Changelog

Every release, every feature, every fix — in one scrollable log.

2026-04-12 — Finish-It Sprint: 55 types, 26 languages, BCD overhaul

Second massive sprint — every remaining backlog item shipped, every deferred item resolved, full platform audit with fixes.

• 20 new QR types (35 → 55): YouTube, Apple Music, Google Review, Yelp Review, TripAdvisor, Venmo, Cash App, Support/Tip Jar (Ko-fi/Patreon/BMAC/Liberapay), TWINT, Bizum, PayNow (Singapore), PayID (Australia), ZATCA (Saudi e-invoice), BIP-21 Bitcoin + Lightning, webcal://, JPQR (Japan), HKFPS (Hong Kong), DuitNow (Malaysia), MoMo (Vietnam), and Link-in-Bio (privacy-first, hash-URL rendered).
• 5 new languages (21 → 26): Swedish, Czech, Danish, Norwegian, Finnish. 1,106 keys each with full native translations.
• 96 center-logo icons (12 → 96): crypto, communication, media, utility, commerce, transport, nature, food, people, events, 12 smiley faces, 18 social network glyphs (X, Facebook, Instagram, LinkedIn, TikTok, YouTube, Pinterest, Reddit, Snapchat, Discord, Telegram, GitHub, Threads, Bluesky, Mastodon, Twitch, Signal, Medium). All expandable via <details> toggle.
• BCD UI/UX overhaul: visual preset thumbnails (mini canvas renders), collapsible accordion sections, sticky mobile preview + sticky export footer, hex color inputs with bidirectional sync, color palette swatches, user-controlled gradient backgrounds, address block rendering from vCard fields, social icons row (LinkedIn/X/Instagram), card back with company + tagline + CTA text, 12 new presets (darkMode, pastel, ocean, cherry, slate, emerald, amber, mono, rose, midnight, sand, carbon). 36 presets total.
• New export formats: EPS (embedded-JPEG Level 2 PostScript, ASCII85-encoded), animated GIF (gif.js, 8-frame rainbow), BCD SVG export, BCD JPG export.
• New features: /embed/ iframe widget (postMessage API), /bio/ link-in-bio (hash-URL, privacy-first), /blog/ with 3 tutorial posts + /vs/ competitor comparisons (26-language variants), @abundera/qr npm package + CLI with 25 type encoders.
• Bug fixes: CSP inline-script violation on all 55 landing pages (moved to data-qr-preselect body attribute), service worker stale-cache bug (query-stripped keys → full-URL + SWR), form-type desync when clicking BCD pill on non-vCard landing page, background image visibility (opacity slider, modules at 90% alpha, crop modal routing), crop modal mobile overflow, wheel-zoom hijacking mouse scroll (removed entirely).
• Full platform audit: 3 CRITICAL + 7 HIGH + 10 MEDIUM issues found and fixed. Avatar IP leak mitigated (referrerpolicy + no-referrer header), WiFi batch open-network fix, MeCard batch field parity, TOTP base32 validation, WiFi escape regex, toast aria-live, focus-visible ring, crop keyboard navigation, overflow menu Home/End keys, font preload optimization.
• Infra: staging/production split (staging-qr.abundera.ai), pre-deploy audit script (18 checks), SW auto-reload on update, descriptive export filenames ({type}-{template}-qr-{stamp}.ext).

2026-04-11 — The everything release

Massive sprint across 30+ phases:

• 15 new QR types — TOTP/2FA, Swiss QR-bill (with Swiss cross overlay), PIX (Brazil), PromptPay (Thailand), EMVCo generic merchant, Lightning BOLT11, SSH public key, OpenPGP public key, WireGuard config, GS1 Digital Link, Spotify, Fediverse (Mastodon/Bluesky/Nostr/Matrix/Threads), Geo URI, Magnet, full iCalendar. 35 QR types total.
• Business Card Designer: 8 new visually-distinct presets (Neon, Art Deco, Sunset, Forest, Brutalist, Kraft, Nordic, Retro 80s). 24 presets total. Bumped export resolution to 600 DPI. New kebab menu with Export template, Import template, Surprise me, Share card, Print sheet (10-up US Letter + A4). Photo crop forced square. Minimum-data guard before opening.
• Scannability validator — runs jsQR over the rendered canvas and warns on decode failures.
• Printable URL fallback — toggle adds the destination URL as plain text under the QR for accessibility.
• Multi-stop gradient editor (up to 5 colors).
• Per-eye independent inner/outer color.
• Background image QR mode.
• Pinch-zoom and wheel-zoom on the preview.
• Web Share API for QR codes and business cards.
• WebP export format.
• Undo/redo (Ctrl/Cmd-Z, 50-step buffer).
• Random template button ("Surprise me").
• 4 new credibility pages: /privacy/, /terms/, /security/, /about/ — in all 20 languages.
• /.well-known/security.txt.
• Service worker cache v9 with expanded asset list and query-stripped keys.
• jsQR lazy-loaded (saves 262 KB eager payload).
• Focus trap on all 3 modals (crop, BCD, custom dialogs).
• WCAG 2.5.8 touch targets (44×44 min on coarse pointer).
• aria-hidden sweep on 87 decorative SVGs.
• prefers-reduced-motion respect.
• Inline scripts externalized, CSP hardened (unsafe-inline dropped).
• 29 hardcoded English strings replaced with qrT() calls, ~100 new i18n keys translated into all 19 languages.
• Critical bug fixes: SVG frame borders, XSS in batch zoom preview, btoa() Latin1 error on preset logo click.

2026-03 — Early landing

• Launched with 20 QR types, 40 templates, batch CSV generation, Business Card Designer, 20 languages, 420 static landing pages.