Changelog - Dev - 06.01.2026

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog.

---

[Unreleased] - 2026-06-01

Added

• Admin billing portal with vendor pages and reports — Builds out the admin billing portal with a BigQuery-wired Reports tab, per-vendor pages (starting with Anthropic), credit-aware spend charts, and invoice reconciliation. Replaces placeholder billing UI with real per-line-item attribution sourced from the BQ billing pipeline and Gmail-parsed invoice actuals. (#543) enhancement

---

Update - 2026-06-01 18:10 UTC

Fixed

• Fix dataform-billing-daily scheduler update command — Resolved dev deploy failure by using the correct --update-headers flag instead of --headers when updating the dataform-billing-daily Cloud Scheduler job. The gcloud scheduler jobs update command does not support --headers; only --update-headers is valid for modifying existing jobs. (#545) bug

---

Update - 2026-06-01 18:45 UTC

Security

• End-to-end encryption for chat messages — Implemented Olm/Megolm-based E2EE for 1:1 chat sessions using Matrix SDK crypto, with device-identity lifecycle management and encrypted backup/restore capabilities. Encrypted messages are stored in Firestore with plaintext fallback during rollout. (#544) enhancement
• Add cascading deletion for user account data — Implemented complete account deletion cascade that removes all associated user data across lanterns, waves, and connections when an account is deleted, ensuring no orphaned PII remains. (#544) enhancement
• Sanitize personally identifiable information — Added PII sanitizer to prevent accidental exposure of sensitive user data in logs and system outputs. (#544) enhancement
• Harden CI/CD security guardrails — Implemented CI guardrails to enforce security best practices during the build and deployment pipeline. (#544) enhancement

---

Update - 2026-06-01 18:58 UTC

Security

• Prevent dev environment from appearing in search indexes — Added noindex meta tag to the web app to prevent dev.ourlantern.app from being indexed by search engines. While Cloudflare blocks AI scrapers, search crawlers were receiving clean 200 responses and could index the SPA shell and login surface. (#547) devops

---

Update - 2026-06-01 23:08 UTC

Fixed

• Stop sponsored-hero card flicker on dashboard — Resolved layout shift caused by the Sponsored Nearby hero card resolving asynchronously after the venue list had already painted. Centralizes offer selection logic into a shared module, preparing the codebase for future merchant-rotation fairness features without requiring redesign. (#553) bug

---

Update - 2026-06-01 23:39 UTC

Security

• Hash city in venue_searched analytics event — Round-2 privacy hardening that hashes bare city names in the venue_searched analytics event to prevent coarse user-linked location leakage on the registered tier. Part of a daisy-chained roll-up of follow-up privacy fixes. (#549) enhancement