What's new

Changelog

Updates, improvements, and fixes — newest first.

  1. Newv2.1.013 May 2026

    Branded HTML email templates

    All transactional emails — email verification, password reset, and group invitations — now use fully-designed HTML templates with the Money Split brand, styled CTA buttons, and plain-text fallbacks for all email clients.

  2. Improvedv2.1.013 May 2026

    Auth pages refactored with shared components

    Login, Register, Forgot Password, and Reset Password pages now share FormField, AlertBanner, SubmitButton, and validation utilities — eliminating duplicated code and making future UI changes a single-file edit.

  3. Newv2.0.012 May 2026

    Full API coverage — 17 routes

    All backend API routes are now complete and fully tested: auth (login, register, logout, refresh, forgot-password, reset-password, verify-email), groups, group members, expenses, settlements, balances, and the recurring-expenses cron job.

  4. Newv2.0.012 May 2026

    231 unit tests — 100% passing

    Comprehensive test suite across 23 test files covering all API routes, balance calculations, auth logic, rate limiting, validation utilities, and the API client helper.

  5. Newv2.0.012 May 2026

    Playwright E2E test suite

    End-to-end tests for all auth pages: Login (8), Register (10), Forgot Password (8), Reset Password (10), Verify Email (5), and Dashboard redirect behaviour (3).

  6. Newv1.5.011 May 2026

    Simplify Debts algorithm

    Implemented the minimum-transactions debt simplification algorithm. Groups with Simplify Debts enabled show the smallest possible set of transfers to settle all outstanding balances.

  7. Securityv1.5.011 May 2026

    Rate limiting on all API endpoints

    All API routes now enforce sliding-window rate limits via Upstash Redis: 120 req/min for reads, 60 req/min for writes, 10 req/15 min for auth endpoints. Falls back to in-memory limiter when Redis is not configured.

  8. Newv1.4.010 May 2026

    Four split methods

    Expenses can now be split four ways: equal (divide evenly), exact (specific amounts per person), percentage, and shares (weighted proportions). Rounding remainders are assigned to the first person in the split.

  9. Securityv1.3.010 May 2026

    HttpOnly JWT cookie auth

    Access tokens and refresh tokens are now stored in HttpOnly, Secure, SameSite=Lax cookies — inaccessible to JavaScript and immune to XSS token theft.

  10. Newv1.2.09 May 2026

    Group management

    Create groups, invite members by email, manage admin roles, and delete groups. Group deletion is blocked when unsettled balances exist to prevent data loss.

  11. Newv1.0.08 May 2026

    Initial launch

    Money Split launches with core authentication (register, login, email verification, password reset), the landing page, and the foundational database schema.