Bump version to 2.36.0

jeremyevans · Jul 23, 2024 · 4dfc49c · 4dfc49c
1 parent 0c8dc7a
commit 4dfc49c
Show file tree

Hide file tree

Showing 3 changed files with 38 additions and 3 deletions.
diff --git a/CHANGELOG b/CHANGELOG
@@ -1,4 +1,4 @@
-=== master
+=== 2.36.0 (2024-07-23)
 
 * Add webauthn_modify_email feature for emailing when a WebAuthn authenticator is added or removed (jeremyevans)
 
@@ -14,7 +14,7 @@
 
 * Make internal_request feature work with Roda path_rewriter plugin (jeremyevans) (#425)
 
-=== 2.35.0 (2025-05-28)
+=== 2.35.0 (2024-05-28)
 
 * Handle internal_request_configuration blocks in superclasses (jeremyevans, bjeanes)
 

diff --git a/doc/release_notes/2.36.0.txt b/doc/release_notes/2.36.0.txt
@@ -0,0 +1,35 @@
+= New Features
+
+* An otp_unlock feature has been added, allowing a user to unlock
+  TOTP authentication with 3 consecutive successful TOTP
+  authentications.  Previously, once TOTP authentication was locked
+  out, there was no way for the user to unlock it.
+
+  Any unsuccessful TOTP authentication during the unlock process
+  prevents unlocks attempts for a configurable amount of time (15
+  minutes by default).  By default, this limits brute force attempts
+  to unlock TOTP authentication to less than 10^2 per day, with the
+  odds of a successful unlock in each attempt being 1 in 10^18.
+
+* An otp_lockout_email feature has been added for emailing the user
+  when their TOTP authentication has been locked out or unlocked, and
+  when there has been a failed unlock attempt.
+
+* An otp_modify_email feature has been added for emailing the user
+  when TOTP authentication has been setup or disabled for their
+  account.
+
+* A webauthn_modify_email feature has been added for emailing the
+  user when a WebAuthn authenticator has been added or removed from
+  their account.
+
+* An account_from_id configuration method has been added for loading
+  the account with the given account id.
+
+* A strftime_format configuration method has been added for
+  configuring how Time values are formatted for display to the user.
+
+= Improvements
+
+* The internal_request feature now works with Roda's path_rewriter
+  plugin.
diff --git a/lib/rodauth/version.rb b/lib/rodauth/version.rb
@@ -6,7 +6,7 @@ module Rodauth
   MAJOR = 2
 
   # The minor version of Rodauth, updated for new feature releases of Rodauth.
-  MINOR = 35
+  MINOR = 36
 
   # The patch version of Rodauth, updated only for bug fixes from the last
   # feature release.