Changelog
v1.5.1
Released August 9th, 2026
Latest Version
- Hardening: origins now require HTTP(S), globally routable IP forms, and preflight DNS results with no private, reserved, documentation, benchmark, or transition addresses; client mutations require active local zone and hostname records.
- Hardening: client cache purge is provided only by the guarded addon flow; server-module client custom buttons no longer expose an unguarded purge handler.
- Hardening: SSL issuance uses an atomic local claim, failed claims are retryable, and refresh remains an issuance-free status check.
- Hardening: license cache identity includes both the license key and normalized SystemURL domain, XML parsing has an extension-safe bounded fallback, and stale-positive grace also covers transient 408, 429, and 5xx responses.
- Hardening: knowledgebase links are restricted to HTTP(S), service mappings use the service-row lock, and provider creates compensate if local transaction commit fails.
- Runs the idempotent table and column migration through WHMCS's standard addon upgrade path.
Previous Versions
v1.5.0
Released August 2nd, 2026
View/hide detailed changelog
- Added an editable BunnyCDN Service Activated Product/Service email template
- Added live CDN URL, CNAME target, origin, and management-link merge fields to product emails
- Uses the native WHMCS product welcome-email lifecycle for standalone products to prevent duplicates
- Sends the dedicated activation template after deferred addon/free-integrated client activation
- Fixed optional custom-hostname persistence when an allowed client creates an additional pull zone
- Preserves existing/customized templates during module activation and upgrade
v1.4.1
Released July 3rd, 2026
View/hide detailed changelog
- License: reverted to the standard validation pattern used across all ArkHost modules, fixing licenses that failed when the WHMCS SystemURL host differed from the registered domain (regression introduced in v1.3's licensing rewrite)
v1.4.0
Released July 1st, 2026
View/hide detailed changelog
- Standalone product provisioning now reads and stores the "Bandwidth Limit" configurable option / custom field, so the auto-suspend cron enforces it (previously only the addon/free-integrated path stored the limit)
- Addon/free-integrated activation now applies the selected Pricing Zone (Premium/Volume) to the pull zone instead of always creating Standard
- Shared option/bandwidth lookup helpers between both provisioning paths
v1.3
Released June 18th, 2026
View/hide detailed changelog
- Security: XSS escaping in client-area templates, license validation hardening (removed host-header bypass, strict checksum, cached with graceful fallback), path-traversal sanitization for language codes
- Multi-pull-zone support: allowed-clients management; clients can create additional pull zones
- Bug fixes: verify HTTP 201 before saving zone, fix ChangePackage configoption mapping, EnableAutoSSL on by default, bandwidth cron 80%/90% warnings + monthly auto-restore, treat 404 as success on delete (no orphan rows), .b-cdn.net CNAME target
- Code quality: remove dead code/duplicate UI, fix N+1 hostnames query, add isSuccess() helper
v1.2
Released January 25th, 2026
View/hide detailed changelog
- Map pull zones to clients without a matching WHMCS service
- Disassociate pull zones from WHMCS without deleting from BunnyCDN
- "Activate SSL" button requests and verifies certificates in one step
- Added origin traffic and average origin response time to client statistics
v1.1
Released January 24th, 2026
View/hide detailed changelog
- Enhanced client area with accordion UI, search filter, and single-zone view from service pages
v1.0
Released November 12th, 2025
View/hide detailed changelog
- Pull zone creation and management
- Custom hostname support with automatic SSL
- Three deployment modes (product/addon/integrated)
- Admin interface with zone import/mapping
- Client self-service activation
- Product-based CDN configuration
- Bandwidth limiting with auto-suspend
- Configurable options support (Pricing Zone, Bandwidth Limit)
- Daily cron job for usage tracking
- Statistics and cache purge
- Full internationalization support
