chore(release): 0.3.0

CHANGELOG.md

@@ -4,9 +4,26 @@ All notable changes to Chironium are documented here. The format follows [Keep a
 
 ## [Unreleased]
 
+## [0.3.0] - 2026-10-26
+
 ### Added
 
 - Demo mode (`DEMO_MODE=true`) for running a public demo: visitors start a private organization with generated data in one click, and it is deleted after 24 hours. See the [self-hosting guide](docs/self-hosting.md#optional).
+- The organization timezone list is searchable.
+
+### Changed
+
+- Each list page shows its title and add button on one row; the top bar no longer holds page actions.
+
+### Fixed
+
+- BMI and waist-to-hip ratio are created when weight, height, or circumferences are saved together, and update when those measurements are edited.
+- Coded food preferences show every label.
+- Signing in and out keeps the visitor's language.
+
+### Security
+
+- Updated ash, ash_postgres, and plug_crypto to fix EEF-CVE-2026-96581, EEF-CVE-2026-114214, EEF-CVE-2026-115627, EEF-CVE-2026-115635, and CVE-2026-105963.
 
 ## [0.2.0] - 2026-10-24
 
@@ -41,6 +58,7 @@ The first public release.
 - English and Spanish interfaces with locale-aware dates and units.
 - A container image on GitHub Container Registry and a [self-hosting guide](docs/self-hosting.md).
 
-[Unreleased]: https://github.com/sealambda/chironium/compare/v0.2.0...HEAD
+[Unreleased]: https://github.com/sealambda/chironium/compare/v0.3.0...HEAD
+[0.3.0]: https://github.com/sealambda/chironium/compare/v0.2.0...v0.3.0
 [0.2.0]: https://github.com/sealambda/chironium/compare/v0.1.0...v0.2.0
 [0.1.0]: https://github.com/sealambda/chironium/releases/tag/v0.1.0

deploy/.env.example

@@ -27,6 +27,6 @@ OIDC_CLIENT_SECRET=
 # DEMO_MODE=true
 
 # Image tag to run. Pin a release and read the changelog before raising it.
-CHIRONIUM_VERSION=0.2.0
+CHIRONIUM_VERSION=0.3.0
 
 # Other optional settings are listed in docs/self-hosting.md.

deploy/compose.yaml

@@ -7,7 +7,7 @@
 # See docs/self-hosting.md for every setting.
 services:
   app:
-    image: ghcr.io/sealambda/chironium:${CHIRONIUM_VERSION:-0.2.0}
+    image: ghcr.io/sealambda/chironium:${CHIRONIUM_VERSION:-0.3.0}
     restart: unless-stopped
     env_file: .env
     environment:

docs/self-hosting.md

@@ -32,7 +32,7 @@ To upgrade, raise `CHIRONIUM_VERSION` in `.env` and run `docker compose --profil
 
 ## Run the container yourself
 
-Each [release](https://github.com/sealambda/chironium/releases) publishes `ghcr.io/sealambda/chironium:<version>` (for example `0.2.0`), plus `latest` and a `<major>.<minor>` tag that follows patch releases. Pin a version in production and read the [changelog](../CHANGELOG.md) before upgrading. Every push to `main` also publishes `ghcr.io/sealambda/chironium:main`, which tracks unreleased work. To build the image yourself, run `docker build -t chironium .` from the repository root.
+Each [release](https://github.com/sealambda/chironium/releases) publishes `ghcr.io/sealambda/chironium:<version>` (for example `0.3.0`), plus `latest` and a `<major>.<minor>` tag that follows patch releases. Pin a version in production and read the [changelog](../CHANGELOG.md) before upgrading. Every push to `main` also publishes `ghcr.io/sealambda/chironium:main`, which tracks unreleased work. To build the image yourself, run `docker build -t chironium .` from the repository root.
 
 ```sh
 docker run -d --name chironium -p 4000:4000 \
@@ -42,7 +42,7 @@ docker run -d --name chironium -p 4000:4000 \
   -e TOKEN_SIGNING_SECRET="$(openssl rand -base64 48)" \
   -e RESEND_API_KEY=... \
   -e EMAIL_FROM_ADDRESS=chironium@example.com \
-  ghcr.io/sealambda/chironium:0.2.0
+  ghcr.io/sealambda/chironium:0.3.0
 ```
 
 Generate `SECRET_KEY_BASE` and `TOKEN_SIGNING_SECRET` once and keep them stable: changing them signs everyone out.

mix.exs

@@ -4,7 +4,7 @@ defmodule Chironium.MixProject do
   def project do
     [
       app: :chironium,
-      version: "0.2.0",
+      version: "0.3.0",
       elixir: "~> 1.19",
       elixirc_paths: elixirc_paths(Mix.env()),
       start_permanent: Mix.env() == :prod,