v0.9.6-beta

Released April 2026

🔒 Security

  • Fixed /verification setup 50013 error — bot role overwrite now applied before everyone role
  • Fixed guildMemberUpdate UUID lookup bug causing member sync failures
  • Added Redis caching for IPHub VPN/proxy lookups (300s TTL)
  • Added route-specific rate limits across 6 API endpoints
  • Reduced guild cache TTL to 300s with cache invalidation on permission downgrade to prevent auth drift
  • Added webhook_url validation — enforces HTTPS and restricts destinations to discord.com/discordapp.com, blocking private/loopback IP ranges
  • Added 10s timeout and 1MB response-size cap to webhook fetch calls
  • Restricted channel updates now apply Discord permission changes before DB writes — hard failure returned if Discord write fails
  • Verification entrypoints now check that referenced roles and channels still exist before proceeding
  • Deleted channels now clear stale channel_id references in verification settings
  • Added roleDelete handler — clears stale role references across verification, autorole, moderation, and role manager settings

🐛 Bug Fixes

  • /transcript now checks for View Channel and Read Message History permissions before attempting to fetch messages