Security releases are marked; a site set to take security updates installs them on its own. How to update is in Updates.
1.17.3
Latest14 October 2026
The sign-up form now stops bots before an account exists.
Member accounts whose email address was never confirmed can be removed after a number of days, 7 by default, under System ▸ Settings ▸ Security.
Health has a new check, Sign-up protection.
For theme authors: a theme with its own sign-up form calls $this->signupChecks() inside it.
Full notes
The sign-up form now stops bots before an account exists: a hidden field a person never sees, a check on how soon the form comes back, and, once reCAPTCHA keys are set under System ▸ Settings ▸ Security, Google's "I'm not a robot" box, checked on your server. A refused sign-up keeps what was typed, apart from the passwords. See Security.
Member accounts whose email address was never confirmed can be removed after a number of days, 7 by default, under System ▸ Settings ▸ Security. Only accounts that never signed in and have written nothing are removed, and never staff. It is on for new sites; a site that updates keeps it off until you switch it on.
Health has a new check, Sign-up protection.
For theme authors: a theme with its own sign-up form calls $this->signupChecks() inside it. Until it does, sign-ups there are held to the per-address limit alone, and Health says so.
1.17.2
14 October 2026
Each page can set its own cache time, on the new Performance tab of the page editor.
Blog comments now finish moving from Forums to Comments with no cron line.
The package now carries the licence texts of the editor, the QR code library and the admin panel's font.
Full notes
Each page can set its own cache time, on the new Performance tab of the page editor: the site's default, never cached, or anything from one minute to a week. It applies while the page cache is on under System ▸ Settings ▸ Performance. Through the Operator API it is the page field cache_ttl.
Blog comments now finish moving from Forums to Comments with no cron line. On 1.17.1 a site without one waited at the start of the move.
The package now carries the licence texts of the editor, the QR code library and the admin panel's font.
1.17.1
13 October 2026
Scheduled jobs now run with no host setup.
A cron line is now an optional upgrade.
Update Forums to 1.17.1 together with core.
Full notes
Scheduled jobs now run with no host setup. Without a cron line, the site runs its own due jobs from visits and from an open admin panel.
A cron line is now an optional upgrade. It is still the only way off-site backups, email digests and automatic forum moderation run, and Health says so.
Update Forums to 1.17.1 together with core: Update everything does both.
1.17.0
Feature release13 October 2026
Comments, a free module of its own.
The importer brings a ProcessWire or WordPress site (with ACF) into tilspire.
Pages nest in a tree and their address is their whole path, such as /about/team.
Images: uploads are turned upright, stripped of camera data and capped at a maximum size, with WebP versions served automatically.
All 13 changes
Comments, a free module of its own: threads on posts and on pages whose Layout allows them, from members and, if you allow it, guests. A spam gate, rules for what waits for a moderator, one moderation queue, and email when someone replies. Blog comments move over from Forums when you update.
The importer brings a ProcessWire or WordPress site (with ACF) into tilspire: Layouts, pages, images, links, redirects, menus and WordPress comments. It shows a dry run first, and an import can be undone.
Pages nest in a tree and their address is their whole path, such as /about/team. Moving a page redirects its old address, and the Pages list folds like a tree.
Images: uploads are turned upright, stripped of camera data and capped at a maximum size, with WebP versions served automatically. A job brings the media you already have up to date.
Analytics gets its own page under Site ▸ Analytics: trends against the period before, devices, hours, campaigns, pages not found (with "Redirect it") and download links you create under Site ▸ Redirects, plus a CSV export.
A dashboard of widgets you resize and move, personal favourites in the menu, and a calmer admin panel: each feature's settings sit on its own page.
For theme authors, the Template API: list pages by Layout or parent, with filters, sorting and paging; dates, pictures, links, the logo and the visitor.
In the editor, fields can be required or have a minimum and maximum, a field can show only when another has a given value, and there is a gallery field.
The Operator API reads modules, health, jobs, analytics, themes and revisions, and can propose a theme switch, a restore, a download link, forum and ticket changes, and site operations.
The installer is a five-step wizard.
Upgrade: Use AI features replaces Use the Assistant. Roles that had the old permission keep AI; on a site that never used the Assistant, grant it to your editors under Roles to give them Draft with AI.
Upgrade: update Forums to 1.17.0 together with tilspire. Until then a Forums that is switched off can't be switched on, and moving its comments into Comments waits.
Changed: /about/x is a "not found" page unless a page exists at that path.
Show 1.16.0 and earlier
1.16.0
Feature release6 October 2026
Layouts over the Operator API.
Credentials by job: one switch per job on each Operator API credential, such as Write and edit pages or Shape Layouts and fields, instead of finding each grant on the Grants tab.
A new Updates page: the waiting release and what’s in it at a glance, and the update itself on its own full screen in three steps, Check, Update and Result.
Also: the Operator API page’s forms open as dialogs, and the activity log pages through a window of page numbers.
Full notes
Layouts over the Operator API: agents and the Assistant can propose a new Layout with its groups and fields, changes to Layouts and fields, and deletions, as drafts. A page draft can name a Layout still waiting for approval.
Credentials by job: one switch per job on each Operator API credential, such as Write and edit pages or Shape Layouts and fields, instead of finding each grant on the Grants tab. Modules can add their own.
A new Updates page: the waiting release and what’s in it at a glance, and the update itself on its own full screen in three steps, Check, Update and Result.
Also: the Operator API page’s forms open as dialogs, and the activity log pages through a window of page numbers.
1.15.0
Feature release5 October 2026
The Review queue: agents propose pages, posts, menus, redirects, images, settings, design, translations, forum moderation and ticket replies as drafts.
Self-approval, off by default: a credential's owner can let it publish its own pages, posts and images for up to 7 days, from listed addresses, at most 60 an hour, with undo.
The Assistant keeps your chats, lets you pick a model, answers word by word, can moderate forums if you switch it on, and the panel opens on its chat (Profile ▸ Start on chooses the dashboard).
Content in more than one language, under a path prefix, translated by hand or drafted by AI.
All 12 changes
The Review queue: agents propose pages, posts, menus, redirects, images, settings, design, translations, forum moderation and ticket replies as drafts. Approve or reject up to 50 at once, and preview a page, post or menu on the real site first.
Self-approval, off by default: a credential's owner can let it publish its own pages, posts and images for up to 7 days, from listed addresses, at most 60 an hour, with undo.
The Assistant keeps your chats, lets you pick a model, answers word by word, can moderate forums if you switch it on, and the panel opens on its chat (Profile ▸ Start on chooses the dashboard). Email digests of what needs your attention.
Every update runs a pre-check with the release notes, takes a database snapshot, and checks the site's health afterwards; a failed check can be undone with the database for 24 hours. An optional weekly window for automatic updates.
Scheduled jobs: run php core/cli/cron.php every 5 minutes (see Command-line tools).
Also: content sync from staging to production, a command-line installer, and Site ▸ Design for a theme's colours, fonts and layouts.
Changed: a menu item whose page was deleted or is a draft is no longer shown.
Behind nginx: refuse site/drafts/ as you do site/backups/, and allow 8 MB request bodies for /api/v1/drafts/media.
1.14.0
Feature release28 September 2026
A new admin menu: five sections that never fold or scroll, each section's pages as a row of tabs, a menu that drills down on phones, a System overview and an "Everything in the admin" dashboard widget.
AI mode: Ask Tilspire, the AI switch or Ctrl+J turns the panel into the Assistant, and Esc returns.
Staff sign in on the site like members, and Keep me signed in lasts up to 30 days.
On the Operator API page, Extend adds time to a credential's current expiry and asks for your proof every time.
All 6 changes
A new admin menu: five sections that never fold or scroll, each section's pages as a row of tabs, a menu that drills down on phones, a System overview and an "Everything in the admin" dashboard widget.
AI mode: Ask Tilspire, the AI switch or Ctrl+J turns the panel into the Assistant, and Esc returns. You see each step while it works, and Stop ends it before it proposes anything.
Staff sign in on the site like members, and Keep me signed in lasts up to 30 days. The admin panel asks for your password and second factor itself, and again after a while without use, which you set under System ▸ Settings ▸ Security.
On the Operator API page, Extend adds time to a credential's current expiry and asks for your proof every time.
Switches instead of checkboxes and a clearer label on every icon button, across the panel.
Themes forked from the starter theme: use isStaff() where you asked can('access_admin') — see Themes.
1.13.0
Feature release27 September 2026
Connect an AI provider — Anthropic, OpenAI, Gemini or OpenRouter — under Admin ▸ AI, with your own key, a monthly spending cap and a report of what each model cost and how well it did.
The Assistant: ask about your site in plain language, see what needs your attention, and approve the pages and posts it proposes.
A health and security score on the dashboard.
Undo the last update, from the release's own signed package, Pro modules included.
All 7 changes
Connect an AI provider — Anthropic, OpenAI, Gemini or OpenRouter — under Admin ▸ AI, with your own key, a monthly spending cap and a report of what each model cost and how well it did.
The Assistant: ask about your site in plain language, see what needs your attention, and approve the pages and posts it proposes.
A health and security score on the dashboard.
Undo the last update, from the release's own signed package, Pro modules included.
An update counts as a security update whenever a security release lies between your version and the newest.
Updates run from update.php in the site's root, so they now work on Windows too; schedule php update.php --auto.
1.12.0
Feature release25 September 2026
On the Operator API page, one proof covers the next 15 minutes of changes; issuing and rolling a credential still ask every time.
Gates and grants are Create, Read, Update and Delete tables.
Extend gives a credential more time, and Roll replaces its secret while keeping its name, addresses and grants.
A credential whose account has changed its password or two-factor sign-in is marked as such, and can be rolled.
Full notes
On the Operator API page, one proof covers the next 15 minutes of changes; issuing and rolling a credential still ask every time.
Gates and grants are Create, Read, Update and Delete tables. Proposing a page and proposing an edit are separate rights; each existing right to propose became both.
Extend gives a credential more time, and Roll replaces its secret while keeping its name, addresses and grants.
A credential whose account has changed its password or two-factor sign-in is marked as such, and can be rolled.
1.11.0
Feature release24 September 2026
The Operator API: a script or an AI assistant reads your site and proposes pages and posts that a person approves.
Credentials that expire, act only as the account that issued them, and can be limited to the addresses they connect from.
Proposals are reviewed under Admin ▸ Drafts to review and saved through the editor's own code.
An OpenAPI document and a Model Context Protocol endpoint for AI assistants.
All 5 changes
The Operator API: a script or an AI assistant reads your site and proposes pages and posts that a person approves.
Credentials that expire, act only as the account that issued them, and can be limited to the addresses they connect from.
Proposals are reviewed under Admin ▸ Drafts to review and saved through the editor's own code.
An OpenAPI document and a Model Context Protocol endpoint for AI assistants.
tilspire now needs PHP 8.1 or later.
1.10.0
Security23 September 2026 · security release
Links in emails only act when you press the button on the page they open, so a mail scanner can't confirm an address or use a reset link.
An administrator can reset another person's lost second factor; the reset signs that account out everywhere and emails its owner.
Two-factor secrets kept from before 1.9.0 are encrypted the next time their owner signs in.
The role editor shows a disabled module's permissions so they can be removed, and the role new members sign up with can no longer be given permissions.
All 5 changes
Links in emails only act when you press the button on the page they open, so a mail scanner can't confirm an address or use a reset link.
An administrator can reset another person's lost second factor; the reset signs that account out everywhere and emails its owner.
Two-factor secrets kept from before 1.9.0 are encrypted the next time their owner signs in.
The role editor shows a disabled module's permissions so they can be removed, and the role new members sign up with can no longer be given permissions.
Scheduled updates apply every waiting database migration, the core's and each module's.
1.9.0
Security22 September 2026 · security release
Two-factor sign-in for every account, members included, with recovery codes and the secret encrypted at rest.
One password policy everywhere a password is set, and stored hashes upgraded at the next sign-in.
Fixed: a way for any visitor to empty the page cache, and a recovery code two requests could both use.
A restore rebuilds the index of which pages link to which.
Full notes
Two-factor sign-in for every account, members included, with recovery codes and the secret encrypted at rest.
One password policy everywhere a password is set, and stored hashes upgraded at the next sign-in.
Fixed: a way for any visitor to empty the page cache, and a recovery code two requests could both use.
A restore rebuilds the index of which pages link to which.
1.8.0
Feature release19 September 2026
A licensed module whose files have gone missing is fetched again by the next update.
The Updates page reports one line for the whole site, and names a module only when it isn't in step.
Full notes
A licensed module whose files have gone missing is fetched again by the next update.
The Updates page reports one line for the whole site, and names a module only when it isn't in step.
1.7.2
15 September 2026
Update everything is the one way to update; the Updates page keeps a one-line summary.
Full notes
Update everything is the one way to update; the Updates page keeps a one-line summary.
1.7.1
14 September 2026
A core update refreshes your licence first, so one action really does update every module, and the Updates page claims only what it checked.
Full notes
A core update refreshes your licence first, so one action really does update every module, and the Updates page claims only what it checked.
1.7.0
Security14 September 2026 · security release
Applying a core update brings every module you're entitled to with it, in one action.
One version number for the whole install.
tilspire writes the SEO head block for any theme that doesn't write its own.
STABILITY.md: what 1.x promises, part by part.
All 5 changes
Applying a core update brings every module you're entitled to with it, in one action.
One version number for the whole install: the modules that come with tilspire ship at the core's version.
tilspire writes the SEO head block for any theme that doesn't write its own.
STABILITY.md: what 1.x promises, part by part.
Security: archives are refused across the site, package files are unpacked with safe permissions, and the configuration file is written readable by its owner only.
1.6.0
Feature release8 September 2026
One Updates page for the core and every module.
A core release states which module versions it needs, and checks them before it downloads.
Full notes
One Updates page for the core and every module.
A core release states which module versions it needs, and checks them before it downloads.
1.5.0
Feature release7 September 2026
A new starter theme, built to the theme contract.
The Blog and Tickets modules carry their own styles and scripts instead of borrowing the old theme's.
Full notes
A new starter theme, built to the theme contract: cool greys, an emerald accent, the self-hosted Geist typeface, customiser options and a skip link.
The Blog and Tickets modules carry their own styles and scripts instead of borrowing the old theme's.
1.4.0
Feature release7 September 2026
The theme contract, written down.
Icons move to Font Awesome Free 7.3.1 as CSS and web fonts — 142 KB on a typical page instead of 514 KB, and no JavaScript needed.
Full notes
The theme contract, written down: what a theme provides, and what tilspire fills in when it doesn't.
Icons move to Font Awesome Free 7.3.1 as CSS and web fonts — 142 KB on a typical page instead of 514 KB, and no JavaScript needed.
1.3.1
6 September 2026
A module's stylesheets and scripts appear even on a theme that doesn't output them itself.
Full notes
A module's stylesheets and scripts appear even on a theme that doesn't output them itself.
1.3.0
Security6 September 2026 · security release
The Forums module (Pro).
Failed sign-ins are throttled per address and per account.
Full notes
The Forums module (Pro).
Failed sign-ins are throttled per address and per account.
1.2.0
Security6 September 2026 · security release
Public member accounts: sign-up, email verification, password reset and account pages — the foundation Forums and Tickets build on.
Full notes
Public member accounts: sign-up, email verification, password reset and account pages — the foundation Forums and Tickets build on.
1.1.0
Feature release5 September 2026
Content-model templates reach the public site.
New field types: multiselect, date, colour, file, message, and relations between pages.
Rich-text template fields are filtered when saved.
Full notes
Content-model templates reach the public site: a template names its own view, and themes read its typed fields safely.
New field types: multiselect, date, colour, file, message, and relations between pages.
Rich-text template fields are filtered when saved.
1.0.0
Feature release3 September 2026
The first stable release.
Licence keys for Pro modules, with per-site activation.
Tickets, the first Pro module, and the Blog in every package.
Full notes
The first stable release.
Licence keys for Pro modules, with per-site activation.
Tickets, the first Pro module, and the Blog in every package.
Release candidates
August 2026
1.0.0-rc.1 was the first signed release. The candidates that followed hardened content handling, permissions and sign-in (rc.2), added the shipped web-server rules and upload guards (rc.3, a security release), and brought licensing (rc.5).
Security How a security release looks when there is one: marked here, and installed on its own where you allow it.