What Unleash/unleash shipped
Written by FoxPlug from the repository's own releases; not affiliated with Getunleash. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/Unleash/unleash; Getunleash did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of October 12, 2026
What shipped
- The client features API response is now cached after serialization, reducing memory use when many SDK and Edge clients request features at once, including after a restart. Pull request #12741
- A redesigned invite signup page is available behind the newInviteFlow flag, replacing the old standalone layout with one matching the signup design. Pull request #12730
- The new invite signup flow now includes a set password step, behind the newInviteFlow flag, matching the legacy new user page with the new design. Pull request #12739
- Users who sign up through an invite link in the new invite flow are now logged in automatically and sent to the home page instead of the login screen. Pull request #12740
- Customer logos are back on the invite signup page panel, with assets named by number so no company names appear in file names or source code. Pull request #12738
- The default event log date range now uses UTC dates, so events near local midnight are no longer excluded by the UTC boundaries used in event search. Pull request #12731
Why it matters
This week brings a performance improvement to the client features endpoint that matters for instances with large feature sets and many concurrent clients. It also continues the new invite signup flow with a redesigned page, a set password step and automatic login, and fixes a time zone mismatch in the default event log range.
Changelog entry
- Cache the serialized client features response to reduce cold-start memory use. Pull request #12741
- Add a redesigned invite signup page behind the newInviteFlow flag. Pull request #12730
- Add a set password step to the new invite signup flow. Pull request #12739
- Log users in automatically after setting a password in the new invite flow. Pull request #12740
- Show customer logos on the invite page panel. Pull request #12738
- Use UTC dates for the default event log range. Pull request #12731
This week: cached client features responses to cut memory on cold starts, a redesigned invite signup page behind newInviteFlow, a set password step, automatic login after invite signup, and UTC dates for the default event log range.
This week in the repository: the client features endpoint now caches its serialized response, which cuts memory use when many SDK and Edge clients fetch at once after a restart or cold start. The new invite signup flow gains a redesigned page behind the newInviteFlow flag, a set password step, automatic login after signup, and the customer logo panel. The default event log range now uses UTC dates so events near local midnight are no longer excluded.
Week of October 5, 2026
What shipped
- The PR build gate now requires the frontend E2E workflow to pass, so end-to-end failures can no longer merge unnoticed. Pull request #12715
- Docker Bake now defaults to the Node version in the Dockerfile instead of a stale build argument, so published images use Node 22.23. Pull request #12713
- The dependency update that bumped Biome to v2.5.0 was reverted. Pull request #12714
- Dependabot is now configured for GitHub Actions and npm dependencies, with an updated npm schedule. Pull request #12230
- The unused queryMissingTokens experimental flag was removed from flag keys and defaults with no behavior change. Pull request #12729
Why it matters
The build gate now blocks merges when frontend E2E tests fail, closing the gap that let a failing end-to-end test through in an earlier change. Docker images also pick up the Node version from the Dockerfile again, so published images stop using a stale Node release. Dependency updates are now handled by Dependabot, and one problematic dependency bump was rolled back.
Changelog entry
- Require frontend E2E success in the PR build gate so failing end-to-end tests block merges. Pull request #12715
- Use the Dockerfile Node version by default in Docker Bake, so published images no longer pick up a stale Node 22.22 build argument. Pull request #12713
- Revert the dependency update that bumped Biome to v2.5.0. Pull request #12714
- Configure Dependabot for GitHub Actions and npm dependencies with an updated npm schedule. Pull request #12230
- Remove the unused queryMissingTokens experimental flag from flag keys and defaults. Pull request #12729
This week: the PR build gate now requires frontend E2E success, so end-to-end failures block merges. Docker Bake defaults to the Dockerfile Node version, stopping stale Node 22.22 images in favor of 22.23. Dependabot now covers GitHub Actions and npm, and the Biome v2.5.0 update
This week's changes for people running and contributing to the project. The PR build gate now requires the frontend E2E workflow to succeed, so an end-to-end failure can no longer merge through; this closes the gap that allowed a failing frontend E2E test in an earlier merge. Docker Bake now defaults to the Dockerfile Node version rather than a stale build argument, so published images use Node 22.23 instead of 22.22. Dependency updates are now configured through Dependabot for GitHub Actions and npm, and the update to Biome v2.5.0 was reverted. The unused queryMissingTokens experimental flag was removed with no behavior change.
More from Unleash/unleash on GitHub
Merged pull requests
- chore: remove usersTabsUI flag (#12676, merged September 24, 2026 by sjaanus) (source)
- UX tweak: design adjustments (#12664, merged September 18, 2026 by FredrikOseberg) (source)
- fix: reject duplicate strategy parameter names (#12632, merged September 11, 2026 by Akash1xe) (source)
- perf: avoid OR-join on
dependent_featuresin feature search (#12624, merged September 8, 2026 by sjaanus) (source) - feat: allow a wildcard host label in frontend API CORS origins (#12778, merged November 10, 2026 by Luks3110) (source)
- fix: allow OpenAPI diff comments on Dependabot PRs (#12781, merged November 9, 2026 by gastonfournier) (source)
- fix: remove broken link from reset email (#12768, merged November 9, 2026 by icirellik) (source)
- fix: reject non-finite numeric constraints (#12773, merged November 9, 2026 by JunaidAhamed-7777) (source)
- fix: honor project segment permissions from global pages (#12749, merged November 5, 2026 by johnsickels) (source)
- feat: replace signup invite step with domain join step (#12767, merged November 3, 2026 by sjaanus) (source)
- fix: bump Node to 22.23.4 to distrust compromised eMudhra CAs (#12744, merged October 22, 2026 by krzychukula) (source)
- fix: use UTC dates for the default event log range (#12731, merged October 16, 2026 by daveleek) (source)
- perf(client-api): cache serialized client-features response to cut cold-start memory (#12741, merged October 15, 2026 by sjaanus) (source)
- feat: log in automatically after setting password in new invite flow (#12740, merged October 14, 2026 by sjaanus) (source)
- feat: set password step in new invite signup flow (#12739, merged October 14, 2026 by sjaanus) (source)
- feat: show customer logos on invite page panel (#12738, merged October 13, 2026 by sjaanus) (source)
Releases
- v8.2.0, published September 8, 2026. First change listed: Don't claim success when marking a flag stale fails (source)
- v8.1.0, published August 5, 2026. (source)
- v8.0.3, published July 10, 2026. First change listed: Linting errors (source)
- v8.0.2, published June 29, 2026. First change listed: Json editor cursor color (source)
- v7.6.5, published June 29, 2026. First change listed: Nested json and addon url verification (source)
- v7.5.2, published June 29, 2026. First change listed: Handle json serialization and url validation for addons (source)