v3.0.0
cloudflare/pingorav3.0.0Aug 29, 2026by chamikaJ
Upgrading?
AI Summary
This major release introduces an open-core model, merging Enterprise and Open Source codebases under version 3.x. It includes new features like a client portal and project finance tools, alongside significant security hardening and database migrations.
Key Highlights
- Open-core restructuring with Enterprise code moved to `src/ee/`
- New client portal, project finance tools, and Slack integration
- Security improvements including SSRF, XSS, and SQL injection fixes
- ~40 new database migrations
Breaking Changes
- Users pinned to version 2 must review migration set and licensing split before upgrading
- Docker images renamed to `ghcr.io/worklenz/worklenz_backend` and `worklenz_frontend`
New Features
- Client portal with clients, invoices, services, requests, chat, and settings
- Project finance features including rate cards and expenses
- Slack integration for projects and settings
- Home dashboard rework and planner/schedule views
- Guest access levels and recurring tasks
Full Release Notes
Worklenz **3.0.0** is the first release of the **open-core edition**. The open-source and Enterprise editions now share a version scheme — the Enterprise line is at 3.x, and future open-source releases continue from 3.x. The jump from `v2.1.7` reflects this alignment, not a break in the 2.x line. This release consolidates roughly six months of work from the `development` branch onto `main`. ## Highlights ### Open-core restructuring - Enterprise/Business features moved behind a dedicated `src/ee/` seam (backend and frontend) with their own `LICENSE.md` - Exposed Business Plan source removed from the public tree - Docker / Nginx management scripts and self-hosting setup restored and documented ### Features folded in from `development` - **Client portal** — clients, invoices, services, requests, chat, portal settings - **Project finance** — rate cards, finance drawer/table, expenses, per-team currency - **Slack integration** — project + settings integration, channel management - Home dashboard rework, planner/schedule views, recurring tasks, time entries - Guest access level, phase assignees, task-comment soft delete, project links ### Security - CodeQL pass on the merged tree: fixed SSRF in JIRA import, regex injection in comment mentions, ReDoS in the URL extractor, parameter type-confusion, tainted format strings, DOM XSS in entity decoding, and replaced hand-rolled HTML sanitizers with `sanitize-html` / DOMPurify (#410, #412) - Earlier SQL-injection hardening across controllers (#369) ### Database - ~40 new migrations (client portal, rate cards, notifications, holidays, indexes) — see `worklenz-backend/database/migrations` ## Upgrade notes - Run pending database migrations before starting the new backend - Docker images are published as `ghcr.io/worklenz/worklenz_backend` and `worklenz_frontend`, tagged `3.0.0`, `3.0`, `3`, and `latest` - Users pinned to `:2` should review the migration set and the `src/ee/` licensing split before moving to `:3` **Full diff:** https://github.com/Worklenz/worklenz/compare/v2.1.7...v3.0.0
Related Repositories
A cross-platform desktop All-in-One assistant for Claude Code, Codex, OpenCode, OpenClaw, Grok Build & Hermes Agent. Only official website: ccswitch.io
An open-source remote desktop application designed for self-hosting, as an alternative to TeamViewer.
Build smaller, faster, and more secure desktop and mobile applications with a web frontend.
π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection — all without a single pixel of video.
Incredibly fast JavaScript runtime, bundler, test runner, and package manager – all in one