Quoi de neuf

Booking-page fixes: every free day is reachable, failures explain themselves, and video invitations reach the attendee.

• Every bookable day and month is reachable on the booking calendar auto-hébergé
• A page that cannot load its times says so and asks the visitor to retry auto-hébergé
• An ad-hoc meeting that books a video room now invites the attendee auto-hébergé
• Slack notifications are sent when Telegram is connected as well auto-hébergé
• CalDAV calendars connect to servers that answer 405 to discovery auto-hébergé

Booking pages now open on a day visitors can actually book, and cancellation emails link back to the host.

• The booking calendar opens on the first free day with its times loaded auto-hébergé
• Rescheduling lands on a bookable day instead of an empty month auto-hébergé
• Webhook payloads now include the meeting's guests auto-hébergé
• The cancellation email links back to the host's booking page auto-hébergé

A reliability and security release: bookings fail safe, integrations survive provider outages, and sign-in events are audited.

• Bookings are refused for times the host's schedule never offered auto-hébergé
• A video provider outage now trips a circuit breaker instead of retrying auto-hébergé
• Booking emails wait out a mail outage instead of being dropped auto-hébergé
• Account lockouts, password changes and social sign-ins are now audited auto-hébergé
• Booking errors and the agenda countdown appear in the visitor's language auto-hébergé

A reliability release for bookings that use a video meeting, calendar sync and profile photos.

• A booking with a video meeting is confirmed exactly once, however slowly the link arrives auto-hébergé
• A Teams account that cannot host a meeting confirms the booking without a link auto-hébergé
• CalDAV calendars are found on servers that answer under a subpath auto-hébergé
• Choosing a second profile photo no longer takes the page down auto-hébergé
• Email addresses on newer domain endings are accepted again auto-hébergé

Video integrations can now reach a meeting server on your own private network.

• ALLOW_PRIVATE_IPS_FOR_VIDEO permits a meeting server on an internal network auto-hébergé
• Custom video links and self-hosted MiroTalk both accept a private address auto-hébergé

Meeting polls settle a group on a time by voting, and transactional emails can now carry your own branding.

• Propose several candidate times and let invitees vote to settle on one auto-hébergé
• Confirming the winning time books the meeting with everyone invited auto-hébergé
• Set your own logo, brand name and accent colour on transactional emails auto-hébergé
• Email buttons and links now meet accessibility contrast requirements auto-hébergé
• Nextcloud calendars now connect on installs served from a subdirectory auto-hébergé

A security release covering the login redirect check and three dependency advisories.

• Login redirects reject crafted targets that a browser would resolve off-site auto-hébergé
• Bundled dependencies updated to clear three security advisories auto-hébergé

Availability is now built from named schedules, and every meeting type can follow its own.

• Keep up to five named schedules, each with its own hours, breaks and rules auto-hébergé
• Every meeting type follows the schedule you give it, or your default schedule auto-hébergé
• Buffer, minimum notice and the booking window now belong to a schedule auto-hébergé
• Rate limiting no longer locks out signups or visitors behind a shared proxy auto-hébergé
• Webhook deliveries stop retrying once the endpoint has rejected them outright auto-hébergé
• Now built on the Cloudron 5.1 base image auto-hébergé

The dashboard now opens on your calendar, and calendar connection problems stay visible until fixed.

• The dashboard opens on your calendar, with all navigation in the sidebar auto-hébergé
• The Integrations badge names the integration that needs attention auto-hébergé
• A broken calendar connection alerts once and stays flagged until you reconnect auto-hébergé
• Fixed crashes when opening an event with a reminder or when a break is rejected auto-hébergé

The meeting type editor moves to tabs, rescheduling notifies everyone again, and translations are corrected throughout.

• Edit a meeting type through five tabs instead of one long scrolling form auto-hébergé
• Rescheduling now sends its own email and replaces the existing calendar entry auto-hébergé
• Rescheduling a booking again fires webhooks, chat alerts and reminders auto-hébergé
• Every translation reviewed and corrected across all five languages
• Pricing plan cards are translated, and long text no longer overflows cloud

Tymeslot now speaks six languages, and hosts can cap how many bookings they take.

• The whole app now speaks German, French, Italian, Ukrainian and Czech auto-hébergé
• Cap how many bookings you accept per day, week or month auto-hébergé
• Give each connected calendar its own colour, and show or hide it in the grid auto-hébergé
• Disconnecting a video provider can now clean up its meeting rooms too auto-hébergé
• The marketing site is localised, with prices in each market's own currency cloud

Calendar feed subscriptions and invoicing for paid bookings, with CalDAV sync and daylight-saving fixes.

• Subscribe to any published calendar feed by URL and have it block your availability auto-hébergé
• Invoices are now issued automatically for paid meeting bookings auto-hébergé
• Download your subscription invoices from the billing dashboard cloud
• CalDAV sync no longer stalls or drops events on stricter servers auto-hébergé
• Booking times stay correct across daylight-saving and the 2026 clock changes auto-hébergé

New email delivery providers alongside calendar sync, video link and email reliability fixes.

• Send email through SendGrid, Mailgun or AhaSend as well as SMTP and Postmark auto-hébergé
• Read-only calendars are no longer offered as booking targets auto-hébergé
• Organisers and guests now reliably receive video join links auto-hébergé
• CalDAV sync recovers from emptied calendars and stricter servers auto-hébergé
• A misconfigured email provider now fails at startup instead of silently dropping mail auto-hébergé

External PostgreSQL support and a slim Docker image, faster page loads, and calendar sync and accessibility fixes.

• Connect to an external PostgreSQL with DATABASE_URL, including TLS auto-hébergé
• A slim Docker image that runs PostgreSQL as its own container auto-hébergé
• Faster page loads with zstd-compressed assets and lighter provider icons auto-hébergé
• Calendar event updates use the provider's id, fixing Google sync failures auto-hébergé
• Marketing and legal pages meet WCAG AA contrast cloud

Descriptions on meeting type cards, a Stripe API generation upgrade, a Connect onboarding fix, and security patches for six bundled dependencies.

• Descriptions now appear on meeting type cards auto-hébergé
• Security patches for six bundled dependencies, including Phoenix and LiveView auto-hébergé
• Stripe now runs on the 2025-11-17 API generation, no webhook changes needed
• Stripe Connect onboarding no longer blocked by the security policy auto-hébergé
• Booking pages no longer fail on daylight-saving changeover days auto-hébergé
• Renewed subscriptions are no longer cancelled prematurely cloud

Meeting reschedule and cancellation cleanup fixes, timezone display corrections, and Outlook calendar sync hardening.

A maintenance release with background job, build configuration and contribution tooling fixes.

A branded 404 page, an onboarding calendar fix, and security patches to bundled dependencies.

• A branded 404 page for unknown routes auto-hébergé
• Security patches for bundled HTTP dependencies (plug, hpax, mint) auto-hébergé

A unified integrations hub, calendar colour sync, and a live dashboard agenda, alongside encryption, security and accessibility hardening.

• Unified integrations hub for calendars, video and payments with health status and one-click reconnect auto-hébergé
• Event colours now sync both ways with your calendar provider auto-hébergé
• Data-at-rest encryption key can be rotated independently of deployment auto-hébergé
• Live "Your day" agenda and setup nudges on the dashboard overview auto-hébergé
• Improved keyboard and screen-reader accessibility across booking and dashboard auto-hébergé

A fuller in-app calendar, Apple iCloud sync, and Tymeslot's move to open source under AGPLv3.

• Create recurring and all-day calendar events, with colours and reminders auto-hébergé
• Quick-add, search, agenda view and keyboard shortcuts for the calendar auto-hébergé
• Apple iCloud added as a calendar provider alongside Google, Outlook and CalDAV auto-hébergé
• Live booking-page preview and theme picker moved into onboarding auto-hébergé
• Relicensed under AGPLv3, so self-hosters can modify and redistribute Tymeslot auto-hébergé

Personal free/busy feed, richer calendar events, and CalDAV improvements.

• Personal free/busy calendar feed for sharing availability externally auto-hébergé
• Calendar events enriched with conference links, language tags and free/busy status auto-hébergé
• SMTP now accepts wildcard TLS certificates auto-hébergé

Session security hardening, stage-aware onboarding emails, and marketing page improvements.

• Sessions end immediately on logout or credential change auto-hébergé
• Onboarding emails adapt to each user's activation stage cloud
• Structured data and performance improvements on marketing pages cloud

WordPress embed guidance, a public FAQ page, and stability fixes.

• Embed dashboard links WordPress users to the official plugin auto-hébergé
• Public FAQ page covering common questions cloud
• Blocked embeds show a clear notice rather than the homepage auto-hébergé

One-click Google Calendar connect in onboarding, plus small fixes.

• One-click Google Calendar connect during onboarding auto-hébergé

A booking analytics dashboard with traffic sources, conversion and device breakdowns, plus a marketing blog and hardened security.

• Booking analytics dashboard with traffic sources, visits and conversion over time auto-hébergé
• Cookie-less, bot-filtered analytics with UTM and tracking-parameter capture auto-hébergé
• Booking analytics available on Pro cloud
• Marketing blog with featured posts, cover images and competitor comparison pages cloud
• Tighter content security policy and SSRF protection on calendar and video integrations auto-hébergé

Guest attendees with email RSVP, richer booking-link sharing, and a new pricing page.

• Guest attendees with email RSVP on bookings, including a per-type guest limit auto-hébergé
• Private and direct booking links for individual meeting types auto-hébergé
• Booking-link share previews with organiser photo and details auto-hébergé
• Features and Resources navigation menus with icons auto-hébergé
• New pricing page cloud

Zoom and Google Meet calendar reliability fixes.

Paid bookings via Stripe Connect, custom booking questions, Zoom and Slack integrations, an admin control panel and a guided dashboard tour.

• Paid meeting types with Stripe Connect checkout, refunds and a payments dashboard auto-hébergé
• Custom booking questions shown in emails, calendar events and confirmations auto-hébergé
• Zoom and Slack integrations for video meetings and booking notifications auto-hébergé
• Admin control panel for self-hosted installs with sign-in and security toggles auto-hébergé
• Guided post-onboarding dashboard tour and what's-new announcements auto-hébergé

Calendar sync and Cloudron boot reliability fixes.

Inline Google Meet links on Google Calendar events, plus calendar fixes.

• Google Meet links created inline with Google Calendar events auto-hébergé

Booking title, calendar move and email-handling fixes.

Profession hub redesign and a CalDAV duplicate-invite fix.

Onboarding email funnel for new users plus booking calendar and calendar-sync fixes.

• Onboarding email funnel for newly verified users cloud

Founder welcome email with one-click unsubscribe and marketing opt-out controls.

• Founder welcome email with one-click unsubscribe cloud

Custom booking page colours, redaction-aware file logging, and calendar-sync fixes.

• Custom colour picker for booking page palettes and backgrounds auto-hébergé
• Rotating file logs with sensitive-data redaction auto-hébergé

Booking form localisation, email rendering, and CalDAV booking fixes.

Auto-pausing of unhealthy integrations, refined docs filtering, and updated legal policies.

• Auto-pause integrations stuck unhealthy past the configured cutoff auto-hébergé
• Topic, provider and self-hosting filters for docs cloud
• Updated v1.1 Terms and Privacy Policy cloud

mailbox.org CalDAV support with guided provider setup and integration credential alerts.

• mailbox.org added as a CalDAV calendar provider auto-hébergé
• Guided CalDAV setup with per-provider articles and in-form links auto-hébergé
• Immediate alerts when integration credentials become invalid auto-hébergé
• Load environment variables from a .env file at boot auto-hébergé

Richer calendar views and resilient CalDAV reconnection and credential rotation.

• 3-day calendar view with swipe navigation and responsive view demotion auto-hébergé
• CalDAV credential rotation without recreating the integration auto-hébergé
• OAuth reconnect button on calendar integration cards auto-hébergé
• Automatic reauth flagging when CalDAV sync hits 401 auto-hébergé

Reliability and security fixes across booking forms, billing webhooks and reschedule emails.

Italian language support plus extensive security and reliability hardening.

• Italian added to supported booking and email languages auto-hébergé
• Stronger account lockout, open-redirect and webhook SSRF protections auto-hébergé

Calendar sync reliability fixes and email translations.

• Dashboard warning when a calendar integration has no calendars selected auto-hébergé
• User-facing emails translated into French, German and Ukrainian auto-hébergé

Docker first-run, availability and request-isolation fixes.

Booking security hardening and calendar fixes.

• Closed access-control gaps on meeting cancel and reschedule auto-hébergé

Subscription dashboard and calendar sync fixes.

• Subscription dashboard covers past-due and unpaid states with post-checkout polling cloud

Recurring-event availability and calendar audit fixes.

Version metadata fixes for release tooling.

Changelog, manifest and tooling fixes.

CalDAV reliability overhaul with offline write queue and conflict resolution.

• CalDAV offline write queue so calendar changes are retried when the server is unreachable auto-hébergé
• CalDAV conflict resolution with conditional-write retries on transient errors auto-hébergé
• Centralised attendee notifications with change detection and correct ICS sequencing auto-hébergé
• Scheduling page availability refreshes automatically after calendar sync auto-hébergé

Timezone handling and security hardening across booking and calendar sync.

• Robust timezone handling with quoted-TZID normalisation and DST-correct conversions auto-hébergé
• Public booking page honours the configured meeting type order auto-hébergé
• Mobile dashboard and auth page layout fixes auto-hébergé

Redesigned 2026 emails, a canonical calendar event model and stronger CalDAV sync.

• Redesigned transactional and system emails for 2026
• Periodic forced full re-sync and event fingerprinting for CalDAV calendars auto-hébergé
• Unified calendar event model normalising all providers auto-hébergé
• Redesigned profession and category hub pages with improved SEO cloud
• Open Graph social card images for shared links auto-hébergé

Multi-attendee meetings, calendar invitations and a redesigned onboarding flow.

• Multi-attendee calendar events with invitation emails and attendee management auto-hébergé
• Ad-hoc meeting invitations created from the dashboard calendar auto-hébergé
• Attendees notified when the organiser updates event details auto-hébergé
• Redesigned split-screen onboarding with step-by-step scheduling setup auto-hébergé
• Stricter domain and email validation with typo suggestions auto-hébergé

A calendar grid with inline event editing and a hardened sync engine.

• Calendar grid with inline title editing and event management auto-hébergé
• Calendar event sync engine with batch webhooks and async operations auto-hébergé
• Scheduling and calendar mode tab bar in the dashboard auto-hébergé
• Optional profile timezone auto-hébergé

Multi-account integration support with curated timezone handling.

• Connect multiple accounts per integration with per-account uniqueness auto-hébergé
• Email location labels translated per recipient's locale auto-hébergé
• Improved timezone picker with popular-first ordering auto-hébergé

Cloudron deployment, meeting-type and availability hardening fixes.

• Autres corrections de bugs et améliorations de la stabilité.

Embed system split into inline and modal modes, responsive video backgrounds, and many profession landing pages.

• Inline and modal embed modes for the booking widget auto-hébergé
• Responsive video transcoding for uploaded backgrounds auto-hébergé
• Availability now spans the full 42-day calendar display range auto-hébergé
• New profession landing pages with free-plan pricing and FAQs cloud

Profession landing pages and a redesigned site footer with extra link columns.

• 27 profession landing pages at /for/:slug cloud
• Redesigned footer with extra link columns auto-hébergé
• Signed parent-origin verification for embedded booking pages auto-hébergé

Free/busy calendar transparency, availability overrides and hardened iframe embed security.

• Respect calendar event transparency (free/busy) across all providers auto-hébergé
• Availability overrides applied to business-hours calculation auto-hébergé
• Hardened iframe embed security with wildcard domains and www auto-matching auto-hébergé
• Config-driven dashboard extension system auto-hébergé
• Plain-text bodies added to all email templates cloud

Session-free WebSocket for cross-origin embeds and smoother Cloudron install.

• Session-free WebSocket for cross-origin embed iframes auto-hébergé
• Auto-generated secret key on first Cloudron install auto-hébergé

Signed token authentication for embedded booking pages.

• Signed token auth for embeds, replacing cookie rewriting auto-hébergé

Booking and auth form validation now surface errors per field on blur.

• Per-field booking validation errors shown on touched fields auto-hébergé
• Debounced email validation on auth forms auto-hébergé

New features reference page, JSON-LD docs markup and release workflow tooling.

• Features page with full feature reference cloud

Internal release tooling to sync version tags to the Core mirror.

Embedded-iframe booking improvements for cross-site scheduling.

• Embedded scheduling works cross-site with correct theme background and layout auto-hébergé
• Version number shown in the site footer auto-hébergé

A small Docker build-script fix.

Cloudron OIDC and sendmail addons are now auto-detected at startup.

• Automatic detection of Cloudron OIDC and sendmail addons auto-hébergé

Calendar integration password handling fixes.

Booking pages can be embedded in any website, with a new weekly calendar view.

• Embed your booking page in any website via iframe auto-hébergé
• Weekly calendar view for scheduling auto-hébergé

Telegram booking notifications and confirmation-page fixes.

• Telegram notifications for bookings, with a guided connection wizard auto-hébergé
• Cancellation and reschedule emails sent in the attendee's language auto-hébergé

A public changelog page plus footer links to changelog and docs.

• Public changelog page with full release history cloud
• Google Meet links created automatically for bookings auto-hébergé

Hardened OAuth/SSO sign-in security and an option to disable password auth.

• Option to disable password-based sign-in
• Hardened OAuth single sign-on security and validation auto-hébergé

Generic OAuth/OIDC single sign-on and localised meeting cancel/reschedule pages.

• Sign in with any OAuth/OIDC provider for single sign-on auto-hébergé
• Localised meeting cancel, reschedule and confirmation pages auto-hébergé

Calendar OAuth scope tightening and docs navigation polish.

• Requests only the calendar events OAuth scope instead of broad calendar access auto-hébergé

Documentation expansion and registration gating.

• Expanded documentation with new articles, author profiles, tag filtering and search cloud
• Feature flag to enable or disable user registration auto-hébergé
• Embeddable booking widget script auto-hébergé

Calendar and meeting settings UI fixes.

• Inactive calendar integrations now shown in meeting settings with fixed links auto-hébergé

Onboarding timezone persistence and test setup fixes.

• Browser-detected timezone now saved during onboarding auto-hébergé

Subscription reliability, billing data retention and cascade-delete fixes.

• Stripe event payloads retained for 30 days then automatically removed cloud
• More accurate trial subscription handling cloud

Structured logging infrastructure and logging hygiene.

Booking duration and video OAuth fixes.

• Meeting duration now correctly preserved throughout the booking flow

Per-attendee email localisation, CalDAV improvements and a broad mobile UI overhaul.

• Per-attendee locale for emails, with plain-text fallbacks for all templates
• Improved CalDAV discovery and Zimbra support auto-hébergé
• Mobile timeline view for the availability grid auto-hébergé
• Video integration editing with URLs shown in the list auto-hébergé
• Wide-ranging mobile layout improvements across dashboard settings auto-hébergé

CalDAV, Zimbra calendar support and deployment fixes.

• Zimbra calendar provider support auto-hébergé

A small login page fix.

Docker and Railway deployment build fixes.

Integration health monitoring and onboarding email improvements, with many fixes.

• Integration health tracking that notifies users when calendar or video connections keep failing auto-hébergé
• Onboarding email funnel with verification reminders and a founder welcome cloud
• Page titles and meta descriptions on authentication pages auto-hébergé
• Clearer error when Microsoft sign-in needs admin consent auto-hébergé
• Railway deployment support via Nixpacks auto-hébergé

Security hardening across booking spam protection, rate limiting and structured logging.

• Booking form spam protection with honeypot and reCAPTCHA v3 auto-hébergé
• Rate limiting across dashboard write operations, theme and meeting actions auto-hébergé
• Zimbra calendar provider with SSRF protection auto-hébergé
• Structured JSON logging auto-hébergé

Booking theme contrast and layout fixes, plus an icon XSS hardening.

Zimbra calendar support and HTTP proxy configuration.

• Zimbra calendar provider support auto-hébergé
• HTTP proxy configuration support auto-hébergé

French translation support and custom video provider improvements, with extensive fixes.

• Complete French translation auto-hébergé
• Custom video provider with template variables in meeting URLs auto-hébergé
• Configurable listen IP for self-hosted deployments auto-hébergé
• Improved CalDAV server detection and authentication auto-hébergé

• Rewrite author email to GitHub no-reply for tymeslot-core sync
• Autres corrections de bugs et améliorations de la stabilité.

Paid plans, privacy-friendly analytics, and hardened embedding.

• Feature gating for subscription tiers — automations locked behind paid plans cloud
• Analytics integration with Umami
• SEO metadata and sitemap for the marketing site cloud
• Secure-by-default embedding with an inline dashboard preview
• Video room recovery with automatic retry logic
• External database support for Docker deployments auto-hébergé
• Comprehensive SMTP configuration with startup validation auto-hébergé

Stripe billing and full subscription management.

• Stripe subscription management with trial support cloud
• Billing portal and full subscription status dashboard cloud
• Automated Stripe webhook handling for disputes, refunds, and trial lifecycle events cloud
• Drag-and-drop ordering of meeting types
• Branded "Powered by Tymeslot" footer on scheduling pages cloud

Smarter availability and richer meeting types.

• Duration-aware availability gap logic with high-performance ETS caching
• Microsoft Outlook availability hardening and Teams meeting creation on booking
• Multiple configurable reminders per meeting type
• Slug-based meeting type URLs

A full dashboard redesign and embeddable booking.

• Complete dashboard and UI redesign with a modern token-based design system
• Booking widget embedding for any website, with per-domain security controls
• Booking page internationalisation and localisation for international guests
• Pluggable calendar architecture with fault-tolerant background sync workers
• Unified webhook notifications dashboard with delivery resilience and retry logic
• Redesigned transactional email templates
• Session and OAuth security hardening

The first Tymeslot release.

• Customisable meeting types with availability rules, buffer times, and daily booking limits
• Google Calendar and Microsoft Outlook integration — availability synced automatically
• Booking confirmation and reminder emails
• OAuth and password-based authentication

Internal pre-push hook and core-sync tooling fixes.

All-day recurring event handling and standalone build fixes.

Calendar data backfill and test-isolation fixes.

Type-spec corrections and security and test reliability fixes.

A Google Calendar OAuth scope and discovery crash fix.