Changelog

Release notes and version history for gkCAPTCHA.

v2.1

Latest

April 4, 2026

  • Auth/session cookie fix: explicit sameSite, secure, httpOnly configuration
  • Session freshness guards on sensitive operations (re-authentication prompt)
  • Dashboard UI: unified breadcrumbs on all 27 pages, stats deduplication
  • Developer documentation alignment with actual API surface

v2.0

April 3, 2026

Proof of Work

  • Difficulty lowered: SHA-256 from 4 to 3, SHA-512 from 3 to 2, max difficulty from 8 to 6
  • Multi-worker PoW with stride-based nonce partitioning (2-4x speedup on multi-core devices)

Widget

  • Bundle reduced from 78KB to 37KB gzipped (-52%)

Scoring Engine

  • Mobile touch exemptions to prevent false blocks on touch devices
  • Coverage-dampened fusion risk calculation for more accurate scoring

Configuration

6 new GK_POW_* environment variables for production difficulty tuning:

.env
GK_POW_BASE_SHA256=3
GK_POW_BASE_SHA512=2
GK_POW_MAX_DIFFICULTY=6
GK_POW_BASE_DIFFICULTY=3
GK_POW_INCREASE_THRESHOLD_MS=300
GK_POW_DECREASE_THRESHOLD_MS=1500

Documentation

  • Content Security Policy (CSP) integration documentation added