v0.25.39 v0.25.40

Name: csm
Author: SesameAILabs

medium risk

SesameAILabs/csmSep 11, 2026 → Sep 15, 20264 days between releases

What's New

Adds ClickHouse, secure invite tokens, and sales tax feature flagging.

Breaking Changes

ClickHouse added to production compose stack requires infrastructure setup.
Secure invite tokens change token format, potentially breaking external integrations.
Sales tax is now behind a feature flag; ensure it is enabled if required.

New Features

ClickHouse integration for production.
Cryptographically secure invite tokens.
Edit support for inventory adjustments.
Date/Week period columns in financial reports.
Sales tax functionality behind a feature flag.

Improvements

Security hardening via secure invite tokens.
Infrastructure upgrade with ClickHouse integration.
Internal refactoring to tenant-bound models.
Enhanced financial reporting with new period columns.

Bug Fixes

Fix sync vendor credit balances on apply-to-bills.
Prevent duplicate GL entries on inventory adjustments.
Honor full unlock date window in transactions locking.
Surface promise pool errors in bank matching.
Scope ability cache by tenant and user.

Upgrade Notes

Configure ClickHouse infrastructure as it is now part of the production stack. If using sales tax, enable the feature flag. Verify external token validation logic due to secure invite token changes.

The Two Releases

v0.25.39

Sep 11, 2026· 1 month ago

A major refactoring release involving TypeScript migration, Ramda to fp-ts conversion, and security hardening for JWT tokens.

Full release notes

v0.25.40

Sep 15, 2026· 1 month ago

This release introduces significant infrastructure updates, including the addition of ClickHouse, feature flagging for sales tax, and security enhancements.

Full release notes