v2.25.1

gitroomhq/postiz-appv2.25.1Oct 11, 2026by egelhaus

Upgrading?

AI Summary

This release prioritizes security by addressing a critical vulnerability and introduces significant UI/UX enhancements for the calendar, tags, and billing modules. It also includes fixes for integrations, account management, and improvements to the Model Context Protocol (MCP) tools.

Key Highlights

  • Addresses a critical security vulnerability (PSA-2026-4QX1WG) requiring immediate user upgrade.
  • Enhances calendar functionality with visual indicators for published posts, multi-select filtering, and improved TikTok draft management.
  • Introduces tag editing capabilities directly within the tags dropdown and improves label readability.
  • Fixes billing persistence issues and logic for re-enabling channels upon plan upgrades.
  • Updates Model Context Protocol (MCP) tools to support media listing via the public API.

New Features

  • Auto text direction (RTL) support in composer editor and previews.
  • Rename channels while maintaining the original name.
  • Show login method in Global Settings.
  • Connect TikTok UPLOAD drafts to published posts via the open-post icon.
  • List media via public API and MCP mediaListTool.

Full Release Notes

> [!IMPORTANT]
> This release addresses the security vulnerability [PSA-2026-4QX1WG](https://gadvisory.org/advisories/PSA-2026-4QX1WG), all users are recommended to upgrade immediately.

## What's Changed
* docs(security): a role address for time-critical reports instead of a personal one by @egelhaus in https://github.com/gitroomhq/postiz-app/pull/2195
* fix(settings): hide the Teams tab from the User role by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2200
* feat(tags): expose tag editing in the tags dropdown by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/1828
* fix(tags): readable calendar tag labels on any tag color by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/1829
* feat(calendar): open-post link icon that resolves the release URL on click by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2194
* fix(calendar): surface curated provider errors in the calendar, public API and MCP by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2119
* fix(billing): persist cancelAt on cancel/reactivate instead of waiting for the webhook by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2112
* fix(frontend): skip the Sentry report dialog for errors from browser extensions by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2165
* feat(channels): rename a channel in Postiz while keeping its original name by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2190
* docs(claude): code invoked by external webhooks must not throw by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2202
* feat(subscription): re-enable disabled channels when the new plan can hold all of them by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2160
* fix: guard against duplicate Stripe subscriptions per customer by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2061
* feat: show login method in Global Settings by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2203
* fix(calendar): make the post delete icon and confirmation red, swap Delete and Preview by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2204
* fix(posts): find-slot never responds when all channels are disabled by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2207
* feat(calendar): channel multi-select filter above the calendar by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2205
* feat(calendar): frame published posts in green with a checkmark by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2206
* fix(permissions): look up the refreshed channel by internalId in the channel limit check by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2208
* feat: auto text direction (RTL) in composer editor and previews by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2209
* feat(sponsors): re-add chatbotx to readme by @egelhaus in https://github.com/gitroomhq/postiz-app/pull/2210
* fix(instagram): map the Trial Reel publish limit error to a readable message by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2215
* feat: point MCP upload tools to the CLI and public API for private files by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2216
* feat: list media via public API and MCP mediaListTool by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/1926
* fix(frontend): honor the AM/PM date metric in the post date picker time input by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2217
* fix(calendar): open-post icon handles TikTok photo posts and links that are not ready by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2211
* feat(tiktok): connect UPLOAD drafts to the published post from the open-post icon by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2212
* fix(calendar): put Delete right-most in the post hover bar, after Preview and Duplicate by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2221
* fix(integrations): log the error behind "Authentication failed" on social connect by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2225
* fix(account): ignore disabled team members when deleting an account by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/2226
* fix(integrations): reconnecting a channel wiped its stored refresh token by @giladresisi in https://github.com/gitroomhq/postiz-app/pull/1884


**Full Changelog**: https://github.com/gitroomhq/postiz-app/compare/v2.25.0...v2.25.1

Related Repositories