Public Subsite: new live sections
- Training Programs (Live) can now be embedded on subsite pages, with a “Show on website” flag to control what appears publicly.
- Document Gallery (Live) can now be embedded on subsite pages to surface documents publicly, with a “Show on website” flag on folders.
- Footer links (Live) lets org admins curate an ordered set of “Quick Links” shown in the public site footer.
Public Subsite: theming & layout improvements
- Added theme-aware header and footer styling across all themes (arise, seva, clarity, earth), including navbar, hover accents, footer palette, and social icon styles.
- Fixed outline button theming so button colours correctly follow the active theme.
- Removed hardcoded section headings from live section components so page authors can supply their own headings within the editor.
Public contact form: security improvements
- Added CAPTCHA to the public contact form with refresh support and clearer validation handling.
- Added rate limiting (per IP) to reduce spam/abuse on the public contact form.
- Fixed an IDOR issue across org member management actions by enforcing organisation scoping before any DB access.
Security, reliability & operational improvements
- Upgraded Google App Engine runtime to Python 3.11
- Fixed a third-party migration warning and configuring
MIGRATION_MODULESso deployments remain stable and repeatable.