2026.3.1-beta

Call stats, custom field validation, a feature flag admin API, and a new marketing page round out this release alongside security hardening and CI improvements.

Call Stats & Transparency

Organizations can now opt in to transparency reporting. Public call stats — total submissions, acceptance rate, and average response time — are computed per-call and exposed via a new public API endpoint for organizations that enable transparency_opt_in.

Custom Field Validation

Submissions with custom fields are now validated at creation time. File and word-count field types are checked against their configured constraints, preventing invalid submissions from entering the review queue.

Feature Flag Admin API

A new admin API for managing feature flags supports CRUD operations with key validation and integration tests. Accessible only via the admin token.

Letter to the Editors

A new marketing page (/letter-to-the-editors) introduces Galley's story and mission directly on the site.

UI Polish

• Select dropdowns fixed across the app (kit component context and value rendering)
• Header action buttons tightened up
• Theme toggle now available when logged out
• Hero section resized and uses proper Button component

Everything else

• Comprehensive input validation and SQL injection prevention across API routes
• Dependency audit CI workflow added with cargo-audit
• Frontend Containerfile switched to Node for builds to prevent OOM on Depot builders
• E2E test suite stabilized (SSR hydration, auth flow fixes, all 10 tests passing)
• DevAgent loop now cleans up merged-PR branches automatically
• Parallelized E2E test setup in CI for faster runs