v2.25.1
gitroomhq/postiz-appv2.25.1Oct 11, 2026by egelhaus
Upgrading?
AI Summary
This release prioritizes security by addressing a critical vulnerability and introduces significant UI/UX enhancements for the calendar, tags, and billing modules. It also includes fixes for integrations, account management, and improvements to the Model Context Protocol (MCP) tools.
Key Highlights
- Addresses a critical security vulnerability (PSA-2026-4QX1WG) requiring immediate user upgrade.
- Enhances calendar functionality with visual indicators for published posts, multi-select filtering, and improved TikTok draft management.
- Introduces tag editing capabilities directly within the tags dropdown and improves label readability.
- Fixes billing persistence issues and logic for re-enabling channels upon plan upgrades.
- Updates Model Context Protocol (MCP) tools to support media listing via the public API.
New Features
- Auto text direction (RTL) support in composer editor and previews.
- Rename channels while maintaining the original name.
- Show login method in Global Settings.
- Connect TikTok UPLOAD drafts to published posts via the open-post icon.
- List media via public API and MCP mediaListTool.
Full Release Notes
> [!IMPORTANT] > This release addresses the security vulnerability [PSA-2026-4QX1WG](https://gadvisory.org/advisories/PSA-2026-4QX1WG), all users are recommended to upgrade immediately. ## What's Changed * docs(security): a role address for time-critical reports instead of a personal one by @egelhaus in https://github.com/gitroomhq/postiz-app/pull/2195 * fix(settings): hide the Teams tab from the User role by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2200 * feat(tags): expose tag editing in the tags dropdown by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/1828 * fix(tags): readable calendar tag labels on any tag color by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/1829 * feat(calendar): open-post link icon that resolves the release URL on click by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2194 * fix(calendar): surface curated provider errors in the calendar, public API and MCP by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2119 * fix(billing): persist cancelAt on cancel/reactivate instead of waiting for the webhook by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2112 * fix(frontend): skip the Sentry report dialog for errors from browser extensions by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2165 * feat(channels): rename a channel in Postiz while keeping its original name by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2190 * docs(claude): code invoked by external webhooks must not throw by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2202 * feat(subscription): re-enable disabled channels when the new plan can hold all of them by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2160 * fix: guard against duplicate Stripe subscriptions per customer by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2061 * feat: show login method in Global Settings by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2203 * fix(calendar): make the post delete icon and confirmation red, swap Delete and Preview by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2204 * fix(posts): find-slot never responds when all channels are disabled by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2207 * feat(calendar): channel multi-select filter above the calendar by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2205 * feat(calendar): frame published posts in green with a checkmark by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2206 * fix(permissions): look up the refreshed channel by internalId in the channel limit check by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2208 * feat: auto text direction (RTL) in composer editor and previews by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2209 * feat(sponsors): re-add chatbotx to readme by @egelhaus in https://github.com/gitroomhq/postiz-app/pull/2210 * fix(instagram): map the Trial Reel publish limit error to a readable message by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2215 * feat: point MCP upload tools to the CLI and public API for private files by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2216 * feat: list media via public API and MCP mediaListTool by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/1926 * fix(frontend): honor the AM/PM date metric in the post date picker time input by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2217 * fix(calendar): open-post icon handles TikTok photo posts and links that are not ready by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2211 * feat(tiktok): connect UPLOAD drafts to the published post from the open-post icon by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2212 * fix(calendar): put Delete right-most in the post hover bar, after Preview and Duplicate by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2221 * fix(integrations): log the error behind "Authentication failed" on social connect by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2225 * fix(account): ignore disabled team members when deleting an account by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2226 * fix(integrations): reconnecting a channel wiped its stored refresh token by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/1884 **Full Changelog**: https://github.com/gitroomhq/postiz-app/compare/v2.25.0...v2.25.1
Related Repositories
The AI that really does things. Any OS. Any Platform. The lobster way. 🦞
Interactive roadmaps, guides and other educational content to help developers grow in their careers.
Reverse engineer anything with agents, from app behavior down to native binaries.
The open source coding agent.
Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.