From 56dfa9b4271e68f4d38eaa1ec16477d81d897539 Mon Sep 17 00:00:00 2001
From: npeter83 <npeter83+claude@gmail.com>
Date: Sun, 12 Jul 2026 03:49:55 +0200
Subject: [PATCH] release: v0.39.0
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Auth security round: SB3 (email tokens out of URL query → fragment), SA4 (server-side
session revocation + 'Log out other sessions'), SA3 (trusted-proxy X-Forwarded-For so
rate limits can't be bypassed via a forged header).
---
 VERSION                          | 2 +-
 frontend/src/lib/releaseNotes.ts | 8 ++++++++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/VERSION b/VERSION
index ca75280..4ef2eb0 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-0.38.0
+0.39.0
diff --git a/frontend/src/lib/releaseNotes.ts b/frontend/src/lib/releaseNotes.ts
index 6d0fbe8..c6cf63c 100644
--- a/frontend/src/lib/releaseNotes.ts
+++ b/frontend/src/lib/releaseNotes.ts
@@ -14,6 +14,14 @@ export interface ReleaseEntry {
 }
 
 export const RELEASE_NOTES: ReleaseEntry[] = [
+  {
+    version: "0.39.0",
+    date: "2026-07-12",
+    summary: "Sign-in security hardening.",
+    features: [
+      "New “Log out other sessions” button in Settings → Account, to sign out everywhere else.",
+    ],
+  },
   {
     version: "0.38.0",
     date: "2026-07-12",