Release 4.0.1

• Channel: stable
• Published: 2026-03-13T18:07:47Z
• Release tag: v4.0.1

[4.0.1] - 2026-03-12

Customer-Facing Changes

Admin Panel

• Support for multilingual provider labels and descriptions with translation handling in forms.
• Bulk tax recalculation feature with confirmation UI and result summaries.
• Dashboard comparison features to analyze data against previous periods or custom date ranges.
• Support for Wise and Wire payment providers, including configuration modals and transaction handling.
• Updated transaction navigation to filter for completed transactions and those with tax.

APIs And Integrations

• System template settings for managing email templates.
• Support for no-auth SMTP servers and base64-encoded email bodies.
• Customer portal settings and synchronization for document templates.
• Bulk tax recalculation job controls and API endpoints.
• Auto payment link expiry settings and related features.
• Recurring schedule processing support.
• On-demand TLS domain verification and CNAME validation.
• XML invoice downloads and tax rate management.
• Multi-source address management and geolocation fallback for tax calculations.
• Payment link QR code generation for invoice PDFs.
• Improved invoice number allocation to ensure organization-level uniqueness.
• Standardized webhook secret management.

Checkout And Customer Portal

• Subscription management features including list and detail views.
• Document management portal for viewing invoices and credit notes with internationalization support.
• Support for Wise and Wire payment methods with dedicated forms.
• Portuguese and Chinese localization for payment screens.
• Replaced formatAmount with formatAmountCode for consistent currency formatting.

Deployment And Operations

• License access enforcement and OTP support for portal authentication.
• Public /api/* route pass-through to support external API consumers.
• Deep health check endpoints for enhanced service monitoring.
• Updated invoice sequence index to be organization-level instead of site-level.
• Improved tax rule matching to consider effective dates and updated OSS behavior to apply to all supply types.
• Consolidated API and webhook handling into simplified API routes within the reverse proxy configuration.
• Removed ZeroSSL certificate issuer from reverse proxy configuration.

Fixes

• Improved STARTTLS handling and improved error logging for SMTP connection failures.
• Fixed tax calculation behavior to correctly handle gross prices, discounts, and floating-point artifacts.
• Ensured 404 errors are returned when deleting non-existent domains.
• Improved error handling for migration registration and SMTP client closure.
• Fixed path traversal vulnerabilities in file retrieval and enhanced sensitive data serialization protection.
• Fixed specific navigation and notification behavior for 401 and 403 status codes.
• Fixed invalid webhook handling to return 4xx status codes for signature/payload mismatches.
• Corrected retry delay calculation behavior for background jobs.
• Updated file permissions for temporary PDF generation directories to improve security.
• Fixed redirect URLs to use sessionPublicId instead of publicId for accurate payment processing.
• Improved Axios timeout handling and user experience during request timeouts.

Deployment Notes

Use the updater from payment-gateway-deploy to install this release. Exact image references and digests are resolved from signed release metadata and deployment tooling instead of being duplicated in these notes.

Security Artifacts

This release was published before the current release security artifact contract was made customer-facing. Use Release Security Transparency for the current SBOM, vulnerability report, policy-result, checksum, and provenance evidence model.