What's New

Booking-page fixes: every free day is reachable, failures explain themselves, and video invitations reach the attendee.

• Every bookable day and month is reachable on the booking calendar self-hosted
• A page that cannot load its times says so and asks the visitor to retry self-hosted
• An ad-hoc meeting that books a video room now invites the attendee self-hosted
• Slack notifications are sent when Telegram is connected as well self-hosted
• CalDAV calendars connect to servers that answer 405 to discovery self-hosted

Booking pages now open on a day visitors can actually book, and cancellation emails link back to the host.

• The booking calendar opens on the first free day with its times loaded self-hosted
• Rescheduling lands on a bookable day instead of an empty month self-hosted
• Webhook payloads now include the meeting's guests self-hosted
• The cancellation email links back to the host's booking page self-hosted

A reliability and security release: bookings fail safe, integrations survive provider outages, and sign-in events are audited.

• Bookings are refused for times the host's schedule never offered self-hosted
• A video provider outage now trips a circuit breaker instead of retrying self-hosted
• Booking emails wait out a mail outage instead of being dropped self-hosted
• Account lockouts, password changes and social sign-ins are now audited self-hosted
• Booking errors and the agenda countdown appear in the visitor's language self-hosted

A reliability release for bookings that use a video meeting, calendar sync and profile photos.

• A booking with a video meeting is confirmed exactly once, however slowly the link arrives self-hosted
• A Teams account that cannot host a meeting confirms the booking without a link self-hosted
• CalDAV calendars are found on servers that answer under a subpath self-hosted
• Choosing a second profile photo no longer takes the page down self-hosted
• Email addresses on newer domain endings are accepted again self-hosted

Video integrations can now reach a meeting server on your own private network.

• ALLOW_PRIVATE_IPS_FOR_VIDEO permits a meeting server on an internal network self-hosted
• Custom video links and self-hosted MiroTalk both accept a private address self-hosted

Meeting polls settle a group on a time by voting, and transactional emails can now carry your own branding.

• Propose several candidate times and let invitees vote to settle on one self-hosted
• Confirming the winning time books the meeting with everyone invited self-hosted
• Set your own logo, brand name and accent colour on transactional emails self-hosted
• Email buttons and links now meet accessibility contrast requirements self-hosted
• Nextcloud calendars now connect on installs served from a subdirectory self-hosted

A security release covering the login redirect check and three dependency advisories.

• Login redirects reject crafted targets that a browser would resolve off-site self-hosted
• Bundled dependencies updated to clear three security advisories self-hosted

Availability is now built from named schedules, and every meeting type can follow its own.

• Keep up to five named schedules, each with its own hours, breaks and rules self-hosted
• Every meeting type follows the schedule you give it, or your default schedule self-hosted
• Buffer, minimum notice and the booking window now belong to a schedule self-hosted
• Rate limiting no longer locks out signups or visitors behind a shared proxy self-hosted
• Webhook deliveries stop retrying once the endpoint has rejected them outright self-hosted
• Now built on the Cloudron 5.1 base image self-hosted

The dashboard now opens on your calendar, and calendar connection problems stay visible until fixed.

• The dashboard opens on your calendar, with all navigation in the sidebar self-hosted
• The Integrations badge names the integration that needs attention self-hosted
• A broken calendar connection alerts once and stays flagged until you reconnect self-hosted
• Fixed crashes when opening an event with a reminder or when a break is rejected self-hosted

The meeting type editor moves to tabs, rescheduling notifies everyone again, and translations are corrected throughout.

• Edit a meeting type through five tabs instead of one long scrolling form self-hosted
• Rescheduling now sends its own email and replaces the existing calendar entry self-hosted
• Rescheduling a booking again fires webhooks, chat alerts and reminders self-hosted
• Every translation reviewed and corrected across all five languages
• Pricing plan cards are translated, and long text no longer overflows cloud

Tymeslot now speaks six languages, and hosts can cap how many bookings they take.

• The whole app now speaks German, French, Italian, Ukrainian and Czech self-hosted
• Cap how many bookings you accept per day, week or month self-hosted
• Give each connected calendar its own colour, and show or hide it in the grid self-hosted
• Disconnecting a video provider can now clean up its meeting rooms too self-hosted
• The marketing site is localised, with prices in each market's own currency cloud

Calendar feed subscriptions and invoicing for paid bookings, with CalDAV sync and daylight-saving fixes.

• Subscribe to any published calendar feed by URL and have it block your availability self-hosted
• Invoices are now issued automatically for paid meeting bookings self-hosted
• Download your subscription invoices from the billing dashboard cloud
• CalDAV sync no longer stalls or drops events on stricter servers self-hosted
• Booking times stay correct across daylight-saving and the 2026 clock changes self-hosted

New email delivery providers alongside calendar sync, video link and email reliability fixes.

• Send email through SendGrid, Mailgun or AhaSend as well as SMTP and Postmark self-hosted
• Read-only calendars are no longer offered as booking targets self-hosted
• Organisers and guests now reliably receive video join links self-hosted
• CalDAV sync recovers from emptied calendars and stricter servers self-hosted
• A misconfigured email provider now fails at startup instead of silently dropping mail self-hosted

External PostgreSQL support and a slim Docker image, faster page loads, and calendar sync and accessibility fixes.

• Connect to an external PostgreSQL with DATABASE_URL, including TLS self-hosted
• A slim Docker image that runs PostgreSQL as its own container self-hosted
• Faster page loads with zstd-compressed assets and lighter provider icons self-hosted
• Calendar event updates use the provider's id, fixing Google sync failures self-hosted
• Marketing and legal pages meet WCAG AA contrast cloud

Descriptions on meeting type cards, a Stripe API generation upgrade, a Connect onboarding fix, and security patches for six bundled dependencies.

• Descriptions now appear on meeting type cards self-hosted
• Security patches for six bundled dependencies, including Phoenix and LiveView self-hosted
• Stripe now runs on the 2025-11-17 API generation, no webhook changes needed
• Stripe Connect onboarding no longer blocked by the security policy self-hosted
• Booking pages no longer fail on daylight-saving changeover days self-hosted
• Renewed subscriptions are no longer cancelled prematurely cloud

Meeting reschedule and cancellation cleanup fixes, timezone display corrections, and Outlook calendar sync hardening.

A maintenance release with background job, build configuration and contribution tooling fixes.

A branded 404 page, an onboarding calendar fix, and security patches to bundled dependencies.

• A branded 404 page for unknown routes self-hosted
• Security patches for bundled HTTP dependencies (plug, hpax, mint) self-hosted

A unified integrations hub, calendar colour sync, and a live dashboard agenda, alongside encryption, security and accessibility hardening.

• Unified integrations hub for calendars, video and payments with health status and one-click reconnect self-hosted
• Event colours now sync both ways with your calendar provider self-hosted
• Data-at-rest encryption key can be rotated independently of deployment self-hosted
• Live "Your day" agenda and setup nudges on the dashboard overview self-hosted
• Improved keyboard and screen-reader accessibility across booking and dashboard self-hosted

A fuller in-app calendar, Apple iCloud sync, and Tymeslot's move to open source under AGPLv3.

• Create recurring and all-day calendar events, with colours and reminders self-hosted
• Quick-add, search, agenda view and keyboard shortcuts for the calendar self-hosted
• Apple iCloud added as a calendar provider alongside Google, Outlook and CalDAV self-hosted
• Live booking-page preview and theme picker moved into onboarding self-hosted
• Relicensed under AGPLv3, so self-hosters can modify and redistribute Tymeslot self-hosted

Personal free/busy feed, richer calendar events, and CalDAV improvements.

• Personal free/busy calendar feed for sharing availability externally self-hosted
• Calendar events enriched with conference links, language tags and free/busy status self-hosted
• SMTP now accepts wildcard TLS certificates self-hosted

Session security hardening, stage-aware onboarding emails, and marketing page improvements.

• Sessions end immediately on logout or credential change self-hosted
• Onboarding emails adapt to each user's activation stage cloud
• Structured data and performance improvements on marketing pages cloud

WordPress embed guidance, a public FAQ page, and stability fixes.

• Embed dashboard links WordPress users to the official plugin self-hosted
• Public FAQ page covering common questions cloud
• Blocked embeds show a clear notice rather than the homepage self-hosted

One-click Google Calendar connect in onboarding, plus small fixes.

• One-click Google Calendar connect during onboarding self-hosted

A booking analytics dashboard with traffic sources, conversion and device breakdowns, plus a marketing blog and hardened security.

• Booking analytics dashboard with traffic sources, visits and conversion over time self-hosted
• Cookie-less, bot-filtered analytics with UTM and tracking-parameter capture self-hosted
• Booking analytics available on Pro cloud
• Marketing blog with featured posts, cover images and competitor comparison pages cloud
• Tighter content security policy and SSRF protection on calendar and video integrations self-hosted

Guest attendees with email RSVP, richer booking-link sharing, and a new pricing page.

• Guest attendees with email RSVP on bookings, including a per-type guest limit self-hosted
• Private and direct booking links for individual meeting types self-hosted
• Booking-link share previews with organiser photo and details self-hosted
• Features and Resources navigation menus with icons self-hosted
• New pricing page cloud

Zoom and Google Meet calendar reliability fixes.

Paid bookings via Stripe Connect, custom booking questions, Zoom and Slack integrations, an admin control panel and a guided dashboard tour.

• Paid meeting types with Stripe Connect checkout, refunds and a payments dashboard self-hosted
• Custom booking questions shown in emails, calendar events and confirmations self-hosted
• Zoom and Slack integrations for video meetings and booking notifications self-hosted
• Admin control panel for self-hosted installs with sign-in and security toggles self-hosted
• Guided post-onboarding dashboard tour and what's-new announcements self-hosted

Calendar sync and Cloudron boot reliability fixes.

Inline Google Meet links on Google Calendar events, plus calendar fixes.

• Google Meet links created inline with Google Calendar events self-hosted

Booking title, calendar move and email-handling fixes.

Profession hub redesign and a CalDAV duplicate-invite fix.

Onboarding email funnel for new users plus booking calendar and calendar-sync fixes.

• Onboarding email funnel for newly verified users cloud

Founder welcome email with one-click unsubscribe and marketing opt-out controls.

• Founder welcome email with one-click unsubscribe cloud

Custom booking page colours, redaction-aware file logging, and calendar-sync fixes.

• Custom colour picker for booking page palettes and backgrounds self-hosted
• Rotating file logs with sensitive-data redaction self-hosted

Booking form localisation, email rendering, and CalDAV booking fixes.

Auto-pausing of unhealthy integrations, refined docs filtering, and updated legal policies.

• Auto-pause integrations stuck unhealthy past the configured cutoff self-hosted
• Topic, provider and self-hosting filters for docs cloud
• Updated v1.1 Terms and Privacy Policy cloud

mailbox.org CalDAV support with guided provider setup and integration credential alerts.

• mailbox.org added as a CalDAV calendar provider self-hosted
• Guided CalDAV setup with per-provider articles and in-form links self-hosted
• Immediate alerts when integration credentials become invalid self-hosted
• Load environment variables from a .env file at boot self-hosted

Richer calendar views and resilient CalDAV reconnection and credential rotation.

• 3-day calendar view with swipe navigation and responsive view demotion self-hosted
• CalDAV credential rotation without recreating the integration self-hosted
• OAuth reconnect button on calendar integration cards self-hosted
• Automatic reauth flagging when CalDAV sync hits 401 self-hosted

Reliability and security fixes across booking forms, billing webhooks and reschedule emails.

Italian language support plus extensive security and reliability hardening.

• Italian added to supported booking and email languages self-hosted
• Stronger account lockout, open-redirect and webhook SSRF protections self-hosted

Calendar sync reliability fixes and email translations.

• Dashboard warning when a calendar integration has no calendars selected self-hosted
• User-facing emails translated into French, German and Ukrainian self-hosted

Docker first-run, availability and request-isolation fixes.

Booking security hardening and calendar fixes.

• Closed access-control gaps on meeting cancel and reschedule self-hosted

Subscription dashboard and calendar sync fixes.

• Subscription dashboard covers past-due and unpaid states with post-checkout polling cloud

Recurring-event availability and calendar audit fixes.

Version metadata fixes for release tooling.

Changelog, manifest and tooling fixes.

CalDAV reliability overhaul with offline write queue and conflict resolution.

• CalDAV offline write queue so calendar changes are retried when the server is unreachable self-hosted
• CalDAV conflict resolution with conditional-write retries on transient errors self-hosted
• Centralised attendee notifications with change detection and correct ICS sequencing self-hosted
• Scheduling page availability refreshes automatically after calendar sync self-hosted

Timezone handling and security hardening across booking and calendar sync.

• Robust timezone handling with quoted-TZID normalisation and DST-correct conversions self-hosted
• Public booking page honours the configured meeting type order self-hosted
• Mobile dashboard and auth page layout fixes self-hosted

Redesigned 2026 emails, a canonical calendar event model and stronger CalDAV sync.

• Redesigned transactional and system emails for 2026
• Periodic forced full re-sync and event fingerprinting for CalDAV calendars self-hosted
• Unified calendar event model normalising all providers self-hosted
• Redesigned profession and category hub pages with improved SEO cloud
• Open Graph social card images for shared links self-hosted

Multi-attendee meetings, calendar invitations and a redesigned onboarding flow.

• Multi-attendee calendar events with invitation emails and attendee management self-hosted
• Ad-hoc meeting invitations created from the dashboard calendar self-hosted
• Attendees notified when the organiser updates event details self-hosted
• Redesigned split-screen onboarding with step-by-step scheduling setup self-hosted
• Stricter domain and email validation with typo suggestions self-hosted

A calendar grid with inline event editing and a hardened sync engine.

• Calendar grid with inline title editing and event management self-hosted
• Calendar event sync engine with batch webhooks and async operations self-hosted
• Scheduling and calendar mode tab bar in the dashboard self-hosted
• Optional profile timezone self-hosted

Multi-account integration support with curated timezone handling.

• Connect multiple accounts per integration with per-account uniqueness self-hosted
• Email location labels translated per recipient's locale self-hosted
• Improved timezone picker with popular-first ordering self-hosted

Cloudron deployment, meeting-type and availability hardening fixes.

• Other bug fixes and stability improvements.

Embed system split into inline and modal modes, responsive video backgrounds, and many profession landing pages.

• Inline and modal embed modes for the booking widget self-hosted
• Responsive video transcoding for uploaded backgrounds self-hosted
• Availability now spans the full 42-day calendar display range self-hosted
• New profession landing pages with free-plan pricing and FAQs cloud

Profession landing pages and a redesigned site footer with extra link columns.

• 27 profession landing pages at /for/:slug cloud
• Redesigned footer with extra link columns self-hosted
• Signed parent-origin verification for embedded booking pages self-hosted

Free/busy calendar transparency, availability overrides and hardened iframe embed security.

• Respect calendar event transparency (free/busy) across all providers self-hosted
• Availability overrides applied to business-hours calculation self-hosted
• Hardened iframe embed security with wildcard domains and www auto-matching self-hosted
• Config-driven dashboard extension system self-hosted
• Plain-text bodies added to all email templates cloud

Session-free WebSocket for cross-origin embeds and smoother Cloudron install.

• Session-free WebSocket for cross-origin embed iframes self-hosted
• Auto-generated secret key on first Cloudron install self-hosted

Signed token authentication for embedded booking pages.

• Signed token auth for embeds, replacing cookie rewriting self-hosted

Booking and auth form validation now surface errors per field on blur.

• Per-field booking validation errors shown on touched fields self-hosted
• Debounced email validation on auth forms self-hosted

New features reference page, JSON-LD docs markup and release workflow tooling.

• Features page with full feature reference cloud

Internal release tooling to sync version tags to the Core mirror.

Embedded-iframe booking improvements for cross-site scheduling.

• Embedded scheduling works cross-site with correct theme background and layout self-hosted
• Version number shown in the site footer self-hosted

A small Docker build-script fix.

Cloudron OIDC and sendmail addons are now auto-detected at startup.

• Automatic detection of Cloudron OIDC and sendmail addons self-hosted

Calendar integration password handling fixes.

Booking pages can be embedded in any website, with a new weekly calendar view.

• Embed your booking page in any website via iframe self-hosted
• Weekly calendar view for scheduling self-hosted

Telegram booking notifications and confirmation-page fixes.

• Telegram notifications for bookings, with a guided connection wizard self-hosted
• Cancellation and reschedule emails sent in the attendee's language self-hosted

A public changelog page plus footer links to changelog and docs.

• Public changelog page with full release history cloud
• Google Meet links created automatically for bookings self-hosted

Hardened OAuth/SSO sign-in security and an option to disable password auth.

• Option to disable password-based sign-in
• Hardened OAuth single sign-on security and validation self-hosted

Generic OAuth/OIDC single sign-on and localised meeting cancel/reschedule pages.

• Sign in with any OAuth/OIDC provider for single sign-on self-hosted
• Localised meeting cancel, reschedule and confirmation pages self-hosted

Calendar OAuth scope tightening and docs navigation polish.

• Requests only the calendar events OAuth scope instead of broad calendar access self-hosted

Documentation expansion and registration gating.

• Expanded documentation with new articles, author profiles, tag filtering and search cloud
• Feature flag to enable or disable user registration self-hosted
• Embeddable booking widget script self-hosted

Calendar and meeting settings UI fixes.

• Inactive calendar integrations now shown in meeting settings with fixed links self-hosted

Onboarding timezone persistence and test setup fixes.

• Browser-detected timezone now saved during onboarding self-hosted

Subscription reliability, billing data retention and cascade-delete fixes.

• Stripe event payloads retained for 30 days then automatically removed cloud
• More accurate trial subscription handling cloud

Structured logging infrastructure and logging hygiene.

Booking duration and video OAuth fixes.

• Meeting duration now correctly preserved throughout the booking flow

Per-attendee email localisation, CalDAV improvements and a broad mobile UI overhaul.

• Per-attendee locale for emails, with plain-text fallbacks for all templates
• Improved CalDAV discovery and Zimbra support self-hosted
• Mobile timeline view for the availability grid self-hosted
• Video integration editing with URLs shown in the list self-hosted
• Wide-ranging mobile layout improvements across dashboard settings self-hosted

CalDAV, Zimbra calendar support and deployment fixes.

• Zimbra calendar provider support self-hosted

A small login page fix.

Docker and Railway deployment build fixes.

Integration health monitoring and onboarding email improvements, with many fixes.

• Integration health tracking that notifies users when calendar or video connections keep failing self-hosted
• Onboarding email funnel with verification reminders and a founder welcome cloud
• Page titles and meta descriptions on authentication pages self-hosted
• Clearer error when Microsoft sign-in needs admin consent self-hosted
• Railway deployment support via Nixpacks self-hosted

Security hardening across booking spam protection, rate limiting and structured logging.

• Booking form spam protection with honeypot and reCAPTCHA v3 self-hosted
• Rate limiting across dashboard write operations, theme and meeting actions self-hosted
• Zimbra calendar provider with SSRF protection self-hosted
• Structured JSON logging self-hosted

Booking theme contrast and layout fixes, plus an icon XSS hardening.

Zimbra calendar support and HTTP proxy configuration.

• Zimbra calendar provider support self-hosted
• HTTP proxy configuration support self-hosted

French translation support and custom video provider improvements, with extensive fixes.

• Complete French translation self-hosted
• Custom video provider with template variables in meeting URLs self-hosted
• Configurable listen IP for self-hosted deployments self-hosted
• Improved CalDAV server detection and authentication self-hosted

• Rewrite author email to GitHub no-reply for tymeslot-core sync
• Other bug fixes and stability improvements.

Paid plans, privacy-friendly analytics, and hardened embedding.

• Feature gating for subscription tiers — automations locked behind paid plans cloud
• Analytics integration with Umami
• SEO metadata and sitemap for the marketing site cloud
• Secure-by-default embedding with an inline dashboard preview
• Video room recovery with automatic retry logic
• External database support for Docker deployments self-hosted
• Comprehensive SMTP configuration with startup validation self-hosted

Stripe billing and full subscription management.

• Stripe subscription management with trial support cloud
• Billing portal and full subscription status dashboard cloud
• Automated Stripe webhook handling for disputes, refunds, and trial lifecycle events cloud
• Drag-and-drop ordering of meeting types
• Branded "Powered by Tymeslot" footer on scheduling pages cloud

Smarter availability and richer meeting types.

• Duration-aware availability gap logic with high-performance ETS caching
• Microsoft Outlook availability hardening and Teams meeting creation on booking
• Multiple configurable reminders per meeting type
• Slug-based meeting type URLs

A full dashboard redesign and embeddable booking.

• Complete dashboard and UI redesign with a modern token-based design system
• Booking widget embedding for any website, with per-domain security controls
• Booking page internationalisation and localisation for international guests
• Pluggable calendar architecture with fault-tolerant background sync workers
• Unified webhook notifications dashboard with delivery resilience and retry logic
• Redesigned transactional email templates
• Session and OAuth security hardening

The first Tymeslot release.

• Customisable meeting types with availability rules, buffer times, and daily booking limits
• Google Calendar and Microsoft Outlook integration — availability synced automatically
• Booking confirmation and reminder emails
• OAuth and password-based authentication

Internal pre-push hook and core-sync tooling fixes.

All-day recurring event handling and standalone build fixes.

Calendar data backfill and test-isolation fixes.

Type-spec corrections and security and test reliability fixes.

A Google Calendar OAuth scope and discovery crash fix.