ROI. Now those links persist exactly as pasted, so you keep your attribution data and avoid re-entering sponsor details after an unexpected error. ✅

• The sponsor website field now supports long-form URLs, including full tracking and campaign parameters
• Submitting a sponsor with an extended URL no longer returns a 500 error
• Existing sponsor records are migrated automatically — nothing to do on your side

Sponsor website addresses are now validated before saving, with helpful, translated error messages shown directly on the form. ✍️

Why it matters: Catching a malformed link at entry time prevents broken sponsor logos and dead click-throughs on your event website — the kind of issue that's usually only discovered after sponsors complain. 🚫🔗

• Added validation on the sponsor website field so invalid entries are flagged immediately
• Inline guidance in the sponsor form clarifies the expected URL format
• Error messages are fully localized in English, Spanish, German and Arabic 🌍

Opening a mass message that wasn't targeted with an audience filter no longer breaks the page. 🎯 Instead of hitting an error, the message details now load normally and display an estimated reach of 0.

Previously, viewing a message with no filter applied triggered a server error, blocking organizers from reviewing their communication before sending it. Now the flow stays uninterrupted, so you can keep reviewing and sending messages with confidence. ✅

• Mass messages without an audience filter now show an estimated reach of 0 instead of returning an error
• The message detail page loads reliably in every scenario, filtered or not

Sending a test email from the Massive Messages tool no longer fails when the sample attendee doesn't have a QR code file available. 📧✅

Previously, the mailer tried to attach the example attendee's QR code without first confirming the file existed. That led to an unexpected server error in two common situations: when the sample attendee was an online attendee (who never gets a QR code generated) or when the temporary QR code folder had already been cleaned up by the scheduled file cleaner. On top of that, the resulting error page itself failed to render, leaving you with a confusing dead end instead of a clear message.

Why it matters: Test emails are the last checkpoint before a campaign goes out to thousands of attendees. Now that check always works, so you can preview and validate your messaging with confidence instead of chasing a mysterious error right before sending. ⏱️

• Missing QR code files are now safely skipped instead of breaking the test email
• Online attendees (who have no QR code) can be used as the example recipient without issues
• No more unexpected error screens after the temporary QR code folder is cleaned up
• Test email delivery remains unaffected for attendees who do have a valid QR code attached 🎟️

Opening the bulk email editor for an event you can no longer access — because it was archived or belongs to another organization — now returns a clean, expected "access denied" response instead of breaking the page. 🛡️

Previously, the email designer tried to load settings for an event that didn't exist, which resulted in a server error and a dead-end screen with no explanation. Now the permission check happens first, so you get clear feedback and can keep working without reloading or contacting support. ⏱️

• Bulk email screens now correctly return a 403 response when the related event is archived, deleted, or outside your organization
• Eliminated the server error (500) previously triggered by the email designer when loading a missing event
• Added automated test coverage to keep this behavior protected in future releases ✅

Registration forms are now validated as you edit them, so misconfigurations are flagged in the event settings screen instead of surfacing later as broken sign-up experiences. 🛡️

Why it matters: A single invalid form change can quietly break registration for every attendee who lands on your event page. Catching it at the moment of editing saves you from emergency fixes, lost registrations, and support tickets after launch.

• ⚠️ New validations run whenever registration form settings are modified, with clear inline messages explaining what needs to be corrected
• 🌍 Validation messages are fully localized in English, Spanish, French, German and Arabic, so every team member sees guidance in their own language
• 🎯 Refined wording and messaging based on QA feedback to make each error easier to understand and act on

Events now validate their end date automatically, so an event can no longer be saved with an end date that comes before its start date. 📅✅

Why it matters: Invalid date ranges are one of the quietest sources of chaos — they break agendas, registration windows and reporting long after the event has been published. Catching them at the moment of entry saves your team from last-minute cleanup and attendee confusion.

• ⛔ Events with an end date earlier than the start date are rejected at save time, with a clear inline error message.
• 🌍 The new validation message is fully translated across all supported languages, including English, Spanish, French, German and Arabic.
• 🧭 Wording was refined after QA review so the message tells organizers exactly what to correct, not just that something is wrong.

Your event's registration end date is now enforced correctly, with no confusing duplicate error messages and no unexpected blocks on draft registrations. 🗓️

Why it matters: Organizers rely on the registration end date to control capacity and planning deadlines. When that date behaves unpredictably, you either lose legitimate sign-ups or spend time chasing attendees who hit errors they shouldn't have seen. This fix removes that uncertainty entirely.

• ✅ Fixed a double validation that caused the same error to appear twice when an attendee registered near the registration closing date
• 📝 Draft attendee records are no longer blocked by the registration end date, so incomplete or in-progress registrations can be saved and completed without friction
• 🧪 Added regression coverage so the registration end date logic stays reliable in future releases

Group registrations now complete smoothly every time — even when there's no confirmed attendee yet to display in the summary. 🎉

Previously, the group registration success page could fail with a server error (500) when the confirmation summary tried to render without a valid attendee record (for example, when every attendee in the group was still in draft status). Registrants were left staring at an error page, unsure whether their registration had actually gone through. 😟

Why it matters: your attendees get a clear, reliable confirmation at the end of the sign-up flow, which means fewer abandoned registrations, fewer "did it work?" support tickets, and more trust in your event's registration experience. ✅

• Fixed a 500 error on the group registration success message when no confirmed attendee was available
• The confirmation summary now renders gracefully, skipping the personalized message instead of breaking the page
• Added automated test coverage so this edge case stays fixed in future releases 🔒

Your attendees sessions report now exports the correct primary registrant for every group registration. 🎯

When attendees register as part of a group, each session row needs to point back to the right primary registrant. A mismatch in that reference meant some exported rows showed incorrect or missing primary registrant information, forcing organizers to cross-check their spreadsheets manually before sharing attendance data.

• ✅ Fixed how the primary registrant is resolved in the attendees sessions Excel export
• 📊 Session attendance rows now consistently reflect the correct group owner
• 🧾 No more manual clean-up before sending reports to sponsors, speakers or internal teams

Why it matters: attendance reports are often the final word on who showed up and who paid for them — getting the primary registrant right means your post-event reporting, invoicing and follow-ups are trustworthy from the first export. ⏱️

Attendees who start a Stripe payment, abandon it, and come back to try again will no longer run into stuck or duplicated checkout sessions. 💳 Payments now resolve correctly even when several Stripe sessions exist for the same registration.

This matters because every failed or stuck payment is a registration you might never recover — and a support ticket for your team. Cleaner session handling means fewer abandoned carts and fewer manual reconciliations at the end of the day. ✅

• Fixed multi-session behavior so a new Stripe checkout attempt no longer conflicts with a previous unfinished one
• Improved how payment status is synced back from Stripe to the attendee's registration
• Hardened the payment flow against edge cases where a session expired or was left open in another tab
• Expanded automated test coverage around Stripe payments to keep these scenarios protected going forward 🧪

Attendees now receive a single, accurate invoice for their registration — no more duplicate invoices showing up for the same person. 🧾✅

Under certain conditions, simultaneous registration or payment events could trigger invoice generation more than once for the same attendee, resulting in duplicate records that had to be reconciled manually. Invoice creation is now serialized per attendee, so only one invoice can ever be generated for a given registration, even when multiple processes run at the same time.

• Duplicate invoices eliminated: invoice generation is now serialized per attendee, preventing race conditions during high-traffic registration moments 🔒
• Faster invoice lookups: a new database index on the invoice UUID speeds up retrieval and validation across the platform ⚡
• Cleaner financial reporting: your invoice totals, exports, and accounting reconciliations now reflect reality without manual cleanup 📊

Why it matters: Duplicate invoices create confusion for attendees and hours of manual reconciliation for your finance team. With this fix, your billing records stay clean and trustworthy from the moment a registration is confirmed.

Payment-related labels and messages are now translated across our supported languages, so attendees see checkout information in the language they selected instead of falling back to English. 🌍

For global events, trust at the payment step is everything — a sudden untranslated message is exactly the kind of friction that makes someone hesitate before entering their card details. Consistent localization keeps the checkout experience polished from start to finish. 🙌

• Added and refreshed payment translations for Arabic, Japanese, Korean, Dutch and more
• Consistent wording across all payment states, so attendees always know what's happening with their transaction

Signing in through SSO now works even when the link contains an unsupported or malformed language code. 🔐🌍

Previously, the SSO flow passed the locale value from the URL straight to the application without validating it. If that value wasn't a language your event actually supports — something that commonly happens with link scanners, email security tools, or manually edited URLs — the request raised an invalid locale error and users hit a 500 error page on /users/sso instead of reaching their event.

Why it matters: attendees and organizers clicking an SSO link can now get in reliably, instead of being blocked at the door by a broken URL parameter that had nothing to do with them. Fewer support tickets, fewer abandoned logins. ✅

• Unsupported or unrecognized locale values are now rejected safely instead of crashing the request 🛡️
• The SSO flow correctly falls back to the user's preferred language when the requested one isn't available 🗣️
• Locale handling is now consistent across the standard and SSO authentication paths 🔄

You can now pull a complete Attendees in Sessions report 📊 that shows which attendees registered for and attended each workshop or session of your program — all in one place, ready to filter and export.

No more cross-referencing registration lists with session rosters by hand: in a couple of clicks you get the attendance picture you need for capacity planning, speaker follow-up, certificates and post-event reporting. ⏱️

• 🔎 New report view under Program Reports listing attendees per session
• 🎚️ Dedicated filters so you can narrow results down to the sessions, dates and audiences you actually care about
• 🧾 Custom field support — attendee custom fields are formatted and included so your export matches the data you collect at registration
• 📥 Excel export of the full report, generated in the background so you can keep working while large files are prepared
• 🌍 Fully localized, including Arabic, Catalan, Italian, Korean and the rest of the supported languages

Once an attendee has checked in at your event, their registration is now locked against rejection and cancellation — so your on-site attendance records always reflect what actually happened. 🔒

Previously, an organizer (or the attendee themselves) could reject or cancel a registration even after the person had already walked through the door, leaving check-in data, badge records and reporting out of sync with registration status. This change closes that gap across every entry point.

What's new:

• 🚫 Rejection and cancellation actions are now blocked for any attendee with a check-in record
• 🖥️ The reject/cancel buttons are automatically disabled in the attendees table and the attendee side panel, so the action is clear before you click
• 👥 The same rule applies to bulk actions on attendee groups — checked-in attendees are skipped instead of silently cancelled
• 🌐 Self-service cancellation from the public registration pages is also prevented for checked-in attendees
• 🔌 The API (v3) enforces the same validation, so integrations and custom workflows stay consistent with the platform

Why it matters: your check-in numbers, attendance reports and post-event analytics stay accurate and auditable, and your team avoids the cleanup work that comes from reconciling cancelled-but-present attendees. ✅

Cancellation and rejection messages have been rewritten to be more precise about what is happening and why an action may not be available — and the new wording is available in all supported languages. 🌍

• ✍️ Updated cancellation and rejection text for attendees and organizers
• 🗣️ Translations refreshed across all locales, including English, Spanish, German, French, Catalan and Arabic
• 💡 Clearer explanation when an action is unavailable because the attendee has already checked in

Why it matters: attendees and organizers immediately understand the status of a registration without contacting support, reducing back-and-forth and confusion during busy on-site moments. 🙌

Reaching the right people just got easier. 🎯 Notification recipient queries now support richer workshop and session criteria, so you can target exactly the attendees you mean to reach — no more casting a wide net and hoping for the best.

Why it matters: fewer irrelevant emails for your attendees and less manual list-building for your team, which means higher engagement rates and more time back in your day. ⏱️

• Expanded the query options available when selecting event notification recipients, making workshop-based segmentation more flexible 🔍
• Enriched the workshop data returned by the API so recipient lists resolve faster and more accurately 🚀
• Improved consistency between workshop information shown in the platform and the audiences used for notifications ✅

Minimum and maximum workshop limits now behave consistently when configuring an event, so the rules you set are the rules that get enforced during registration. 🎟️

Why it matters: When workshop limits misfire, attendees either over-book sessions or get blocked from ones they should be able to join — and your team ends up fixing registrations by hand. This correction keeps capacity planning accurate from setup through check-in.

• 🔧 Fixed validation of the minimum and maximum number of workshops an attendee can select.
• 🌐 Updated the related messages across all supported event languages for clearer, consistent feedback.

German-speaking users get a more accurate and natural experience, with refreshed translations across several key areas of the platform. 🇩🇪

We reviewed and updated the German labels used throughout modules, event pages, security settings, and speaker management to better match how the terms are actually used in practice.

Why it matters: precise terminology means less second-guessing for your team and your attendees, fewer support questions, and a more polished, professional experience for German-language events. ✨

• Updated wording for application modules
• Updated wording for event page modules
• Updated wording in security settings
• Updated wording in speaker management

Notification emails now respect your custom SMTP configuration, so every automated message your attendees receive is delivered through your own mail server and sender identity. 📧

Until now, custom SMTP settings applied only to part of your outbound communications, which meant some notifications still went out under default sending infrastructure. With this release, the notification mailer honors the same SMTP credentials you've already configured for your account.

Why it matters: consistent sender domains improve deliverability, reduce the chance of your messages landing in spam, and keep every touchpoint fully branded — no more mixed sender addresses confusing your attendees. 🚀

• Notification emails now route through your configured custom SMTP server
• Consistent sender identity across all outbound event communications
• Better deliverability and inbox placement thanks to your own domain reputation
• No action required if you've already set up custom SMTP — it just works

When you embed your registration form on an external site, the iframe now reports its own content height and adjusts automatically as the form grows or shrinks. 📐

Why it matters: no more awkward inner scrollbars or cut-off fields on your corporate website — the form simply fits, on desktop and mobile alike, which means fewer abandoned registrations. ✅

• Automatic height reporting via post-message between the embedded form and the host page
• Improved public layout handling for embedded content
• Cache control adjustments so the resize script always loads the latest version