Releases

1.20.1

Bugfixes

• Fixed 2 security vulnerabilities

1.20.0

Features

• Your AI assistant can now manage the global translation table through the MCP server. New tools let it list translations, read a single key, find missing translations, and create, update or delete entries. These tools only touch global translations, so page, post and component content stays untouched (that is still edited through the language field on those items). Access follows your roles: reading needs translation.read, creating and updating need translation.upsert, and deleting needs translation.delete.
• A new, optional "Title suffix" setting controls what is appended to blog post and event titles in the browser tab and in search results. Use it for a short brand name without touching your full site name, which is also used for the app manifest and the RSS feed. If you leave it empty, your site name is used as before, so nothing changes until you set it.

Improvements

• Blog post and event titles now use a clean | separator, and the suffix is left out automatically when the full title would exceed 60 characters, so titles are not cut off in search results.
• Images served as WebP are now much smaller (lossy instead of lossless compression, often around ten times smaller) and respect the q_ quality parameter (default 80). AVIF images are encoded noticeably faster and also respect q_ (default 70), so the first request for a new image size no longer times out under load.
• Redirects now keep the query string of the original link. Tracking parameters like gclid or utm_* are passed on to the target, so ad click attribution is no longer lost on redirected URLs.

Bugfixes

• Clicking "Refresh cache" no longer makes your site unavailable for a few seconds. The new cache is built in the background while the current one keeps serving visitors, and is swapped in once it is ready.
• Blog and event detail URLs that point to a post or event that does not exist now return a real 404 page instead of an empty page with a success status, which search engines flagged as a "soft 404". Custom pages that use a :slug are not affected.

1.19.2

Bugfixes

• Blog post and event detail pages now use each post's or event's own title and meta description in the page head, instead of all inheriting the shared template page's title and description. Previously every post on a site could show search engines and browser tabs the same title and description.
• Corrected several German interface texts, including mixed English/German wording in the layout notifications and a misspelled "Benachrichtigungen" label.

For plugin authors

• The generated plugin manifest schema now accepts the shorthand form for helper and function arguments (a bare list of types like ["String", "Int"]), matching what the plugin runtime already parsed. Valid plugins that used this form are no longer wrongly rejected during validation.

1.19.1

Improvements

• Dashboard visitor statistics (total views, pages, posts, events and referrers) now load much faster even on large datasets. Previously, individual cards could take over 30 seconds to load.
• The referrer card stays readable even with many pages: it now scrolls, shows a dedicated label for each bar, and truncates long paths so nothing overlaps anymore.
• The "From template" menu for components and layouts now scrolls when many templates are available, instead of running off the screen.

Bugfixes

• A bug in the reminder check could trigger a server error for items without a linked file and block the dashboard. This is fixed.
• Missing pages now return the correct 404 status, so search engines handle them properly.

1.19.0

Features

• A brand-new roles and permissions system. Every action across the admin, the API and the MCP server is now governed by a specific permission (like page.create or file.delete), so you can grant each team member exactly the access they need — nothing more, nothing less. Create, update and delete buttons are automatically hidden or disabled wherever someone is missing the matching permission.
• Build your own roles: group permissions however your team works, and give each role its own color and description so they are easy to tell apart at a glance. Permissions are laid out as a clear, grouped matrix with icons.
• Scope API access tokens and connected apps to just the permissions they need. When you create a token or authorize an app over OAuth, you can now limit it to a subset of actions instead of handing over full access.
• Onboarding is now a bigger, more joyful first-login tour that walks you through the essentials, with a short tutorial video that plays once.
• Redesigned event date and time picker with clearer, uniform date fields and a time picker where you can click to toggle AM/PM.

Improvements

• Your existing users and their access are migrated automatically into the new role model, so nothing changes for your team until you decide to fine-tune it.
• The role list and role editor have been reworked for a clearer overview.

Bugfixes

• Admin API access tokens created without explicit scopes keep full permissions, so existing integrations keep working unchanged.
• Editing a freshly created post or event now shows its data correctly instead of appearing empty, and creating a new blog post no longer triggers a stray "not found" request.
• The list toolbar label and bulk-delete button no longer wrap onto two lines.

For plugin authors

• The plugin manifest (plugin.json) now declares which permission each API endpoint requires, so plugin routes take part in the same permission system. This is a breaking change to the manifest schema: update your manifest when you adopt this release.

1.18.0

Improvements

• The translation UI has been rebuilt from the ground up. Managing translations is now easier, with a faster, clearer interface for working through every language in one place.
• Choose a reference language (your default language from settings) to translate against, so the source text always sits next to what you are editing.
• Edit a translation as rich text or as code, and open an expanded editor when you need more room to work.
• A new sweep modal with the same improved editor, so bulk translating feels just like editing a single key.

Bugfixes

• Setup fixes for the default language, MCP web-file permissions, and image aspect ratio.

1.17.2

Improvements

• In a plugin template, a Read block can now contain child blocks, so you can nest content inside it instead of keeping the template flat.
• Added a direct "add template" action, so you can drop a plugin template into place in a single step.

1.17.1

Improvements

• Installing a plugin now confirms with a success message, and the "installed" indicator gently pops in the moment the install finishes — so you get clear feedback that it worked. The animation respects your reduced-motion setting.
• The plugin store grid is now sorted alphabetically by plugin name, so the cards always appear in a stable, predictable order regardless of how the registry returns them.
• Refined the styling of the plugin cards and the plugin detail page.

Bugfixes

• The built-in MCP server's tools now advertise an explicit type for their metadata parameter, so the server passes Anthropic's Claude Connectors Directory validation (which previously rejected it for a parameter with no declared type). This affects the create/update tools for events, files and posts as well as the file-upload tools.

1.17.0

Features

• Plugins can now ship their own banner (hero image), shown on the plugin card and detail page in the store — so you recognise a plugin at a glance. Plugin authors: point the hero_image field in your manifest at an image in the package. We recommend a ~3:1 banner (e.g. 1600 × 540) as PNG/JPG/WebP/SVG, ideally under 500 KB.
• Plugins without a hero image automatically get a subtle, on-brand placeholder (the plugin's initial on a dark surface with a warm accent glow), so the store grid reads as one tidy set instead of some cards having a banner and others not.
• Redesigned plugin cards with a clearer link to the plugin, tooltips on the action buttons, and improved keyboard and focus handling.
• The built-in MCP server now negotiates protocol revision 2025-06-18 and returns structuredContent on tool results, so AI assistants get structured, typed output instead of plain text only.
• New file_upload_multipart MCP tool: upload a file in a single call.
• New signed upload flow for large files: file_upload_url mints a one-time token, and the file is streamed straight to storage via PUT /file-upload/{token}

Improvements

• More robust image delivery: if an image transform fails, the original image is served instead of a blank, and an out-of-range quality value (the q parameter) is clamped to the valid 1–100 range instead of failing the whole request.
• Multipart uploads through the MCP server are now memory-bounded, and rejected uploads are reported cleanly as errors.

1.16.3

Features

• A unified search now runs across every resource type — pages, posts, events, files, layouts, components, tags, users, translations and redirects — from the command palette (Ctrl+K), from each resource's list view, and from your public site search.
• Three matching modes are available through a query prefix: the default matches substrings, f: (or fuzzy:) tolerates typos, and t: (or trigram:) finds similar or partially matching terms.

Improvements

• Search is noticeably faster thanks to new database indexes on the searchable fields.
• The command palette now waits until you pause typing before searching, so it feels snappier and sends fewer requests.

Bugfixes

• Fixed searching for users, which previously returned no results.
• Fixed a database error that could occur on startup.
• The file picker now keeps its selection in sync when adding files in multiple-selection mode.
• Removed a duplicate reset button from the web files page.

1.16.2

Bugfixes

• Sending emails from plugins or from neleto itself works more reliably now

1.16.1

Features

• Large files can now be uploaded reliably through the AI integration (MCP): files are streamed in small, checksum-verified chunks, or fetched directly from a URL — so big images and documents no longer fail on upload.

Improvements

• Translations now also load in page and layout templates, not just in components.
• The broken link/image scanner in the toolbar now only checks real web links and ignores mailto: and tel: links, so it no longer reports them as broken.
• Listing components through the AI integration now returns a compact summary by default, making it faster to browse and pick a component.
• Hardened how the server fetches files from a URL, and added a way to cleanly cancel an in-progress upload.

Bugfixes

• Edits to a component's script or style now reliably take effect on the page. An invalid cache header previously let the browser keep serving an outdated version.

1.16.0

Features

• Toolbar for logged in users on the site with which you can scan for broken links/images, inspect elements, quickly change status and published state of the page, and more.

Improvements

• Improved function error when supplying incorrect number of arguments in handlebars

Bugfixes

• Plugin logs should correctly show up again
• Starting and stopping a plugin should work again
• Disable dismissable for warning modal when leaving an editor and having unsaved changes

1.15.1

Bugfixes

• The renderer generates element script tags and element data script tags correctly again

1.15.0

Features

• New caching settings in the admin UI. Pages can now be cached with TTL and stale-while-revalidate.
• Component scripts and styles are now served as virtual files.
• Component categories are now a free-form text field with autocomplete.
• Bulk status update and bulk turn-into-local for selected files.
• Enhanced meta tag editor with Open Graph presets and image selection.
• New welcome page shown before setup is finished.
• now() function for Handlebars templates, returning the current UTC timestamp in RFC3339 format.
• New MCP tools for LSP template checks.
• Toast when creating a component.
• Onboarding improvements (redirect to dashboard, tour no longer shows multiple times).

Bugfixes

• Drag handles in the builder are now restricted to the grip icon so text inputs remain selectable.
• Fixed various MCP issues.
• Builder layout now uses the same primary color for the selection chrome.

1.14.4

Features

• The AI assistant can now see your live site. It knows your workspace's public address and image URLs, so it can open and check the pages it builds for you — and catch visual problems before you do.
• Uploaded files now come back with a ready-to-use link, so images the assistant adds are immediately usable in your pages.

Improvements

• Building image components through the assistant is far more reliable: images are correctly linked to their file and rendered at the right size and format, so you no longer end up with broken or empty image blocks.
• File uploads now report their actual size instead of showing "0 bytes".
• A large round of guidance improvements means the assistant makes fewer mistakes — picking the correct icon format, setting up repeaters and multi-field components correctly, and handling image options without trial and error.

Bugfixes

• Listing the available page layouts no longer fails with an error.
• Empty or broken image uploads are now clearly rejected instead of silently saving an empty file.

1.14.3

Features

• Redesigned page builder: the left rail is now split into clear Design and Code tabs. Design holds your layers, sections, and settings; the new Code tab gives you one-click access to edit page and layout templates, scripts, and styles directly — with full editor support.
• New editor bar above the preview: a "Pages / Title" breadcrumb with open-in-new-tab and copy-link, a labeled device switcher, a language switch that shows the full language name when active, and a live status.
• Reworked component picker ("Add element"): wider tiles with full, wrapping names and their category, a "Recently used" row, per-category counts, and search that shows how many components match.
• Page settings are reorganized into Page settings and Advanced collapsible sections, pinned to the bottom of the Design rail.
• Add a section with a single, clear "Add section" button; add nested containers via a hover "+" right on the container.
• Developer-mode toggle moved to the bottom of the inspector, out of your way.

Improvements

• The inspector header now shows the selected component's icon — deselect from the breadcrumb.
• Cleaner Design rail: a single scroll (no nested scrollbars), aligned settings fields, a divider under the inspector header, subtler active toggles, uppercase language codes, and more breathing room around the Add section button.
• Localized builder tooltips (select parent, exit scope, collapse/expand all, Design/Code).

Bugfixes

• "Paste element" now correctly disappears once you've pasted.
• Various selection-overlay and layout fixes across the builder.

1.14.2

Features

• Connect external applications to your Neleto workspace via OAuth — including Claude Custom Connectors. Once approved, an app can read and manage your content through the Model Context Protocol (MCP) on your behalf.
• A clear consent screen shows you exactly which application is connecting and what it can access before you allow it, along with a link to the privacy policy.
• New "Connected applications" section in your security settings: see every app you've connected via OAuth and revoke access with a single click.

Improvements

• A large round of behind-the-scenes refactoring for a more robust and maintainable backend.

1.14.1

Fixes

• Various minor fixes and stability improvements under the hood.

1.14.0

Features

• Guided onboarding for new users: a setup flow and interactive product tour walk you through the essentials — skip it anytime.
• Plans & limits surfaced throughout the app: storage usage with a live progress bar, user counts beside your team, and clear tier constraints. New workspaces start on the free tier.
• Manage standard files like robots.txt and your web manifest directly in Neleto, plus full create, edit, and delete for static files.
• Bulk actions: select multiple users, pages, or blog posts and delete them in one go.
• Search & filter: new search boxes for your content and a status filter on Pages.
• Duplicate components and layouts in a single click.
• Customizable lists: show the columns you care about and reset to defaults anytime.
• Redesigned Settings, split into focused sections, each with its own save button and a ⌘S shortcut.
• Profile moved to a clean tabbed layout with an easy "discard changes" option.

Improvements

• Files area: cleaner toolbar, friendlier empty state, and safer copy-to-clipboard.
• The Restore page now shows at-a-glance counts of deleted items and makes clear that nothing is gone for good until you confirm.
• Drag handles on dashboard cards.
• Clearer status badges, better date formatting, and a more intuitive sidebar.

Bugfixes

• A range of stability and quality fixes under the hood.

1.13.2

Enhancements

• Improved MCP and relation documentation.
• User Role now shows a description and uses a radio select for easier selection.
• Added a modal for source selection.

Fixes

• Referrer analytics: capped max referrers to prevent freezing.
• Color mode: added system color mode support and fixed dark mode icon.
• Page builder: fixed copy, paste, and delete of elements with child components.

1.13.1

Fixes

• Auth: fixed selecting wrong token if a token without expiration exists.

1.13.0

Features

• MCP Server implementation.
• API Token authentication should work now.
• New dashboard card with referrer analytics to see where your visitors are coming from.

1.12.1

Bugfixes

• Password reset email now gets sent correctly

1.12.0

Features

• Improved code editor with more reliable highlighting and better javascript and handlebars language support.
• Biome code formatter updated.

1.11.0

Features

• New plugin store based on repositories. Admins of Neleto instances can add their own repositories to smoothly update custom plugins.

1.10.5

Features

• Telemetry to collect Neleto version, installed plugins and their versions and report errors.

1.10.4

Bugfixes

• Setting the time in Date time inputs now works correctly.

1.10.3

Bugfixes

• Users now list correctly again

1.10.2

Features

• Users can now translate page titles and descriptions.
• Added an email test button and a dedicated setting for TLS variants to help resolve mail sending issues.
• Command palette can now search and edit translations.
• PDF files now have a preview.
• SVG files can now be edited directly next to their preview.

Bugfixes

• Multiple critical fixes implemented, including ensuring that "Forgot Password" and login processes are reliable even after unexpected session changes or service outages.
• Corrected issues that caused notification settings to save incorrectly.
• Fixed issues around blog posts and events, ensuring dates are displayed correctly when data is missing.

1.10.1

1.10.0

Features

• New admin page /admin/restore for restoring or completely deleting deleted pages, layouts, elements, components, users, files, translations, redirects
• A button to copy the link to a file

Bugfixes

• Improved handling of errors in renderer and api endpoints
• Improved chart width in dashboard card "Total page views"

1.9.5

Bugfixes

• Added some additional checks to hopefully prevent deleting elements from other pages or layouts when updating a layout or page.

1.9.4

Bugfixes

• Improved resource usage of the renderer, should reduce crashes
• Improved scrolling to the selected element in the pagebuilder

1.9.3

Bugfixes

• Updating hero images of blog posts works again

1.9.2

Bugfixes

• Plugin logs are now sorted in a consistent order
• Metatags in the settings work again
• Notification email for settings changes work again
• Metatags in the Pagebuilder work better
• Display of metatags in the Pagebuilder and settings improved

1.9.1

Bugfixes

• Elements in pages and layouts are now loaded correctly

1.9.0

Improvements

• The renderer now supports else if in if conditions
• Plugin logs are now sorted by date, newest first

Bugfixes

• Redirects can now be edited again
• Better error messages when converting remote files to local files
• Improved handling of deleted elements in the layout builder
• Improved error messages when }} is missing in a template

1.2.14

1.8.1

Improvements

• Loading spinner when saving pages and layouts now displayed

Bugfixes

• Improved change tracking when editing pages and layouts, if elements are edited
• Improved error handling in the image resize endpoint
• Lists are now updated more reliably when things are deleted or created
• Component selection in the builder now correctly shows the name of the component, event if there are a lot of components

1.8.0

Improvements

• render_structured_data takes two parameters now: the first is as before a blogpost or event, the second specifies the type of the first parameter. Available values are "post" and "event".
• The save button now recognizes better if a change has been made when editing pages, components, etc.

Bugfixes

• The description of pages in the page list now no longer overflows
• Comparison (==) of literal types in Handlebars now works better
• The cache refresh button in the header bar now shows the status of a running cache refresh operation

1.7.0

Improvements

• New Richtext editor
• New url_encode and url_decode functions in the renderer
• Plugin logs are now loaded better

Bugfixes

• Improved handling of deleted elements in the Pagebuilder

1.6.8

Bugfixes

• Default value for button group and select field can now be set
• Range input is now a slider
• Prevents checkboxes in the component props builder from sometimes activating and deactivating other checkboxes

1.6.7

Bugfixes

• Relations from child elements are now loaded correctly

1.6.6

Improvements

• New render_element function, which can be used to render individual elements

1.6.5

Bugfixes

• Component Props Builder now produces valid richtext props
• Component Props description can now be translated

1.6.4

1.6.3

Known Problems

In this version, a memory leak is present in the renderer. This has been fixed in version 1.6.4.

1.6.2

Known Problems

In this version, a memory leak is present in the renderer. This has been fixed in version 1.6.4.

1.6.1

Known Problems

In this version, a memory leak is present in the renderer. This has been fixed in version 1.6.4.

1.6.0

Known Problems

In this version, a memory leak is present in the renderer. This has been fixed in version 1.6.4.

Improvements

• New UI for editing component props, without having to write JSON

1.5.8

Known Problems

In this version, a memory leak is present in the renderer. This has been fixed in version 1.6.4.

Improvements

• The website can now try to determine the language of the client based on the accept-language header
• New fix-tip to use children in components correctly
• Font files are now displayed in the file management with a preview
• A small indicator to show which fields a element can be translated
• A button to jump from an element in the Page builder directly to its component

Bugfixes

• The number of users who are displayed with small page sizes is now correctly calculated
• URL-Function in the Renderer should now always return the correct path
• A crash from the server was fixed, which occurred when a missing ) was encountered in a template

1.5.7

Known Problems

In this version, a memory leak is present in the renderer. This has been fixed in version 1.6.4.

Bugfixes

• The login now correctly displays an error if the login fails

1.5.6

Known Problems

In this version, a memory leak is present in the renderer. This has been fixed in version 1.6.4.

Improvements

• Plugins now receive a FILE_STORAGE_PATH environment variable, which can be used to store files
• The internal email sending endpoint now accepts a attachments field, which can be used to attach files to the email

1.5.5

Known Problems

In this version, a memory leak is present in the renderer. This has been fixed in version 1.6.4.

Improvements

• Enabled Gzip compression for the server

Bugfixes

• The Interactivity script for the Page builder now works again

1.5.4

Known Problems

In this version, a memory leak is present in the renderer. This has been fixed in version 1.6.4.

Improvements

• A message is now displayed if multiple users try to edit the same page/layout/component/file/redirect/user/etc.

Bugfixes

• When switching between plugins, now always loads the correct plugin

1.5.3

Known Problems

In this version, a memory leak is present in the renderer. This has been fixed in version 1.6.4.

Improvements

• Blogpost and Event Search endpoints now accept the correct HTTP method
• Remote File Check is now more reliable

1.5.2

Known Problems

In this version, a memory leak is present in the renderer. This has been fixed in version 1.6.4.

Improvements

• The renderer now displays an error if you try to use a variable that doesn't exist or is null

1.5.1

Known Problems

In this version, a memory leak is present in the renderer. This has been fixed in version 1.6.4.

Improvements

• today is now available in the parameters of relation rules
• Relation input UI improved

1.5.0

Known Problems

In this version, a memory leak is present in the renderer. This has been fixed in version 1.6.4.

Improvements

• Improved renderer performance

1.2.40

1.2.39

Bugfixes

• Blogposts are now loaded correctly when the author is deleted

1.4.13

Bugfixes

• Fixed problems with editing and creating metatags
• Fixed problems with relation input
• Fixed problems with file selection inputs
• Event hero image and files can now be changed

1.4.12

Bugfixes

• Admin UI works again

1.4.11

Known Problems

• Admin UI doesn't work (fixed in 1.4.12)

1.4.10

1.4.9

1.4.8

1.4.7

1.4.6

Known Problems

• New component button is missing (fixed in 1.4.7)

1.4.5

1.4.4

1.4.3

1.4.2

1.4.1

1.4.0

1.3.0

1.2.38

1.2.37

1.2.36

1.2.35

1.2.34

1.2.33

1.2.32

1.2.31

1.2.30

1.2.29

1.2.28

1.2.27

1.2.26

1.2.25

1.2.24

1.2.23

1.2.22

1.2.21

1.2.20

1.2.19

1.1.2

1.2.18

1.2.17

1.2.16

1.2.15

1.2.13

1.2.12

1.2.11

1.2.10

1.2.9

1.2.8

1.2.7

1.2.6

1.2.5

1.2.4

1.2.3

1.2.2

1.2.1

1.2.0

1.1.0

1.0.0

Project start