1.7.12

Update recommended for shared instances.

Bug fixes

• Fix second order XSS: Harden file type input (#4635) @NicolasDorier
• UI: The standalone confirmation modal design was broken @dennisreimann
• Fix: Setting the password of a new created user via API shouldn't be required (#4534, #4647) @NicolasDorier
• Fix: If user get locked out, unlocking or deleting user fails (#4641, #4644) @NicolasDorier
• Fix: Migrating from SQLite was crashing in some conditions (#4623) @NicolasDorier
• Fix: Unable to Edit amount when cloning paid Payment Request (#4639) @NicolasDorier
• Webhook: Add missing model validation (#4636) @dennisreimann
• Checkout v2: Fix automatic redirect after paid (#4633) @dennisreimann

Improvement

• Preferred paging count is saved into user preferences cookie (#4637) @dennisreimann
• Fix typo in error message when vault is opening a wallet from the wrong chain (#4640) @eltociear

1.7.11

Improvement

• Better descriptions of some feature in the UI (#3831) @dstrukt @dennisreimann

Bug fix

• Fix XSS on public instances #4629 (Credit to @d47sec) @NicolasDorier
• Fix an exception happening on some app with mapped dommain (#4622) @dennisreimann
• Fix error thrown in the pairing flow to woocommerce or other external apps (#4627 #4630) @Kukks
• Fix HTML appearing in pull payment's LN Url descriptions (#4624 #4630) @Kukks

1.7.10

Bug fix

• After successful migration from SQLite or MySql, there is an error after a restart @NicolasDorier

1.7.9

Bug fixes

• Fix: Top-Up Invoices display fiat amounts to 9 decimal places in emails (#4570) @Kukks
• LNURL NFC support did not work for lower amount invoices (#4618) @Kukks

1.7.8

With this release, we are providing a migration path for legacy MySql and SQLite installations.

If you are a BTCPay Server integrators such as developer of Raspiblitz, Umbrel, Embassy OS or anybody running BTCPay Server on SQLite or MySql, please refer to the documentation.

While SQLite and MySQL should still be working for one year or two, we will not fix bugs related to those backend. (unless it impacts migration)

New feature

• Add ability to migrate from MySQL/SQLite to Postgres backend. (#4614) Please read the documentation. @NicolasDorier

Bug fixes

• Fix: MySQL install were crashing during db update @NicolasDorier
• In case of the unified invoice, the LNURL wasn't correct (#4616, #4609) @dennisreimann
• Fixes missing uppercasing for the QR code in case of non-unified QR. @dennisreimann
• Fix: snort.social still didn't play with our lnaddress implementation (#4615, #4617) @dennisreimann

1.7.7

Some users experienced Error 500 after login on to BTCPay Server from the 1.7.6.
If it is your case, to update on docker deployments via the UI, you need to:

1. Start a browser session in incognito/private mode.
2. Browse to https://{yourserver}/server/maintenance
3. Hit update button

Bug fixes

• Fix crash for installations supporting zcash or monero (#4610) @NicolasDorier

1.7.6

There are two vulnerabilities fixed in this release.
Those are not severe, as it requires the victim to actively click on a malicious link and public registration, but we recommend to update.

We also introduce a breaking change in the Greenfield API route /api/v1/stores/{storeId}/rates/configuration/preview. (#4607)
This breaking change shouldn't impact the majority of people.

New features

• Make Lightning NFC built in (#4541) @Kukks
• Greenfield get app details (#4102) @bolatovumar
• Greenfield: Add store rates api (#4550) @Kukks
• Server Theme: Allow to unset CustomThemeCssUri @dennisreimann
• Store Branding: Add custom CSS option (#4459, #4527) @dennisreimann
• Store branding on invoice and receipts, payment requests and pull payments, point of sale and crowdfunding (#3842, #4568) @dennisreimann
• Add Greenfield API endpoint for pull payment LNURL items (#4472) @bolatovumar
• Greenfield: Add lightning payments list endpoint (#4407) @dennisreimann
• Add additional permission for pull payments (#4539) @Kukks

Bug fixes

• Fix: Mark selected payouts as already paid had an unexpected result (#4579) @Kukks
• Fix: Payjoin wasn't always properly choosing utxo for optimal change (#4600) @NicolasDorier
• Fix: If PoS item code contains a /, LNUrl would not work (#4601, #4602) @NicolasDorier
• Fix: a bunch of open redirect (#4575). Credit to @gonzxph. @NicolasDorier
• Fix: Disqus integration in Crowdfunding store (#4580, #4572) @dennisreimann
• Fix: XSS on uploaded files to the file storage (#4567) Credit to @ctflearner. @NicolasDorier
• Fix: Greenfield currency rate should be strings (#4607) @NicolasDorier

Improvements

• If a domain name is mapped to an app, always redirect the ugly /apps/{appId} to it (#4391) @dennisreimann
• Add missing CORS to LN Address/LNUrl route (Compatibility with Beach Wallet) (#4587) @NicolasDorier
• Make plugin able to register rate providers (#4551) @NicolasDorier
• Point of Sale: Improve merchant view (#4560) @dennisreimann

1.7.5

New features

• Greenfield: Lightning addresses API (#4546) @Kukks

Bug fixes

• Fix several HTML injections (#4545) @NicolasDorier
• BIP21: Uppercase addresses only in QR, not in payment URL (#4553) @dennisreimann
• Checkout v2: UI fixes (#4552) @dennisreimann

Improvement

• Checkout v2: Re-add LNURL for top-up invoices (#4556) @dennisreimann

1.7.4

Note for integrators

Integrators such as Raspiblitz or Umbrel: As part of our effort to make BTCPay Server more welcoming to plugins, we have made a change that may impact you.

Previously, when a user uninstalled or installed a new plugin, BTCPay Server would prompt them to restart the server by clicking on a button. Prior to version 1.7.4, this restart button was not functional due to being coupled to our own Docker deployment stack.

As of now, the restart button will instead terminate the BTCPay Server process. The process manager, such as systemd or docker should then automatically restart BTCPay Server. Please ensure that automatic restart capability exists.

Note for plugin users

We recommend you to update your plugins after this update.

Bug fixes

• Fix LNURL authentication as 2FA method (#4501) @dennisreimann
• Fix sync modal display (#4485) @dennisreimann
• Checkout: Fix cutoff language dropdown (#4486) @dennisreimann
• Point of Sale: Ensure only valid non-negative numbers in tip input (#4481) @bolatovumar
• Invoice export: Fix export all stores case (#4516) @dennisreimann

Improvement

• After a plugin install or uninstall, restart now just kill the process instead of requiring SSH with docker install @NicolasDorier
• Checkout v2: Display and copy addresses (#4489) @dennisreimann
• Checkout v2: Configure countdown timer (#4471) @dennisreimann
• Unify 2FA login boxes (#4506) @dennisreimann
• Add extension points for dashboard (#4483) @Kukks
• Text editor: Allow Twitter embeds (#4488) @dennisreimann
• Update preferred price source copy label (#4492) @dstrukt
• Display BTCPay Server version numbers in UI without zero suffix (#4521) @NicolasDorier
• Redesign plugin list items (#4528) @NicolasDorier
• Plugin development improvements (#4522 #4518) @NicolasDorier
• Greenfield: Add payment hash and preimage to Lightning invoices (#4520) @dennisreimann
• Greenfield: Add separate permission for viewing LN invoices (#4529) @ArttuPakarinen @dennisreimann

1.7.3

Bug fixes

• Checkout v2: Fix modal iframe clipboard permissions (#4453) @dennisreimann
• Checkout: Fix cutoff language dropdown (#4465) @cdmoss
• Fix a crash on coin selection if we weren't able to guess the color of a label (053426) @Kukks
• If using LNBank, LN invoices are not generated after upgrade to v1.7.2.0. You still need to also update the plugin. (#4458) @dennisreimann
• Fix BTCPay invoice not settling after successful Lightning payment (CLN + Lightning Charge) (#4383) @dennisreimann

Improvement

• Make sure payment request print view doesn't show table header twice (#4447) @bolatovumar
• Automated payout processors shouldn't spam logs on shutdown (#4193) @NicolasDorier
• Checkout v2: Reduce Altcoin name on payment method pill (#4456) @dennisreimann
• Checkout: Make CSS and logo paths relative (#4354) @bolatovumar
• Checkout: Add persian language back (#4457) @NicolasDorier
• Frontend cleanups (#4449 #4463 #4473) @dennisreimann