v0.3.39

0.3.39 (2026-04-27)

Bug Fixes

• tighten carer policy access (#1117) (452a2b7)
• wrap long medication names (#1125) (c91e653)

v0.3.38

0.3.38 (2026-04-26)

Features

• enrich medication import and onboarding (#1115) (4addce5)

Bug Fixes

• harden cookies and add auth coverage (#1109) (523569d)
• security: prevent open redirect via return_to parameter (#1104) (368151b)
• security: sanitize return_to href sinks and scope native device token create (#1108) (1dd12b4)
• security: sanitize return_to href sinks and scope native device token create (#1111) (5349267)

v0.3.37

0.3.37 (2026-04-20)

Features

• add initial architecture decision records (ADRs 1-5) (0f08434)
• add local NHS dm+d barcode import and lookup (#1098) (527d79b)
• add OIDC enhancements (c80be98)
• nhs-dmd: import release GTIN data and persist dm+d identity (59b11dd)
• publish medication domain events (#1093) (6ad450c)
• unify M3 surfaces and fix medication workflow regressions (6f172b1)

Bug Fixes

• dashboard: remove duplicate right-rail sections (5865c11)
• ignore blank medication dose rows (258e8f6)
• improve sidebar active contrast (8ffd101)
• preserve dose snapshots when editing schedules (ae1056c)
• refine medication dose editor (65fabcd)
• unify M3 surfaces and fix medication workflow regressions (#1095) (6f172b1)

v0.3.36

0.3.36 (2026-04-13)

Features

• adopt Material You (M3) design system with expanded i18n coverage (#1065) (c96186c)

Bug Fixes

• 🛡️ Sentinel: [MEDIUM] Fix Unvalidated Data Exposure via to_unsafe_h (#1079) (35e5b6c)
• align admin locale branches (#1074) (a041fab)

Performance Improvements

• ⚡ Bolt: [optimize location members view] (#1063) (b3a903d)
• ⚡ Bolt: Replace .exists? with .any? to leverage preloaded associations (#1080) (ebdfa75)

v0.3.35

0.3.35 (2026-03-31)

Features

• api: add mobile api v1 foundation (6577d5f)

Bug Fixes

• Extract TakeMedicationService to eliminate duplicated dose-taking logic (#1052) (71dad99)

v0.3.34

0.3.34 (2026-03-23)

Features

• 🎨 Palette: [Add placeholders to complex form inputs] (#1008) (6aadeb0)
• Add Turbo Native Phase 1: detection, native layout, and device token infrastructure (#1010) (97ba4ad)

Performance Improvements

• ⚡ Bolt: Prevent redundant COUNT query in locations view (#1013) (6a80eac)

v0.3.33

0.3.33 (2026-03-21)

Features

• 🎨 Palette: Add minimum value to refill quantity input (#1000) (9ab634f)
• 🛡️ Sentinel: [MEDIUM] Replace Arel.sql with Hash-based ordering (#1007) (958e224)

Bug Fixes

• 🛡️ Sentinel: [High] Fix Insecure Direct Object Reference (IDOR) in LocationMembershipsController (#1002) (388a358)
• 🛡️ Sentinel: [HIGH] Fix symbol exhaustion vulnerability in sorting (#993) (b29aacd)

Performance Improvements

• ⚡ Bolt: optimize reports controller daily compliance n+1 query (#1003) (9d29792)

v0.3.32

0.3.32 (2026-03-14)

Bug Fixes

• 🛡️ Sentinel: [High] Fix IDOR vulnerabilities in admin controllers (#978) (e3a45d2)

Performance Improvements

• ⚡ Bolt: Use Enumerable#find to avoid N+1 queries when looking up default dosages (#982) (c8fb98c)

v0.3.31

0.3.31 (2026-03-12)

Features

• 🎨 Palette: [Add descriptive placeholders to location forms] (#972) (52d45a1)
• Add frequency suggestion badges and fix wizard dosage list update (#964) (652e8a0)
• allow admins to resend invitations (#975) (8e0d262)
• block child signup paths (#973) (0aab6da)
• implement barcode scanner UI component (#966) (87a4ba5)
• implement barcode scanner UI component with camera integration (87a4ba5)
• wizard rebuild with experiments preference system (#977) (6b2f382)

Bug Fixes

• announce form errors to screen readers (#974) (060c6ea)
• complete soft-delete account flow (#965) (8334fc0)

Screenshots

Auto-generated release for hosting screenshot assets. Do not delete.