v0.9.6-beta
Released April 2026
🔒 Security
- Fixed
/verification setup50013 error — bot role overwrite now applied before everyone role - Fixed
guildMemberUpdateUUID lookup bug causing member sync failures - Added Redis caching for IPHub VPN/proxy lookups (300s TTL)
- Added route-specific rate limits across 6 API endpoints
- Reduced guild cache TTL to 300s with cache invalidation on permission downgrade to prevent auth drift
- Added
webhook_urlvalidation — enforces HTTPS and restricts destinations to discord.com/discordapp.com, blocking private/loopback IP ranges - Added 10s timeout and 1MB response-size cap to webhook fetch calls
- Restricted channel updates now apply Discord permission changes before DB writes — hard failure returned if Discord write fails
- Verification entrypoints now check that referenced roles and channels still exist before proceeding
- Deleted channels now clear stale channel_id references in verification settings
- Added roleDelete handler — clears stale role references across verification, autorole, moderation, and role manager settings
🐛 Bug Fixes
/transcriptnow checks for View Channel and Read Message History permissions before attempting to fetch messages