Fix Word export document structure
Word exports use valid formatting and section links, and correctly embed JPEG logos. Report text and styling are preserved.
Release Archive
Filter the full history by product, change type, or date. Every title has a stable link you can share directly.
Shipping Activity
A daily view of meaningful updates published across Ugurlabs products.
130 changes
Word exports use valid formatting and section links, and correctly embed JPEG logos. Report text and styling are preserved.
Custom logos retain their intended size in Word documents, preventing oversized images from disrupting the report layout.
A separate Curated Catalog view introduces the first ten applications with vendor sources and release verification status. Releases become deployable only after reviewed security and installation evidence is recorded in a signed catalog. The pilot begins with all ten applications awaiting verification; it does not advertise untested releases as approved.
App selection checks which versions are still available. Older cart selections can be refreshed for review while retaining deployment settings, and removed versions show a clear recovery action instead of a temporary error.
The public roadmap now separates available package verification and installer security checks from ongoing catalog coverage and planned features, with a review date and clearer coverage wording. It includes the tenant-private catalog idea and live evidence links, adds roadmap links in docs and the README, and improves tablet navigation and keyboard access.
Application QA distinguishes tests waiting to start from active tests, detects stalled result publishing, and preserves completed test evidence during recovery.
Colleagues waiting to join a company workspace now see one clear status card, the request date and approver contacts while their request is pending. Checking an approved request opens the company workspace and confirms their access. Declined requests explain how to ask for an invitation and can be acknowledged across devices without prompting users to connect Microsoft 365 again. Owners and admins see request counts and a direct link to review requests, with confirmation before declining. Approval still grants viewer access; no one receives access automatically. Decision emails are sent when email is configured.
Application QA now recovers missing results automatically, schedules retries for temporarily unavailable downloads, and continues checking updates when a background scan encounters an error.
The Who can join options in Settings now explain what happens to a colleague who signs in without an invite, and what viewers can see when they join automatically. Colleagues who end up in an empty workspace of their own now see that their organization already uses LicenseMeter, whether their request to join is pending, and that they can ask an owner or admin for an invite.
Connecting a Microsoft tenant now waits for the new service principal to appear in Microsoft Entra instead of failing the first sync with an identity error. The sync retries automatically for up to about two minutes; if Microsoft is still finishing setup when that runs out, the next scheduled sync finishes the job. Reconnecting is only needed in the rare case where Microsoft cannot confirm the consent yet.
The navigation's Start free button now takes you directly to the sign-in page instead of scrolling to the homepage's getting-started section. Signed-in users can still open their dashboard directly.
When a Microsoft tenant is connected, LicenseMeter now confirms with Microsoft that the connector app really was authorized in that tenant before attaching it to the workspace. This closes a case where a crafted return link could attach a tenant that had not authorized the app, which could block the tenant's real owner from connecting.
The pricing page now puts each plan’s key benefits and billing terms in spacious, easy-to-scan cards. Compare monthly and yearly prices, explore full plan details, and find the recommended Pro plan in English or German.
Downloading the PDF waste report or a signed DPA returned an error in the hosted deployment because a PDF library was missing files from the serverless bundle. Both downloads, and the monthly report email, now render correctly.
The home page now gives an overview of the Free, Pro and MSP plans with their current prices and a link to the full pricing page. The hero, the three-step value section and the closing call to action were reworded so the free offering and the paid plans are described accurately, and the page states where the service is hosted.
Removed the maintainer and operator paragraph beneath the landing page's final call to action.
Workspace membership and MSP billing ownership now use Microsoft identities exclusively. Older email recovery links no longer work, and accounts that were never linked require an administrator to restore access. Existing Microsoft-linked memberships retain their roles and subscriptions. Self-hosted upgrades stop if unresolved memberships or MSP owners need attention before the retired identity fields can be removed.
Signing out now revokes the session on the server, not just in your browser. A copy of the session cookie can no longer be replayed after you sign out; it stops working right away instead of remaining valid until it expires.
The landing-page sign-up now rejects addresses that contain markup or other unusual characters instead of accepting almost anything with an @ sign. This keeps malformed and spurious sign-ups out of the list.
A workspace that receives a paid plan through a connected MSP account is now recognised as already covered when someone starts a checkout or links a Microsoft Marketplace subscription. Previously it could be offered a second, competing plan, which risked paying twice for the same workspace.
When two colleagues from the same verified email domain signed in for the first time at the same moment, both could claim the domain and a duplicate workspace could be created. The first sign-in for a domain is now serialised, so exactly one workspace owns the domain.
The credentials-free demo now refuses CSV imports the same way it already refuses other workspace-creating actions. Previously the demo could create an extra workspace that later demo visitors could see, so the demo is now strictly read-only and isolated to its own sample data.
The redirect that sends non-status paths from status.licensemeter.com to the main site now builds its destination from the configured site origin, so a crafted path can no longer send a visitor to another host.
Settings, Email delivery now has two recovery controls for Owners and Admins. Send the current findings emails the offboarding leaks that are open right now to the owners, the admins and a confirmed shared notification address, so a workspace can catch up after a leak alert never arrived. It sends no old email, turns no scheduled email on and changes nobody's preferences, it asks for a confirmation and names how many people it reaches, and it is limited to three sends per workspace per day. Blocked addresses can now be cleared in place, which lets the next send reach that mailbox again. Clearing a block does not repair a mailbox, and the mail provider keeps a suppression list of its own, so fix the mailbox first.