9 July 2026v0.7.21
Security, exports, and tracking polish
Safer exports, clearer signed-in-device controls, stronger access checks, cleaner database policy performance, and improved shipping tracking visibility.
Changes & improvements
- Public leaderboard PIN screens now use stronger access checks, clearer PIN validation, and temporary lockouts after repeated incorrect attempts.
- Signed-in device management now uses clearer language for recent sign-ins and sessions with limited device details.
- CSV exports across reports, customers, stock, profile registers, and sales data now include stronger safeguards when opened in spreadsheet apps.
- PTSL shipping tracking now appears for any deal with a VIN when the dealership integration is enabled, and tracking lookups now verify the vehicle is visible to the signed-in user's active dealership before contacting the carrier.
- Team Board attachments now require a signed-in user before upload or signed-link generation, and signed links are limited to valid attachment paths.
- Report email previews now render inside sandboxed frames.
- Dealership logo uploads now accept PNG, JPEG, and WebP formats only.
- Database policy cleanup reduces redundant row-security policy evaluation across CRM, target, integration, chat, customer, activity, and session tables.
Bug fixes
- Fixed other-device sign-out so sessions are checked server-side before being ended.
- Fixed email automation and queued-email actions so updates stay scoped to the current dealership.
- Improved error handling across billing, invites, support, imports, exports, webhooks, and messaging so support diagnostics remain useful without exposing sensitive details.