> ## Documentation Index > Fetch the complete documentation index at: https://ownpay.org/docs/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > OwnPay is licensed under AGPL-3.0 and is completely free - no licensing fees. > Production docs URL: https://ownpay.org/docs - append .md to any page URL for clean markdown. > OwnPay requires PHP 8.3+, MySQL/MariaDB, and Redis. > MCP server available at https://ownpay.org/docs/mcp for programmatic documentation queries. > Use root-relative links (e.g. /quickstart) for internal navigation - do NOT include /docs prefix. > Plugin development: consult /developer/plugins/ pages for correct interfaces and manifests. > Canonical locations: API auth = /api/authentication, webhook verification = /api/webhooks, rate limits = /resources/rate-limiting, transaction statuses = /fundamentals/payment-flow. > The documentation uses the Diataxis framework: Tutorials (learning), How-to (tasks), Reference (lookup), Explanation (understanding). # Changelog > Track all OwnPay releases, version history, and breaking changes. This page is automatically synced from the main repository. All notable changes to OwnPay are documented in this file.\ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).\ Versioning follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html). *** ## [0.2.0] - 2026-07-07 ### Added * Custom themes can now register their own rendering engine (in addition to the built-in template engine), and a brand-scoped Appearance page lets each brand pick its own theme independently. * Themes going through activation are now scanned for dangerous code patterns before being allowed to run, and unsafe themes are blocked with a clear warning instead of being silently activated. * Plugins can declare other plugins they depend on; activating one now checks that its dependencies are installed and active first, instead of failing later in a confusing way. * Checkout pages gained two new customization points: gateways can add their own markup next to their name in the gateway list, and merchants can inject extra form fields into checkout that are submitted along with the payment. * The admin panel gained a pluggable rendering-engine system and a stylesheet/script "enqueue" system so themes and admin pages can register their own assets cleanly instead of hard-coding tags into templates. * Required settings fields declared by a plugin are now validated on the server when saved, not just in the browser, closing a gap where a scripted request could bypass the "required" marking entirely. * API keys can now be temporarily locked (suspended) without fully revoking them, and the admin can see every key's status - active, locked, or revoked - in one list. * The Developer Hub page was reorganized: Endpoint Reference and Authentication were merged into the API Keys tab, and webhook-related settings were separated out for clarity. * The Domains page was redesigned with a card-based layout, a tabbed management panel per domain, and a guided 3-step wizard for adding new domains, replacing the old flat table and static instructions. * Manual (offline) payment methods gained a dedicated payment/account number field, and the customer-facing popup for manual payments was redesigned with the gateway logo, a QR code, and a one-tap copy-amount button. * Every schema change now ships with a matching upgrade file, so existing installations pick up new database columns automatically on update instead of needing a fresh install. * After a successful system update, old log files are now automatically cleaned up as part of routine housekeeping. ### Changed * The setup wizard was rebuilt as a dedicated full-screen experience with a cleaner step tracker, resumable progress, and the option to skip optional steps. * Finishing or dismissing the setup wizard now always lands the admin on the All Brands view instead of a single brand. * Logging in now correctly lands superadmins (and any staff granted All-Brands access) on the global All Brands view, instead of always dropping them into a single brand's dashboard. * Gateway selection on the checkout page now behaves consistently across all payment method tabs, and gateway logos in the list are larger and easier to read. ### Fixed * Manual gateway checkout popups no longer show a blank \$0.00 amount and now correctly display the brand name in the footer. * Four payment gateway adapters no longer treat an unreachable webhook confirmation as a completed payment ("fail open"); they now correctly wait for a real confirmation. * Checkout no longer allows two rapid submissions of the same payment to both go through, and returning to a checkout page via the browser back button no longer leaves it in a broken state. * Fixed a bug where a gateway's resolved currency, amount, and fee could be wrong when processing a payment via a payment intent. * Invoices no longer show placeholder text in the generated PDF, no longer crash when an invoice has zero line items, and correctly record the paid date. * Payment links can now be edited from the All-Brands view, no longer return a server error on a duplicate link name, and now properly validate their input. * Fixed the setup wizard's copy-to-clipboard buttons (OTP and account number) failing silently in some browser contexts. * A theme's first-time activation no longer incorrectly reports "failed to activate" even though it actually succeeded. * Removing a domain, toggling a domain's manage panel, and the domain wizard's UI state all had bugs that are now fixed. * Fixed several PHPStan static-analysis errors representing genuine logic bugs, including an incorrect argument order in the application logger's setup and unreachable validation code. * Fixed an overly broad version-control ignore rule that was unintentionally also hiding a real source code folder. ### Security * Payment gateway credentials (API keys, secrets, passwords) are now encrypted at rest instead of being stored in plaintext, and are no longer echoed back into the settings form. * Closed a gap in the webhook pipeline where gateway identity wasn't fully verified and a server-side request forgery (SSRF) vector was possible. * Invoice PDF downloads now sanitize the output filename to prevent path traversal. * The brand Appearance (theme) page now correctly requires the plugin view/manage permission instead of being open to anyone with admin access. *** ## \[0.1.0] - 2026-06-30 > **Initial public release.** OwnPay is a self-hosted, enterprise-grade, open-source payment > gateway platform built on PHP 8.3+. A single owner operates the full system; multiple > brands (stores) run under isolated custom domains - each with its own gateways, ledger, > customers, and visual identity. [0.2.0]: https://github.com/own-pay/ownpay/releases/tag/v0.2.0 ## Related topics - [Migration Guide](/docs/resources/migration-guide.md) - [OwnPay Ecosystem - SDKs, Plugins, Companion App, and Marketplace](/docs/resources/ecosystem.md) - [System Update](/docs/system/system-update.md)