Skip to content
GitHubDownload

Changelog

What’s new in Kaleta.

Every release, newest first. Sites update from the admin in Settings → Backups and updates; packages are signed and security releases can install themselves.

Releases on GitHubSecurity advisories

3.31

9 November 2026

Feature release

A sales pipeline next to contacts, enquiries and tasks: deals on a board, stages you choose, and the same privacy rules as the rest of the CRM.

  • Pipeline: deals on a board and in a list, created by hand or from an enquiry, with boxes on contact, company and enquiry pages.
  • Stages you set yourself (3 to 12). Every move is kept, and a lost deal asks for a reason.
  • Work on a deal: comments, tasks, notifications and a responsible person, also in My work.
  • Privacy: an enquiry behind an open deal is kept, a customer with an open deal is not anonymised, and erasing a customer also handles the comments on their deals.
  • Counts only: reports and summaries never show deal values. Values are a number and a currency, with no forecasts.
  • For Claude: list_deals, save_deal, move_deal and pipeline_summary.
  • Fixes: a safer Settings redirect, a code-scanning warning removed, and a Fleet expiry reminder e-mail that failed is now sent again later.
  • One database change. Nothing renamed.
Full release notes

3.30

3 November 2026

Feature release

The Fleet console's second release: a searchable inventory, one calendar of expiring certificates and domains, updates in rings and maintenance windows, console tasks and a fleet plan for Claude.

  • Inventory: version, channel, PHP, database, web server, features, add-ons and languages of every site – filter, search, CSV.
  • Expiry calendar of certificates and domains with reminders 30 and 7 days before and a private calendar feed.
  • Rollout: pilot, normal and careful sites, maintenance windows per customer, and a view of how far each release has got. Security releases still go everywhere at once.
  • Console tasks about a site or a customer, on Today and in My work.
  • For Claude: fleet_plan and the fleet_fix prompt – one site at a time through each site's own connection; plus fleet_inventory and fleet_calendar.
  • One database change. Nothing renamed.
Full release notes

3.29.1

3 November 2026

Fixes

Invitation and password links set the password again, the visit drop after 3.29 is explained wherever visits are shown, and only Content is open in the menu after you sign in.

  • Password links work again: a password set from an invitation or a "forgot password" e-mail is saved. Send a new link from Users to anyone who could not sign in.
  • Sign in with your e-mail address as well as your user name, with the same limits, lock and two-step sign-in.
  • Visits: the dashboard, the monthly report, Claude and the Fleet console mark the day counting changed – fewer bots, not fewer people – instead of showing a fall.
  • Menu: after you sign in only Content is open.
  • No database change. Nothing renamed.
Full release notes

3.29

3 November 2026

Feature release

Visits now count only when a visitor's browser confirms them – no bots, link previews or your own visits. The Fleet console opens on Today: what needs attention across all your sites.

  • Visits without bots: a page view counts only when the page is shown in a person's browser; scrapers, AI and SEO crawlers, link previews, prefetching, uptime checks and signed-in users are left out. Still no cookies.
  • A flood cap per visitor; Statistics and the monthly report mark the day the new counting started. Expect lower, truer numbers.
  • Fleet console – Today: one ranked list of what needs attention across all sites, each with a plain link to the right screen of the site's own administration.
  • Health matrix of 18 checks per site and a Workload roll-up of enquiries, replies, tasks and new customers – counts only.
  • The footer link reads “Support the development of Kaleta CMS”.
  • One database change. New MCP tools fleet_today and fleet_health. Nothing renamed.
Full release notes

3.28

3 November 2026

Feature release

Customers: one record per person and company with a timeline, built from enquiries, bookings and the newsletter. Off-site backups are now encrypted.

  • Customers in Workspace: search, companies, and a timeline of enquiries, replies, bookings, the subscription, comments, tasks and logged calls and meetings.
  • New enquiries, bookings and confirmed sign-ups are linked to the customer automatically; duplicates are merged only by hand.
  • A Customer box on every enquiry and booking; CSV export and import; Ctrl K finds customers.
  • Privacy: retention for customers, and finding, exporting and erasing personal data include them.
  • Encrypted off-site backups with a recovery key – save it in Settings → Backups and updates after updating.
  • One database change. New MCP tools list_contacts, get_contact, save_contact, log_activity and merge_contacts. Nothing renamed.
Full release notes

3.27

4 November 2026

Feature release

Tasks and follow-ups: one click after a reply, tasks on pages and items, reminders, and tasks in My work.

  • Follow-ups after a reply to an enquiry: tomorrow, in 3 days or in a week.
  • Tasks on enquiries, pages and collection items, or on their own, with a person, a due date and a reminder.
  • My work shows tasks first – overdue, today, the next 7 days – with Done and snooze; a Team tab for administrators.
  • Reminders in the bell and by e-mail; hand a task to Claude as an Ask Claude request.
  • One database change. New MCP tools list_tasks, save_task and complete_task. Nothing renamed.
Full release notes

3.26.1

3 November 2026

Improvements

A monthly report you will want to read: a new look, what it took to run the site, and uptime from the fleet console.

  • New look for the monthly report e-mail, page and print: headline tiles, charts and one sentence that sums up the month; works in Gmail, Outlook, Apple Mail, on phones and in dark mode.
  • What it took to run the site: updates, backups, checks, spam, Claude's work and your team's work, counted and grouped into automatic, Claude and people – never hours or money.
  • Uptime from the fleet console in the same day-by-day strip as the console's site detail.
  • No database change. get_monthly_report adds uptime and care; nothing renamed.
Full release notes

3.26

6 November 2026

Feature release

Comments on pages and items, @mentions, and notifications in a bell and by e-mail – right away, once a day or never.

  • Comments on pages (also in the builder) and collection items, next to the enquiry notes; @mentions of colleagues who can open that place.
  • Notifications: a bell in the header and a Notifications screen for mentions, comments on your pages and items, assignments and review reminders; e-mail right away, once a day or never.
  • For Claude: list_comments and add_comment; a work tool set for employees' own connections.
  • Builder: spacing and colours picked from the design system.
  • One database change. Nothing renamed; existing Claude connections keep their tools.
Full release notes

3.25

4 November 2026

Feature release

Enquiry notes that keep their history, draft history and compare in the builder, and a tidier menu with Workspace under Content.

  • Enquiries: internal notes are a history with author and time; the detail shows the whole conversation in order; replies quote the customer's message.
  • Builder: the last 10 autosaves of the draft next to the published versions, a section-by-section text compare, and one link picker for every link.
  • Menu: Dashboard, My work, Content, Workspace (Enquiries, Bookings), Appearance, Claude, Site care, Administration; groups fold and remember their state.
  • One database change. update_enquiry can add a note; list_build_versions also lists the draft history. Nothing renamed.
Full release notes

3.24

2 November 2026

Feature release

A website your team works in: My work, a responsible person for pages and items, e-mails when work is handed to someone, and a faster site while the team works.

  • My work: one screen with your open enquiries, new unassigned ones, your pages and items that need a look and your requests Claude answered.
  • Responsible person for pages and collection items, with a Mine tab; it means responsibility only and never limits who may edit.
  • E-mail on assignment of an enquiry, a page or an item – with a link, never the enquiry content; an “Assigned to me” tile on the dashboard; review reminders go to the responsible person.
  • When someone leaves: hand over everything they are responsible for in one step.
  • Faster site: the page cache is no longer emptied by work that does not change the site; reminders also run while the team works in the administration.
  • Builder: a new page starts in the builder; who edited a draft is shown in Pages and the builder.
  • One database change. New MCP tools my_work and assign; update_enquiry gains assignee. Nothing renamed.
Full release notes

3.23.1

2 November 2026

Fix release

Fixes from the re-audits of 3.23: a Client role that can edit the menu and footer, e-mails in the site's language, Word paste on the canvas, a tablet layout up to 1179 px.

  • Client role: the ready-made Client role includes the Appearance area and Business details; roles saved earlier keep their access, and the handover checklist says what a client account still lacks.
  • E-mails: draft-comment and testimonial-request notifications go out in the site's language; new users keep an admin language.
  • Change log: one row per action with the record number; a refused action writes none.
  • Enquiries: the testimonial request appears only on resolved customer enquiries, folded below the main actions; the reply form says when no signature goes with the reply.
  • Phone: System status no longer cuts off text; Settings shows its tabs as a list.
  • Builder: a Word paste on the canvas keeps lists; the tablet layout covers 1024–1179 px; Alt+arrow moves are announced to screen readers.
  • No database change. No setting, MCP tool or parameter added or renamed.
Full release notes

3.23

1 November 2026

Feature release

A site you can hand over to a client: shorter settings, one handover checklist, lists instead of typed ids in the builder.

  • Settings: General is split into General, Languages, Security and Agency; each tab saves only its own fields and old links still land on the right field. “Fleet console” is now “Reporting to a console”, shown only when an agency is named or the site already reports.
  • Handing over to a client: one checklist in Site audit with “x of y done”, including a client account, the monthly report recipient, SMTP set up and tested, Claude settings reviewed and the agency contact.
  • Appearance area: members preview the draft look and menu draft on the site; publishing the look stays with the administrator.
  • Wording: “Ask Claude” everywhere, “request” for one item; the first Site appearance tab is “Styles”.
  • Builder: Collection list, Store locator, Booking, News list and Previous/next pick collections, fields, categories, services and people from lists, with “Custom…” for anything else; on a tablet the panels fold into icon rails over the canvas.
  • No database change. No setting, MCP tool or parameter renamed; site_audit adds a handover_checklist.
Full release notes

3.22

1 November 2026

Feature release

A role for the client's marketing person, replies sent from the enquiry, and text that comes in from Word.

  • Roles: a new optional area “Appearance – menu, site parts, pop-ups and components”; site appearance, settings, users, backups and Claude settings stay with the administrator. Off for every existing role and user; a draft-only role saves drafts.
  • Enquiries: “Send reply” sends Claude’s drafted reply through the site’s SMTP with your signature and your address as Reply-To; the enquiry shows who replied, when, what was sent and whether it was delivered.
  • Forms: each form can have its own confirmation e-mail text; empty keeps today’s text. Enquiry notifications keep the visitor’s Reply-To when the site has its own reply address.
  • Text editor: the link dialog finds pages, news, collection items, files and language versions as you type, and turns an e-mail or phone number into a mailto: or tel: link; numbered list and quote in the builder; lists pasted from Word become real lists.
  • Search engines: an optional canonical address on pages, news and collection items, kept from Yoast, Rank Math and SmartCrawl on WordPress import; such pages leave the sitemap.
  • Uploads: photos are scaled to 2000 px in the browser before upload; System status says how to raise the upload limit and can write a .user.ini.
  • Migrations 0108 and 0109. MCP: new tool reply_to_enquiry (sends a real e-mail, needs confirm), canonical_url on the page, news and collection item tools; existing tools unchanged.
Full release notes

3.21

1 November 2026

Feature release

The builder for people who are not designers: fewer style settings, visible screen differences, a right-click menu.

  • Style tab: each element shows only the style groups it needs; the rest is behind “Show all properties”, and a group with a value is always shown. Font size is a choice of the design system’s steps or a custom value checked right at the field.
  • Breakpoints: a dot on the Tablet or Phone button when the element has its own values there, a mark next to a field set differently on a smaller screen, and × to return a field to its inherited value.
  • Visibility: one “Shown on” row – Desktop, Tablet, Phone; an element hidden on the current device stays on the canvas as a dashed strip with “show”, and Structure marks it.
  • Canvas: right-click or Shift+F10 for Duplicate, Delete, Copy, Paste, Copy style, Paste style, Save as component, Select parent; a nesting path under the panel header; Alt+arrows to move; text typed in the panel appears at once.
  • A date-and-time picker for the Countdown, “Pressed” instead of “Press”, a heading’s tag set only as its Level, and the stray “null” under the element header is gone.
  • No database change; existing pages render as before. MCP tools unchanged.
Full release notes

3.20

31 October 2026

Feature release

A connected admin: the screens link sideways and back, so nobody has to know where the next screen is.

  • Pages: tabs All / Published / Hidden / Unpublished changes / Trash with counts, an Edited column (when and by whom) and a Language column; the dashboard tiles open the matching tab.
  • Enquiries: an enquiry says from which form on which page it came, with “Open in the builder” (the form is selected on arrival) and “Page settings”; statistics rows that name a page get an edit link.
  • Collections and news: the items screen shows the collection’s listing page with its state, “Edit in the builder”, “Publish” and “Add to the menu”; the testimonial request offers to create the References collection; the news form always shows the category; Broken links is also under Site care.
  • Everywhere: every hint that names a menu path (“Settings → Mail”, “Features”…) is a link, shown only to people who may open that screen; one way to connect Claude; builder panels link to where the data lives – Enquiries, the collection, business details, the menu, booking; “Edit this component (changes everywhere)”.
  • Small dead ends closed in Integrations, Media “Used in”, the cookies tab, Site audit and Whistleblowing.
  • Database: migration 0107 records who last edited a page. MCP tools unchanged.
Full release notes

3.19.2

26 October 2026

Feature release

The same address in every language on every site, tags per language, redirects by the exact address, and an icon for each collection.

  • Addresses per language on every site: /kontakt and /en/kontakt side by side for pages, news and categories. The update checks each site first; a site whose addresses clash within one language stays as it is, and System status says which and what to do.
  • Tags per language: a tag used in several languages becomes one per language, every news item linked to the tag of its own language.
  • Redirects by the exact address: /café and /cafe are two addresses; clashing old addresses are listed in System status, nothing is deleted.
  • An icon for each collection, shown in the admin menu and the list of collections – twelve common ones first, the rest behind More icons. Claude can set it too.
  • The privacy template mentions OpenStreetMap when the store locator loads the map at once; the whistleblowing daily limit now holds on the day the clocks change.
  • 3.19.1 (30 October 2026, security): a failed update that cannot put the old files back now says so instead of reporting them restored; FTPS off-site copies check the server certificate (a self-signed NAS stops receiving copies until it has a trusted one); a new Make a new signing key action; config.php readable only by the site on new installs; stricter add-on install.sql and .htaccess rules. Claude connections are not affected.
  • 3.19.2 (30 October 2026): Save to my sections, Save as component, shared classes and the writing assistant in the builder work again (broken since 1.4.0); a module whose feature is switched off says so and links to Features instead of “no access”; the screen is called Integrations everywhere and the path in hints is a link.
Full release notes

3.18.3

20 October 2026

Security release

Know at a glance whether Claude is connected – before you ask it for anything. 3.18.2 fixes pasting in the editor and the builder (security); 3.18.3 puts your collections in the admin menu.

  • Status in the admin header: Claude connected, idle with the last call, requests wait (the scheduled run stopped) or not connected – on every screen, linking to the Claude settings.
  • Ask Claude warns first: with no connection, the box, new requests, translation and blueprint requests say the request will wait; the button becomes Save for later. Manual or stalled pickup is spelled out with a link to Scheduled runs.
  • Claude settings open with a status panel: last call, how requests are picked up, when the connection ends.
  • A Claude connection row in System status and in get_health; the fleet console flags sites whose requests wait with no working connection.
  • “Last used” no longer falls back to “never” after the Claude app renews its access, so live connections are not treated as unused.
  • 3.18.1: the buttons of the builder’s dialogs (Published versions, Share, Comments…) are readable again when the admin’s light/dark mode differs from the computer’s.
  • 3.18.2 (security): text pasted into the editor is cleaned so nothing in it can run; builder elements are pasted through the server and Custom HTML is kept only from this site’s own copy. Very long addresses no longer crash the site audit or news pages.
  • 3.18.2: the dashboard no longer crashes on a path-traversal probe in the 404 log; forms, the phone menu, a menu around a centred logo, the store locator as a map with a side panel, category filter buttons and site-move fixes.
  • 3.18.3: collections straight from the left menu – each collection can be shown under Collections (on by default, up to 8) and opens its items in one click; the list of items filters by category and choice fields.
Full release notes

3.17

20 October 2026

Feature release

One inbox for all your sites, customers, history and alerts, and a monthly report per customer.

  • Inbox across all sites: the fleet console opens on one list of everything that waits – requests to Claude, new enquiries, drafts for approval, bookings, failed updates, sign-in attacks, expiring certificates and domains, sites down or silent. Sorted by urgency; every row is a plain link to that site's own admin, no sign-in, no token.
  • Customers: group sites by customer, filter the inbox and the list of sites by customer, allow a new version for one customer's sites at once.
  • History and trends: 400 days of uptime and response time per site, 90 days as bars, outages and version changes.
  • Alert rules and a weekly digest: thresholds, recipients and quiet hours; one set of thresholds drives the alerts and the inbox.
  • Monthly fleet report per customer: uptime, outages, versions and each site's headline counts on an A4 page. A summary, not an invoice – no hours, no prices, no personal data.
  • Claude reads it all with fleet_inbox and fleet_report (read-only).
Full release notes

3.16.0

20 October 2026

Feature release

A monthly report you can keep and hand over, and a fleet console that sees what waits on every site.

  • Monthly report archive: every month is kept for 24 months. Settings → Reports lets you view and print it (an A4 page with your agency's branding – save it as PDF), download it or send it by e-mail.
  • What the report says: requests to Claude handled and still open, changes by people and by Claude, Claude's scheduled runs, updates, backups, security, the site audit, traffic, enquiries, bookings, newsletters and what was waiting at the end of the month. A summary of the site – no hours, no prices, no personal data.
  • The fleet console sees what waits: each site reports requests to Claude (with their titles, switchable), drafts and files to approve, bookings to confirm, security counts, certificate and domain expiry. The console ranks sites by it and shows a Waiting block for each.
  • Enquiry contents, e-mail addresses, phone numbers and anything about the whistleblowing channel never leave a site.
  • Audited before release; the findings were fixed first.
Full release notes

3.15.4

19 October 2026

Feature release

The bridge to Kaleta 4.0, counts in the admin menu, files from Claude that wait for your approval, and every open finding of the daily security audits closed.

  • The bridge to 4.0: Kaleta runs on today's database tables and on the renamed ones of 4.0, so a site can always go back. 4.0 will come from its own update source, never automatically – you start it after a backup, and Ready for 4.0 stops it if the database cannot take it.
  • Counts in the admin menu: new enquiries, bookings to confirm and reports to acknowledge show next to their menu items.
  • Files from Claude wait for you: a Claude connection that may only prepare drafts can still add images, but they stay private until you publish the page that uses them or approve them in Media.
  • The encryption key can leave the database: connector credentials and whistleblowing reports are encrypted with a key kept in config.php.
  • Instructions for Claude: every change is in the change log, and the dashboard asks you to check it.
  • Stay current: two weeks behind the latest release, the dashboard asks you to update.
  • 3.15.1: a site in Hungarian shows its menu, 404 page, search, form messages and cookie bar in Hungarian, and a menu link to a part of a page (/#products) is no longer highlighted as the current page.
  • 3.15.2–3.15.4: a form can notify several recipients and send a hidden copy (Bcc); news text inside a wrapper built in Site parts keeps its spacing; descriptions for search engines, social previews, structured data, feeds and llms.txt no longer show   literally.
  • All open findings of the daily security audits fixed; audited before release.
Full release notes

3.14.1

14 October 2026

Feature release

The first step towards Kaleta 4.0 – a check that shows what your site needs – and your own e-mail signature for everyone on the team.

  • Ready for 4.0: System status shows what the site needs before the 4.0 update – the database server and its rights, add-ons that use old table names, tags in several languages and redirect addresses to tidy. It only reads; Claude sees the same check.
  • Your own e-mail signature: every employee copies their signature in My account, made from their record in the Team collection – no access to Collections needed.
  • Preparations for 4.0: tags get a language version, redirect addresses a normalised form, and exports in the new format 3 can be read.
  • Spanish blueprints: all 20 industry blueprints in Spanish.
  • Updates: when a newer version came out meanwhile, the screen shows it right away, so the next click installs it.
  • 3.14.1: number fields read as numbers in your site's language – 1,490 instead of 1490, and a price of 4.20 keeps both decimals.
  • Audited before release; the findings were fixed first.
Full release notes

3.13.1

13 October 2026

Feature release

The administration in Spanish, complete ready-made tasks for Claude on every site, and a cookie table that names what Kaleta really sets.

  • Spanish: the administration and the installer in Spanish – choose “Español” in My account; the installer picks it from the browser.
  • Ready-made tasks for Claude: the Claude connection brings 15 complete runbooks that work in every Claude app on every Kaleta site, with nothing to install – moving a site (WordPress with WooCommerce, Polylang or WPML, or any platform), launching a site, adding a language version, weekly care, a release newsletter, online bookings and an EU compliance check. Each works in drafts, never invents facts and asks before anything is published, deleted or sent.
  • Cookie table: the table every site generates names what Kaleta really sets – the session cookie of the administration, the cookie choice kept 6 months, the preview cookie of draft links.
  • 3.13.1: the “Connect an application” screen you see when connecting Claude is styled again – the access choices are cards, not bare radio buttons.
  • Audited before release; the findings were fixed first.
Full release notes

3.12.1

13 October 2026

Feature release

WooCommerce shops move from WordPress, lists sort in your language, and a time-zone change can convert saved dates.

  • Moving a WooCommerce shop: products arrive as a product catalogue with code, price, availability, parameters and picture; product categories get their own pages in every language (Polylang, WPML) and their old addresses redirect. A bilingual shop with 396 products moved in 28 steps with all 847 old addresses accounted for.
  • Languages: Portuguese and Chinese visitor texts, a warning for languages without them, Arabic search that treats ة as ه, and a warning when a font lacks the letters of a language version.
  • Sorting: lists sorted by name follow the alphabet of the site's language; Czech sites sort as before.
  • Time zone: changing it asks whether to convert saved dates or keep their clock time; bookings, opening hours and calendar days never move.
  • Admin: a clearer WordPress import with menu changes shown before publishing, the Form element as one row per field, the logo in the draft look, fields picked by name in the Collection list.
  • Audited before release; the findings were fixed first.
Full release notes

3.11.0

11 October 2026

Feature release

Arabic sites that read right to left, Claude working in drafts by default, and no invented content going live by accident.

  • Arabic: pages, menus, forms, pop-ups, the carousel, the cookie bar and e-mails read right to left; arrows and swipes follow the reading direction, the builder canvas mirrors, Latin names inside Arabic text keep their order, Arabic is searchable and Arabic WordPress sites import. New Arabic pages get a readable Latin address.
  • Drafts by default: a new Claude connection starts at “Drafts only – you publish”; publishing is one click away on the consent screen. Existing connections are unchanged.
  • No invented content: starter sites use clear placeholders such as [Customer’s name] and [number], and the pre-publish check, the Site audit and Claude point out sample content still on a page.
  • Clearer admin: translating a builder page starts from a copy of the original, System status and Backups and updates agree, presets say what happened to their list page, and the page title field is easy to see.
  • Audited before release; the findings were fixed first.
Full release notes

3.10.1

11 October 2026

Fix release

Two fixes from the daily security audit.

  • Translation overview (low): Pages → Translations and the Claude tool translation_status show each person only what their own page, news and collection lists show – authors no longer see titles of hidden pages, other authors' drafts or hidden collection items.
  • Claude connections: records of replaced refresh tokens are kept 30 days instead of up to a year – still enough to notice a stolen token. Existing connections keep working.
Full release notes

3.10.0

11 October 2026

Feature release

Lighter Claude connections, regional language versions and update information that cannot be replayed.

  • Essentials tool set: a new Claude connection can list 36 essential tools – about 49 KB instead of 155 KB – so conversations start faster. Claude finds the rest with find_tools and runs them with the same access, guardrails and undo; anything that removes, sends or reaches outside the site goes through a separate runner and Claude confirms it with you first. Existing connections keep all tools; switch in My account.
  • Regional languages: British English, Austrian German, Brazilian Portuguese and Traditional Chinese, with /pt-br/ addresses and pt-BR for search engines.
  • The clock: System status checks that the site's time zone, PHP and the database agree; changing the time zone says that saved dates keep their clock time.
  • Fresher updates: a site refuses update information that is older or meant for another channel, ignores dates in the future, warns after 60 days without news and can forget what it remembered in Settings → Backups and updates.
  • For developers: English table names ({news}, {pages}) work next to the current ones, undo included.
  • Audited before release; the findings were fixed first.
Full release notes

3.9.2

10 October 2026

Security release

A security fix for media files from a site export, fixes found while moving real sites, and presets in the site language. Sites with automatic security updates (the default) install it on their own.

  • Media from a site export (medium): an imported Kaleta export could place a file such as photo.php.jpg into Media, which some Apache hosts could run. The import refuses such names, media/.htaccess blocks them in any case, and System status names any already there. nginx users copy the new rules from system/nginx.example.conf.
  • Moving sites: SVG logos keep their colours, images and links in formatted text work on item pages, {{obrazek}} shows the item image, the pre-publish check finds lists of missing collections, images never overflow a phone, links stay readable in dark bands, and a list set to a hidden category shows its items.
  • Presets are written in the site language, with about 90 texts in seven languages.
Full release notes

3.9.1

9 October 2026

Fix release

The phone menu fixed, and Support Kaleta leads to Buy Me a Coffee.

  • Phone menu: the rows of the Navigation element's phone menu sit close together again, and every submenu arrow is in the same place.
  • Support Kaleta in the admin footer leads to Buy Me a Coffee.
Full release notes

3.9.0

9 October 2026

Feature release

Migration III: multilingual WordPress sites move with their addresses, mail goes through a mail service in a few clicks, and updates are signed more thoroughly.

  • The same address in every language: a Czech and an English page, news item, category or collection item can share an address (/kontakt and /en/kontakt). Switch it on in Settings → General; it is off by default.
  • Polylang and WPML: a WordPress export arrives as linked language versions, with menus per language and the old /en/… and ?lang= addresses redirected. New languages are added only when you tick it in the import preview.
  • Cookie bar per language: its text and the policy link can differ per language version.
  • Mail services: Settings → Mail fills in Brevo, Mailgun, Amazon SES, Postmark, SendGrid, MailerSend, SMTP2GO, Mailjet or Mandrill and says which DNS records to add.
  • English addresses: Kaleta writes only English query parameters; the Czech ones keep working. Thanks to czepter for the contribution.
  • Safer updates: a second signature also covers the release channel and the PHP version a release needs.
  • A Claude connection stays signed in for a year; changing your password disconnects it.
  • Audited before release; the findings were fixed first.
Full release notes

3.8.0

9 October 2026

Feature release

Reach: choose how often your site updates, a Kaleta for Claude plugin, tools ready for Claude's connector directory, and safe handling of huge or broken HTML.

  • Release channels: Settings → Backups and updates offers Latest (a new minor every week, the default – nothing changes for existing sites) and Stable (security fixes, a new minor about once a month). A site on Stable is never offered an older version.
  • Kaleta for Claude: a plugin with five skills – migrate from WordPress, launch a site, weekly care, set up bookings and a compliance check. Drafts first; nothing is published or deleted without your say. The zip is attached to the release.
  • Ready for the connector directory: every tool for Claude has a readable title and says whether it only reads, changes, deletes or reaches outside the site. Existing Claude connections keep working unchanged, and Claude Code can sign in from any local port.
  • Huge or broken HTML: before Kaleta reads any HTML, SVG or XML – an import, an embed code, a page from an old site – it checks the size and how deeply it is nested, and refuses markup that would make PHP slow or crash, with a clear message.
  • Audited before release; the findings were fixed first.
Full release notes

3.7.0

9 October 2026

Feature release

Migration II: Kaleta runs on PHP 8.3, items come in by the thousand, and collections get categories with pages of their own.

  • PHP 8.3: Kaleta now needs PHP 8.3 or newer (it needed 8.4) and brings its own HTML5 parser there. A site is never offered a release its server cannot run. On PHP 8.3, System status warns about the one JIT mode (opcache.jit = 1235) that has a crash bug in PHP itself.
  • Many items at once: import collection items from CSV or JSON with a preview (up to 5,000 rows, new items hidden), save up to 200 items per call for Claude, and import sites of up to 3,000 addresses with robots.txt respected.
  • Collection categories: categories and subcategories with landing pages, breadcrumbs, paging and translations, designed in the builder; a Previous / next item element; an attachment limit per form.
  • English system addresses: /tasks, /subscription, /form, /consent, /conversion and /status.json – the Czech addresses keep working.
  • Safer by default: every row of a batch or import counts against Claude's hourly change limit, also for parallel calls; no page or item can take a system or category address; fixes from the security review.
Full release notes

3.6.1

9 October 2026

Security release

The SVG upload cleaner checks every attribute. Sites with automatic security updates (the default) installed it on their own.

  • SVG uploads: when two attributes on one element shared a local name (onload and x:onload, href and xlink:href), the cleaner checked only one of them, so an uploaded SVG could keep a live onload handler or a data: link. Every attribute is now checked, on every PHP version.
Full release notes

3.6.0

8 October 2026

Feature release

Migration I: Claude imports WordPress sites, redirects built for real migrations, readable dark mode and menus for touch and keyboard.

  • WordPress import for Claude: an export comes in batches, everything hidden, with menus in the draft look and authors matched by e-mail; pages laid out with page builders are listed.
  • Redirects: pattern rules such as /blog/* → /news/*, 410 Gone, a CSV import with a preview (Excel and the Redirection plugin) and bulk saving for Claude.
  • Header and footer variants by rule: for news, the news list, collection items or pages under a parent.
  • Dark mode: its own readable primary and secondary colours, and a wider readability check.
  • Menus: submenus open by tap and keyboard; the phone menu is an accordion.
  • Builder: a one-line bar for look changes, save and publish the menu, heading levels, a compact top bar and an image field with a thumbnail.
Full release notes

3.5.0

8 October 2026

Feature release

The first hour: what a new owner meets right after installing – no empty pages on the site, Connect Claude first, Bookings that are ready to take bookings.

  • No empty pages: a new page with nothing to show stays hidden and out of the menu until its content is published.
  • Connect Claude first: the dashboard starts with the address, a Copy button, three steps and an HTTPS warning until Claude has connected.
  • Bookings: a three-step set-up, starter hours, a warning when there is no free time in the next 14 days, and hours per service for one person (contributed by Christian).
  • Site appearance: the preview shows the saved draft look; changes read as names and swatches.
  • Cookie bar: compact on phones, early in the keyboard order and never covering the focused element.
  • Accessibility and speed: the toolbar opens above its button, valid markup, sized SVG logos, the first image loads first.
  • Navigation: a long menu can go behind the menu button on tablets too.
  • English sites without Czech leftovers, and steadier tests and CI.
Full release notes

3.4.2

8 October 2026

Security release

Three fixes from an audit of the 3.4 community contributions. Sites with automatic security updates (the default) installed it on their own.

  • Open redirect (medium): the preferred URL form setting could send a visitor to another website through an address starting with two slashes. Such paths are no longer redirected, in every URL form.
  • Claude's guardrail (low): confirming a booking request and proposing other times e-mail the customer, so they now stop when deleting and discarding is switched off for Claude.
  • Proposed times: choosing a time twice no longer sends a second confirmation.
Full release notes

3.4.1

8 October 2026

Fix release

Adding elements from the builder's Add panel works again.

  • Builder: clicking or dragging an element (Heading, Text, Image, Button, Form, Booking…) from the Add panel inserted nothing and left a draft with warnings. Ready-made sections and Claude were not affected.
  • Builder: dragging an element into another section works again.
  • The browser test now inserts elements by click and by drag.
Full release notes

3.4.0

8 October 2026

Feature release

The first release with community contributions – thank you, Christian (@czepter)!

  • News at an address you choose (/blog, /aktuality…), with redirects from the old ones.
  • Preferred URL form: without a trailing slash, with one, or .html.
  • German texts with du instead of Sie, separately for the administration and the website.
  • Bookings that need the provider's confirmation – accept, decline or propose other times.
  • Claude's results and errors in English on every site.
Full release notes

3.3.4

8 October 2026

Security

A safer Claude sign-in (OAuth) – connected Claude apps keep working, sites update by themselves.

  • The approval screen leads with where the app returns, warns when it is not Claude's and pre-selects Drafts only for unknown apps.
  • An approval applies only to the request you saw.
  • Sign-in codes and refresh tokens work once; a later reuse disconnects the app.
  • Optional setting: only Claude's own apps may connect. Unused registrations are removed after a day.
Full release notes

3.3.3

8 October 2026

Security

Security fixes from our audit of 7 October 2026 – sites update by themselves.

  • Facts used as links are filled tag by tag and checked; a text fact cannot start with a script scheme.
  • Every request to another server goes through one check that allows only public addresses, including encoded and international host names.
  • Sign-in gives one answer for locked, blocked and wrong; sessions end after 8 idle or 24 total hours; e-mail and passkey changes need the password.
  • No third-party CAPTCHA on the whistleblowing page; reports in a flood are accepted and marked.
  • Imported settings are validated, and content imported before 3.3.2 is checked again.
Full release notes

3.3.2

6 October 2026

Security

Security fixes from our audit of 6 October 2026 – sites update by themselves.

  • Imported content (WordPress, Ghost, Blogger, Joomla, Drupal, Webflow, any website) can no longer carry script; imported pages never become Custom HTML.
  • Editors can no longer take over the attributes the site's own scripts read; facts used as links are checked as links.
  • Claude can no longer set Google Tag Manager or Matomo; whistleblowing reports are rate-limited; erased personal data leaves Claude's undo history.
  • Hardening of guardrails, page passwords, the extensions folder, the fleet console, add-on tools, updates and admin tokens.
Full release notes

3.3.1

5 October 2026

Patch

A Choose this plan button on each pricing plan card.

  • Each card of the pricing plans list has a Choose this plan button to the plan's link (sign-up, trial or contact); a plan without a link shows none.
Full release notes

3.3.0

5 October 2026

Feature release

Twenty blueprints for more kinds of business, four new ready-made collections, and a blueprint of your own with Claude.

  • 14 new blueprints: software / SaaS company, agency, IT services, law firm, accountant or consultant, real estate agency, garage, photographer, restaurant or café, hotel or guesthouse, shop, beauty or wellness salon, gym or studio, language school, non-profit.
  • New ready-made collections: pricing plans, a food and drink menu, rooms and accommodation, property listings.
  • For any other business, Claude asks, drafts a blueprint and applies it only when you agree (prompt draft_blueprint).
  • The Blueprints screen groups them by kind of business, has a search and asks before applying.
Full release notes

3.2.3

4 October 2026

Patch

Switching Bookings off no longer strands people who already booked.

  • With Bookings switched off, the cancel link and the .ics calendar file in booking e-mails keep working.
  • Customers can still cancel an existing appointment; new bookings and the free times stay off with the feature.
Full release notes

3.2.2

4 October 2026

Patch

The booking calendar no longer sticks on “Loading…”.

  • Picking a day in the booking calendar no longer leaves the month on “Loading…” – the day is marked and its free times load.
  • Late answers for another day or service are ignored; picking another day clears the chosen time.
  • A browser test now books through the calendar.
Full release notes

3.2.1

4 October 2026

Patch

Fixes found while retaking the screenshots on 3.2.

  • Multi-step forms show one step at a time again; the Booking element no longer shows its fallback button and “Loading…” line.
  • Radio buttons in forms and bookings no longer stretch to the full width.
  • Dates in words in the English and German admin use English and German month names.
  • Builder: Select parent element and Esc select the parent again.
  • The last messages that said Extensions or AI assistant now say Features and Writing assistant.
Full release notes

3.2

4 October 2026

Minor release

One admin, grouped by job: hubs for Business details and Claude, drafts-only Claude does more, and everything waiting for you on the dashboard.

  • The menu by job – Content, Company, Customers, Appearance, Claude, Site care, Administration – with hubs: Business details (open to editors), Claude settings, Features with Add-ons.
  • Drafts-only Claude saves hidden collection items, proposed opening hours, triage suggestions and notes.
  • Waiting for you on the dashboard and for Claude (list_pending_review).
  • Bookings and Whistleblowing are features, off on new installs and kept on where used; one switch for statistics.
  • Clearer names: Ask Claude, Integrations, Features, Blueprints, Writing assistant.
Full release notes

3.1.1

4 October 2026

Patch

Fixes after a UI/UX and product review of the administration.

  • Claude's routines for requests and scheduled runs only use what a drafts-only connection may do; anything else becomes a proposal in the note.
  • Ask Claude knows whether Claude is connected; “Connect Claude” is the first step.
  • The Client and Enquiries only roles can ask Claude; Whistleblowing is shown only to its readers.
  • Confirmations name the action and are red when dangerous; own icons for seven sections; a skip link.
  • Layout and translation fixes: Scheduled runs, Site appearance, Statistics, German dates.
Full release notes

3.1

3 October 2026

Minor release

Ask Claude from the dashboard: write what you need, and it becomes a request Claude works through as drafts.

  • Ask Claude: a box on the dashboard whose text, with attachments, becomes a request for Claude; the title comes from its first sentence.
  • Example requests for the sections each person may open – click one, change it, send it.
  • The person's latest requests with their status, and whether a scheduled run picks requests up.
  • Copy for the Claude app copies the text with the site's address and opens Claude.
  • Not a chat inside the admin: the site still never runs Claude and holds no Anthropic key.
Full release notes

3.0

3 October 2026

Major release

Opening up: add-ons from other developers, online booking of appointments and importers from five more systems – every 2.x site updates as usual.

  • Add-ons and the extension API: code from other developers in extensions/, hooked in through a versioned contract (events, filters, tokens, admin pages, tools for Claude, jobs); switched on only by an administrator who trusts it, switched off by itself when it fails.
  • Online booking: services, people with their hours and days off, free times without double booking, confirmations, cancel links and reminders – no payments.
  • Importers: Ghost, Blogger, Joomla, Drupal and Webflow on a common base with a preview, a mapping, images and redirects.
  • Administration tabs are pills at every width.
Full release notes

2.17

3 October 2026

Feature release

Undo a whole Claude session, Claude on a schedule, and the admin on phones.

  • Undo a whole Claude session: Change log → Claude sessions puts back everything one session changed; rows people changed since are left alone and listed.
  • Scheduled runs: reviews, reports, triage or your own task on a schedule – a Claude routine asks what is due, works as drafts and reports back; missed runs raise an alert.
  • The admin on phones: tabs on one scrolling row, a one-row header, the menu as a two-column sheet.
Full release notes

2.16

3 October 2026

Feature release

Shared across your sites: design kept in one place and offered to the others as drafts, never pushed live.

  • Shared design kit: the fleet console publishes versions of its design system, classes, components and saved sections.
  • Drafts only: member sites that opt in receive each version as a draft look, component drafts and library sections – you review and publish.
  • Signed and verified: sites fetch the kit themselves, check the console's signature and the hash, and refuse anything tampered; no custom code travels.
  • German admin: the Requests section is now Aufträge.
Full release notes

2.15

3 October 2026

Feature release

Claude as the site's operator: staff ask, Claude does it as drafts, a person publishes – within limits you set.

  • Requests for Claude: staff write requests with attachments in the admin; Claude does them as drafts and answers with notes and links; the requester gets an e-mail when it is done.
  • Comments on drafts: a shared preview can take comments on elements – no account, the link is the permission.
  • Every change says why: write tools take a reason, kept in the change log.
  • Guardrails for Claude: an hourly change limit, protected pages, no deleting – for every connection.
  • Agent notebook: decisions, wording rules, credits and history, in the admin and over MCP.
Full release notes

2.14

3 October 2026

Feature release

Clean and compliant without effort: the upkeep and EU duties that would otherwise land on you for every site.

  • Links that look after themselves: a changed address rewrites the site's own links; 404s get a suggested target and, opt-in, a redirect by themselves; orphan pages and broken links across the site for Claude to fix as drafts.
  • Content hygiene: media clean-up (unused, duplicate, oversized; alt texts in bulk), a content check in the editor, a translation overview and bulk editing in lists.
  • EU duties as templates: a cookie scanner, anonymising enquiries, a record of processing, an accessibility statement and an accessibility toolbar for visitors.
  • Personal data requests: find, export or erase everything about one e-mail address.
  • Whistleblowing channel: encrypted reports with a case number and code, follow-up, appointed readers and the legal deadlines – never over MCP.
  • Password-protected pages – never cached, indexed or searchable.
Full release notes

2.13

3 October 2026

Feature release

Connected to Google and the CRM: data stops being copied by hand.

  • Connections: Google, Bing Webmaster Tools, HubSpot, Pipedrive and Raynet – encrypted credentials, OAuth with PKCE, a delivery queue with retries and a log without content; Claude sees only the status.
  • Google Business Profile: opening hours and exceptions go out, news can become posts, reviews and the rating come back – with a Google reviews element and two facts.
  • Search data in Statistics: Search Console and Bing queries, pages and sitemap counts, daily, also for Claude and in the monthly report.
  • Enquiries to a Google Sheet and to the CRM (HubSpot, Pipedrive, Raynet), per form; job applications only on request.
  • Social post drafts for every published news item – edited, copied and posted by a person, never by the site.
Full release notes

2.12

3 October 2026

Feature release

Leads and forms: turning visits into enquiries, and enquiries into answers.

  • Multi-step forms and quote calculators: steps, fields shown by another answer, and a price estimate the visitor sees live and the server computes again.
  • Enquiry triage: a kind, a priority and a drafted reply for every enquiry – by a rule, by Claude or, when switched on, by the AI assistant; a person's sorting wins and nothing is sent by itself.
  • Forms that know where they are (the service, product or page an enquiry came from) and a thank-you with next steps – when you reply, counted in your opening hours, and who.
  • Calls, e-mail and WhatsApp clicks counted as leads per page, cookie-free.
  • Testimonial requests with consent: a personal link; the answer arrives as a hidden draft reference.
  • New elements: pricing table, before/after slider, hotspots, timeline.
  • Automatic share images from the title and the brand colours.
Full release notes

2.11

2 October 2026

Feature release

Content types that run themselves: ready-made collections arrive in one click and keep themselves current – events move to their next date, job openings close, notices go to the archive.

  • Ready-made collections: team, branches, services, products, references, price list, events, FAQ, job openings, machines, courses, documents and an official notice board – each with its fields, item pages, structured data and a page that lists it. New field types: date and time, file, location, choice, parameters and variants.
  • Events and courses: a repeating event moves to its next date by itself, past events go to an archive, iCal, and registration that closes when it is full or over.
  • Product catalogue without a checkout: parameters to compare side by side, variants, datasheets and an enquiry basket the server checks against the products.
  • Job openings that close themselves: JobPosting with the closing date, an application form with a CV, applications deleted after a set time.
  • Document library: versions kept, a stable address of the latest file, download counts, a file sent by e-mail after a sign-up.
  • Branches and a store locator with search, the nearest branch and a map that loads only after a click.
  • Official notice board: posting and takedown dates, a permanent archive and an append-only log.
  • Screen mode for a reception or showroom TV.
  • Industry blueprints: clinic, manufacturer, craftsman, driving school, farm and municipality – the collections, questions, checks and Claude instructions such a business needs.
Full release notes

2.10

2 October 2026

Feature release

The site knows the business: facts, opening hours and people become data, so a change made once is right everywhere – and the site shows where a sentence still says the old thing.

  • Business facts: write a fact once and use it everywhere as {{fact.key}} – in texts, buttons and links; computed facts like {{years_since:2004}} never go stale; facts reach the structured data and llms.txt.
  • Claims inventory: after a change, every sentence that still states the old value; sentences with numbers that are not facts yet.
  • Opening hours with exceptions: holidays and shorter days, open now, a notice bar ahead of an exception and a printable door sign.
  • People and links between collections: a person linked to a branch, a ready-made team, the page of someone who left leads to the team page, e-mail signatures from people records.
  • True until and review by on pages, news, items and pop-ups.
  • Collection list filters without reloading the page; alert e-mails include the warnings that need you.
  • 2.10.1 and 2.10.2: tokens inside code blocks stay as written; no false “update source is not reachable” right after an update.
Full release notes

2.9

2 October 2026

Feature release

Many sites as one: a fleet console that shows all your Kaleta sites on one screen, sorted by what needs attention, with staged updates – and a monthly report e-mail for each site's owner.

  • Fleet console: switch on the extension on one Kaleta site; your other sites pair with it and send a signed report every hour. Sites that need attention come first – down, silent, errors, a failed update, failing jobs, no recent backup.
  • Uptime: the console checks every site every 5 minutes; a site that is down or stops reporting reaches you by the alert e-mail.
  • Staged updates: test sites get a new version first, the rest after 48 hours without problems; security releases at once.
  • The console cannot get into the sites: each site signs its reports, only the site calls the console, and the console holds no password or token for any site.
  • Monthly report by e-mail for each site's owner, with your agency's name and logo.
  • Claude reads the fleet on the console (list_sites, get_site).
  • Fixed: automatic security updates now install themselves; alert e-mails are in the site's language.
Full release notes

2.8

2 October 2026

Feature release

A site that runs itself: background jobs you can see, an e-mail when something breaks, updates that undo themselves, a firewall, and daily checks of the domain, mail records, accounts and real-user speed.

  • Background jobs in System status – when each ran, worked and failed; cron or visits run them, and the installer shows the cron line.
  • Alert e-mails for failed backups, updates, mail and webhooks, failing jobs and 404 spikes – at most one an hour. Claude reads the same events (list_events, get_health).
  • Updates that undo themselves: after an update the site checks itself, and a server error puts the previous files back.
  • Firewall for the public site and the Claude connection: blocked addresses, networks and countries, a request limit, and a day's block for probing other systems.
  • Domain and mail: SPF, DMARC and DKIM with the record to add, certificate and domain expiry – checked daily.
  • Accounts: unused accounts and Claude connections flagged, and suspended automatically if you switch it on.
  • Speed: real-user Core Web Vitals in Statistics without cookies, an audit of pages that got slower, and preloaded custom fonts.
Full release notes

2.7

2 October 2026

Feature release

Move existing sites without losing anything: a check of every old address before going live, old form entries, SEO plugin data and custom post types from WordPress, and the builder features page-builder sites rely on.

  • Check the move before going live: every address of the old site is looked up here – missing pages, pages not published yet, redirect chains and lost descriptions, forms or images – followed by the checks of the whole site. Also for Claude (migration_report).
  • Moving with Claude: the migrate_site prompt rebuilds a site as drafts, and import_enquiries brings old form entries into Enquiries.
  • WordPress import: titles, descriptions and noindex from SmartCrawl, Yoast SEO and Rank Math; custom post types and fields (CPT UI, ACF, Secure Custom Fields) as collections that keep their addresses.
  • Builder: a transparent header that turns solid or smaller on scroll, icons in menus, mega menu columns with descriptions, display conditions by language and URL parameter, copy and paste between Kaleta sites, and more scroll animations, parallax and hover effects.
Full release notes

2.6

1 October 2026

Feature release

Bring a site over from any platform, try the admin in a public demo, measure campaigns through Google Tag Manager – plus security fixes.

  • Import from any website: Wix, Webnode, Jimdo, Squarespace, Joomla, Drupal or WordPress without an export. Pages become hidden builder pages with their images, blog posts become news, old addresses redirect. Also for Claude (import_website).
  • Public demo mode with a shared sign-in and an hourly reset.
  • Google Tag Manager with consent mode and conversion events (generate_lead, sign_up, popup_conversion, calls, e-mails, downloads), plus a container template.
  • Optional CAPTCHA for forms: hCaptcha, reCAPTCHA v3 or Cloudflare Turnstile, on top of the built-in protection.
  • Installed like WordPress only: the Docker image, the Coolify template and installation from the command line are gone.
  • Security: a stricter filter for Custom HTML, drafts-only Claude connections can no longer write HTML that runs, site code is set only in the administration.
Full release notes

2.5

29 September 2026

Feature release

A short first installation wherever it happens: shared hosting, Docker, Coolify or a script – and straight to Claude.

  • The installer in German, next to English and Czech.
  • No database typing on platforms: Docker, Coolify and similar platforms set the database (KALETA_DB_*), the installer asks only for the site and the administrator.
  • Installation without the browser: php install.php --help for hosting panels and scripts; the Docker image installs the site on its first start.
  • Coolify template with generated credentials.
  • Straight to Claude: the last installer screen shows the site's Claude address and a first prompt to try.
Full release notes

2.4.1

29 September 2026

Fix release

Four more screens get their own guide article, and admin texts are corrected.

  • Guide: new articles on the Media library, Statistics, Privacy and cookies and Sending e-mail, opened by How to use this on those screens.
  • When a test e-mail fails, the reason is in the admin language instead of always in Czech.
  • Corrected hints: the Media bulk delete skips files still in use, the agency logo path, Google Analytics consent and the newsletter cron warning.
Full release notes

2.4

29 September 2026

Feature release

For agencies and freelancers who build sites for clients – and a guide link on every admin screen.

  • The admin in German: every screen and the builder; each user picks Czech, English or German in My account.
  • Handing a site to a client: ready-made roles (Client, Writer, Enquiries only), your name, contact and logo on the sign-in screen and at the foot of the admin, and a Before handing over check in the site audit – also for Claude (site_audit, kind: handover).
  • A guide on every screen: How to use this opens the article about that part of the admin, in the admin language.
  • Fixes: saving Settings → General no longer removes the language versions, the remove boxes of stored passwords and keys work again, and menu links on language versions no longer get the language twice.
Full release notes

2.3.0

29 September 2026

Feature release

What brings us enquiries? Statistics now answer it – for you and for Claude.

  • Statistics that show leads: pages, campaigns, first pages and sites that bring enquiries and sign-ups, with conversion rates; devices and pop-up conversions. Claude reads the same report with get_stats.
  • Where each lead came from: the first page of the visit, its campaign and the referring site go with every enquiry – only with the visitor's consent to marketing, and only when you turn it on.
  • Forms: several ticked options and a hidden value, e.g. the product the form is about.
  • Embed: booking calendars, forms and players from Calendly, Google, Microsoft Forms, Tally, Typeform, Airtable, Spotify and SoundCloud – loaded after a click.
  • Accessibility in the site audit for the European Accessibility Act, and the cookie bar respects Global Privacy Control.
  • Code in the head of one page for administrators.
Full release notes

2.2.0

29 September 2026

Feature release

Claude becomes the default way to run a site – and you decide what it may do.

  • What a connection may do: everything your account may, drafts only, or read only – chosen when you connect Claude or create a token. A limited connection sees only the tools it may use and never publishes. Existing connections keep full access.
  • Who changed what: the change log names the Claude connection of every change and filters people's and Claude's changes; Claude reads it with list_changes.
  • Instructions for Claude: brand voice and house rules that every connection gets, plus ready-made tasks – build a page, audit and fix, translate, write news, a weekly review.
  • Claude from the first minute: on in new installations, Connect Claude in First steps, OAuth for sites in a subfolder.
  • More settings over the connection: extensions, languages, the cookie bar, SEO switches, analytics codes and head code.
  • Fixes: publishing a build over the connection needs the publishing permission; data migrations can no longer be skipped by updating across several releases.
Full release notes

2.1.0

29 September 2026

Feature release

A published promise of what stays compatible, tests that hold Kaleta to it, and fast pages that stay fast.

  • Release and support policy: about one minor release a month, updates from any version in one step, and nothing removed without at least two minor releases and six months of notice.
  • Recorded contracts: the 74 tools of the Claude connection, 97 design tokens and 36 builder elements are recorded; the tests fail if any of them is removed or changed.
  • English design token names such as --ka-color-primary and --ka-space-m, which follow a token overridden in a section.
  • An output budget: every page of every starter site must keep a top Lighthouse score – today 99–100. Pages without their own description now get one from their first longer paragraph, and images download at the size they are shown.
  • security.txt: a security contact in Settings publishes /.well-known/security.txt.
  • Docker: an image and a compose.yaml with MariaDB.
Full release notes

2.0.0

29 September 2026

Major release

One clear system: the compatibility layers of the 1.x releases are gone. Your content, your look and your Claude connection carry over as they are.

  • One pop-up system: per-page pop-up elements become site pop-ups during the update – same content, trigger and frequency, shown where they were, opened by the same buttons.
  • The public API is removed – use the JSON Feed, the Claude connection, webhooks and the site export.
  • Old admin addresses, class names and helpers of 1.3 are removed, and settings answer only to their current names; the Claude connection still accepts the old ones.
  • Updates straight to 2.0 work from every earlier release.
Full release notes

1.9.0

28 September 2026

Feature release

Findable: collection items become full landing pages, a site audit shows what to fix, and search engines get structured data.

  • Collection items as full pages: their own title, description and sharing image for search engines, noindex, scheduled publishing and a version history.
  • Structured data per collection: items are a service, person, product, event or question – item pages carry schema.org data.
  • Site audit: broken links anywhere on the site, missing descriptions, duplicate titles, menu problems, builder checks and frequent 404s, each with a link to fix it – also for Claude (site_audit).
  • A 404 warning that helps: it explains what to do, cleans itself and can be dismissed.
  • Privacy policy template that follows the enabled features, and Before Kaleta 2.0 in System status.
Full release notes

1.8.0

28 September 2026

Feature release

Own and move your site: move a whole Kaleta site to a new host, back up media off-site, and send signed webhooks.

  • Move a whole site: choose Start from an export in the installer, then import the export of your old site in Import and export. Pages, news, collections, components, the look and the media all come along. Accounts and secrets never travel.
  • Backups include media: off-site copies over FTPS or S3 also copy media/, incrementally. A database backup runs every day something changed. A restore guide is in the admin.
  • Signed webhooks: an HMAC signature, a delivery log, automatic retries and Send again in Settings → Webhooks.
  • Page export carries its shared classes and components.
  • The public REST API is deprecated and will be removed in 2.0. Use the JSON Feed, the Claude connection, webhooks and the site export instead.
Full release notes

1.7.0

28 September 2026

Feature release

Safe redesigns: look changes wait in a draft you preview on the whole site, then publish in one step.

  • The draft look: changes of the design system, shared classes and menus wait for Publish the look – from the admin and from Claude alike.
  • Preview the whole site with the draft look and the drafts of all pages, through a signed link – also for a colleague.
  • Earlier looks: the last 20 are kept and one click brings one back.
  • Templates of site parts: four headers, four footers and wrappers – clean skeletons in the look of your design system.
Full release notes

1.6.0

28 September 2026

Feature release

Claude can do most of what the admin does – including cleaning up – and Kaleta is themeless.

  • Trash and restore with Claude: pages, news items and collection items go to the trash and come back for 30 days. Collection items get a trash in the admin too.
  • Claude deletes and edits collections, categories, pop-ups, components, saved sections, media and enquiries – only when you explicitly ask.
  • Components and saved sections over the Claude connection.
  • Enquiries: every read by Claude is written to the change log.
  • English builder vocabulary for Claude; existing connections keep working.
  • Themeless: the look comes only from Site appearance, shared classes, components and site parts.
Full release notes

1.5.0

28 September 2026

Feature release

Send your latest news to subscribers straight from the site, in an e-mail that looks like your website.

  • Newsletters: one template styled by your design system – colours, fonts, corner radius and logo – with a subject, an introduction, the latest or chosen news items, a button and your company details. No e-mail builder to learn.
  • Draft, preview and a test e-mail to yourself, then send now or at a set time; sending needs the publishing permission.
  • Built for deliverability: only through an SMTP server, in batches while cron runs, within your hourly limit. Health shows whether cron runs.
  • Private by default: one-click unsubscribe in every e-mail, no open tracking, and the recipient list is kept only while sending.
  • Claude drafts newsletters and sends tests, and sends to subscribers only when you ask.
Full release notes

1.4.1

28 September 2026

Feature release

The move of the code base to English is complete. Your site, its content and its Claude connection do not change.

  • Settings in English: settings keys move to their English names on their own; custom layouts and the Claude connection can still use the old names until 2.0.
  • Czech as a dictionary: source texts of the admin, site and installer are English, and Czech is translated like any other language – what you see stays the same.
  • Code comments are in English too.
  • Skip releases safely: sites on 1.0–1.3 can update straight to 1.4.1.
Full release notes

1.4.0

28 September 2026

Feature release

The code base is now in English, so anyone can read it and contribute. Your site, its content and its Claude connection do not change.

  • Code in English: classes, functions, variables, admin templates and scripts; the terms are in the glossary in the repository.
  • New admin addresses such as admin.php?module=pages&action=edit – bookmarks and links in older e-mails redirect automatically.
  • Permissions of users and roles move to the new module names on their own.
  • Custom layouts written for 1.3 keep working: the old class names and template helpers stay until 2.0.
  • Safer updates: every change is now tested as an update from older releases and walked through in a real browser.
Full release notes

1.3.7

27 September 2026

Feature release

A language switcher element for the footer, and the first visit in the language of the visitor's browser.

  • Language switcher element: a dropdown with the language name that opens upwards in the footer, or a row of codes; the Navigation element can hide its own switcher.
  • Browser language: on the first visit, visitors go to the version in their browser's language when the page has a translation; their choice is remembered without cookies, and search engine robots are never redirected.
  • Admin: language filter in the Pages, Categories and collection item lists.
Full release notes

1.3.6

27 September 2026

Security release

Two security fixes from a code review, and admin fixes. Sites with automatic security updates (the default) install it on their own.

  • Collection and component values inside a Custom HTML element are escaped (GHSA-fff6-pmg2-wx3p, medium).
  • Claude connection tools check the user's admin sections (GHSA-9v67-9m78-h67v, low).
  • Admin: Czech as the admin language on any site, real news addresses, pop-up settings with an on/off switch and counters, clearer wording and spacing.
Full release notes

1.3.5

26 September 2026

Fix release

Small fixes found while translating this site into Czech and German.

  • Language versions: the template header loads the site logo on language versions.
  • Claude: reading a site part that does not exist yet creates nothing; the part is created on the first write.
  • Claude: the page list shows addresses of other language versions with their prefix.
Full release notes

1.3.4

26 September 2026

Fix release

A language version is offered only once its home page is published, and safer writes over the Claude connection.

  • Language versions: a language without a published home page stays out of the language switcher, hreflang and the sitemap while you prepare the translation.
  • Claude: true/false sent as text is read correctly, so hidden pages and items stay hidden.
  • Claude: values for fields a collection does not have are reported instead of dropped silently.
Full release notes

1.3.3

26 September 2026

Feature release

Translating a site with Claude: a translation starts as a copy of the original page.

  • A translation starts as a copy: a page in another language can start from the original page's build, so the layout stays and only texts and links change.
  • Just the texts: Claude reads only the texts and links to translate, without structure and styles.
  • Header and footer of a new language start as a copy of the default language's ones.
Full release notes

1.3.2

26 September 2026

Feature release

Collections for multilingual sites: translated items keep their address and each language has its own detail template.

  • Translated items keep the address of the original – /compare/wordpress and /de/compare/wordpress – and the language switcher and hreflang link them.
  • A detail template per language, in the admin or with Claude; it starts as a copy of the default one, which items use until it is published.
  • Breadcrumbs on item pages show the section page, and in another language its translation.
  • Claude: build_from_html accepts collection, popup and variant.
  • Builder: the canvas no longer shows the site's pop-ups.
Full release notes

1.3.1

26 September 2026

Fix release

The mobile menu scrolls when it is taller than the screen, and automatic pop-ups wait until the menu is closed.

  • Mobile menu: a long menu with groups can be scrolled on phones. The menu panel fits the screen and the page behind it stays still.
  • Pop-ups: an automatic pop-up no longer closes the mobile menu while a visitor is using it; it opens once the menu is closed.
Full release notes

1.3.0

26 September 2026

Feature release

Pop-ups built in the builder, subscribers sent to your mailing service, and Site appearance in tabs.

  • Pop-ups: window, slide-in panel, top or bottom bar or full screen, built in the builder from six templates; triggers by time, scrolling, exit intent, idle time or page count; rules by page, collection, news, language, period, device, campaign and referrer; cookie-free counts of views, closes and conversions.
  • Newsletter services: confirmed subscribers go to Brevo, MailerLite, Mailchimp, Ecomail, SmartEmailing or a webhook, and unsubscribed ones are removed – in the background, with retries.
  • Site appearance: tabs for style, colours, dark mode, fonts and sizes, shapes, logo and export; presets are now styles.
  • Claude: list_popups, save_popup and the popup parameter for all build tools.
Full release notes

1.2.4

25 September 2026

Fix release

Tidy submenus, a centred mega menu panel and Escape on every page with a submenu.

  • Submenus have their own spacing and padding instead of inheriting the main menu’s.
  • Mega menu: the panel is centred under the navigation and no longer runs off the page.
  • Escape closes submenus on every page with a submenu.
Full release notes

1.2.3

25 September 2026

Fix release

Safer menu changes over Claude, unknown parameters reported, and Escape closes submenus.

  • Claude (MCP): saving the menu no longer falls back to the automatic menu when the items are missing or cannot be read – it reports an error instead.
  • Claude (MCP): unknown or misspelt parameters are listed in the tool result instead of being ignored.
  • Navigation: Escape closes a submenu opened by keyboard focus, a click or mouse hover and returns focus to its menu item.
  • Project: a contributing guide on GitHub.
Full release notes

1.2.2

25 September 2026

Fix release

Sites built with Claude: item values and page builds sent as JSON text are accepted instead of being dropped.

  • Claude (MCP): tool arguments that are objects or arrays are accepted when a client sends them as JSON text. Before, collection items were saved with empty fields and builds were refused.
  • Claude (MCP): saving a collection item reports an error when its values cannot be read.
  • Breadcrumbs: only the current page is marked as current.
Full release notes

1.2.1

25 September 2026

Feature release

Related content on item pages.

  • A Collection list on an item page can filter by the item’s own field ({{group}}) and leave the item out – related comparisons, services or team members without picking them by hand.
Full release notes

1.2

25 September 2026

Feature release

Languages for the EU and beyond.

  • Around forty site languages; visitor texts in German, French, Spanish, Italian, Polish and Slovak besides Czech and English, English fallback for the rest.
  • System addresses in the site language – /news, /search – with permanent redirects from the old form.
  • Site language chosen in the installer; imprint template and company fields.
  • New language switcher on the design system, and a light / dark / device switcher for visitors.
  • Admin: distinct menu icons, chart tooltips, GitHub Sponsors link.
Full release notes

1.1

25 September 2026

Feature release

The Claude connection speaks English, and custom PHP themes are retired.

  • Claude connection in English: tool names, parameters, results, messages and instructions – create_page, build_from_html, save_build… Existing connections keep working: the previous names remain as hidden aliases.
  • Custom PHP themes retired: the look is built with Site appearance, shared classes and the builder. An existing custom theme keeps working.
  • Updating a collection item over the connection no longer needs its name.
Full release notes

1.0.11

25 September 2026

Feature release

Share drafts with clients, and Claude gets closer to everything the admin can do.

  • Share preview: a link to the draft for a colleague or client, straight from the builder – no sign-in, valid 1–7 days, not indexed.
  • Campaigns on enquiries: the utm parameters of the page with the form, in the admin, email, CSV and webhook – without cookies.
  • Heading anchors: every section heading in text can be linked.
  • Claude: gets the check before publishing with each save, and can manage header and footer variants, bring back older versions, set parent pages, language versions and scheduled publishing, and read enquiries.
Full release notes

1.0.10

25 September 2026

Fix release

Sharp tall images.

  • Very tall images – full-page screenshots, infographics – are scaled by their width, on the server and in the browser before upload.
  • Responsive image variants list the real width of every file, so browsers no longer pick a file that is too small. This also fixes images already on your site.
Full release notes

1.0.9

25 September 2026

Fix release

Safe database updates. Recommended for every site, especially sites that tried to update to 1.0.8.

  • The 1.0.8 database change is now portable across MySQL and MariaDB; sites that could not finish the 1.0.8 update complete it automatically.
  • The updater applies database changes right after installing the files and rolls the files back if a change fails.
  • A failed database change no longer takes the site down: it is logged and shown in the admin.
  • The error page follows the visitor’s language (English, or Czech for Czech and Slovak browsers).
  • Every release is tested by upgrading a 1.0.0 database on MySQL 8.4, MariaDB 10.6 and MariaDB 11.4.
Full release notes

1.0.8

25 September 2026

Feature release

English everywhere, a friendlier admin and collections over the Claude connection. Update to 1.0.9 instead – its database change fixes a problem in 1.0.8.

  • The installer, admin, builder and all three starter sites are fully in English on English installations.
  • The privacy policy created at installation is in the site language and stays hidden until you publish it.
  • In-app dialogs, a QR code for two-factor sign-in, phone photos scaled down before upload, headings and landmarks on every admin screen.
  • A separate public company email; cookie consent records are deleted after 36 months by default.
  • Claude can edit, preview and publish collection item templates and change collection fields.
  • Site search ranks results; llms.txt lists collection items.
Full release notes

1.0.7

25 September 2026

Security release

Two security fixes found by an internal audit. Sites with automatic security updates (the default) installed it on their own.

  • The Claude connection can change custom template files only as CSS (GHSA-whpr-j588-m66j, high).
  • Category and tag descriptions are sanitised when saved and when displayed (GHSA-86xq-qh35-3v85, medium).
Full release notes

1.0.6

25 September 2026

Feature release

Options for sites built to a design system.

  • New built-in icons: layout, tokens, chat, article, layers, image and send.
  • Navigation gap, link padding, hover colour and the phone menu button border can be set from a class; the underline highlight marks only the current page.
  • Button icon size from a class.
  • Long code blocks scroll inside the block on phones.
Full release notes

1.0.5

25 September 2026

Feature release

Button icons, navigation highlights and a clear focus ring.

  • Buttons can carry an icon left or right of the text; the icon set includes GitHub.
  • Navigation can underline the current item in the secondary colour.
  • A clear keyboard focus ring on buttons, menus and links.
  • The page gutter on narrow screens is a token.
Full release notes

1.0.4

25 September 2026

Feature release

A fully English admin and highlighted words in headings.

  • The English admin has no leftover Czech texts, and a test keeps it that way.
  • Default visitor texts (maintenance notice, cookie bar) follow the site language.
  • Highlight a word or a full stop in headings and text in the secondary colour.
  • Claude can set the site logo and favicon; shared classes merge hover and breakpoint rules.
Full release notes

1.0.3

25 September 2026

Feature release

Fonts and attachments from a URL.

  • Claude can upload fonts (WOFF2) and attachments from a URL, not just images – with the same protection against requests to internal addresses.
Full release notes

1.0.2

25 September 2026

Feature release

Build a whole site with Claude, without opening the admin.

  • Element-level edits by id, signed draft preview links, uploads of images, SVG and fonts to Media.
  • Shared classes, site settings, redirects and the page trash over the Claude connection.
  • A leaner builder schema and compact MCP output.
  • Fixed grids and breakpoints when converting HTML to a build.
Full release notes

1.0.1

24 September 2026

Fix release

Connecting Claude works in every browser.

  • Fixed connecting the Claude connector and Claude Code: the browser blocked the return to the app after granting access.
Full release notes

Hear about new releases.

On GitHub choose Watch → Custom → Releases to get an email for every new version. Your own sites show available updates in the admin.

Watch on GitHubDownload the latest