Skip to main content
SimDeck
AboutWhat's newHelpDemoSupportStudent login
AboutWhat's newHelpDemoSupportStudent login
View demo
ChinaEgyptClassroom

Release ledger

What's new in SimDeck

A version-by-version record of approved SimDeck improvements.

Source of truth

SimDeck release notes

Approved release notes are published here. Draft entries are labeled and are not live releases.

Version 0.31

July 16, 2026

Smoother class-code entry on mobile

The class-join field now tells mobile keyboards to treat the teacher-provided class code as a character code instead of ordinary prose.

Why it matters

  • - Phones are asked to capitalize code characters instead of applying sentence-style capitalization.
  • - Autocorrect and spell checking are disabled so a classroom code is less likely to be replaced with a dictionary word.
  • - Browser autocomplete no longer treats the class code like a name, email, password, or one-time authentication credential.

Verification

  • - All 5 focused code-entry cases pass across Chromium, Firefox, WebKit, Mobile Chrome, and Mobile Safari.
  • - All 325 public smoke and accessibility cases pass across the five required browser profiles.
  • - All 21 public DOM states per browser remain clear of serious and critical axe findings.
  • - All 10 password-guidance cases, 65 feedback-boundary cases, and 25 input-purpose cases remain green.
  • - All 219 required unit tests pass with 81.60% statement, 63.71% branch, 91.97% function, and 91.20% line coverage across the critical-source set.
  • - Typecheck, lint, static security, production build, backendless demo, 10 skeleton states, theme contrast, and npm audit with zero vulnerabilities pass.
  • - The Linear release ledger was updated before this public page entry.

Source: Linear release ledger document, PI-213

  • Added character capitalization metadata to the visible class-code field on class join.
  • Disabled autocomplete, autocorrect, and spell checking for the code while keeping server normalization and required validation unchanged.
  • Added one separately reported browser regression per profile for all four exact code-entry attributes.

Version 0.30

July 16, 2026

Clear password requirements before submission

Class join and password reset now explain the eight-character minimum before submission and connect the same guidance to both password fields.

Why it matters

  • - Students know the password rule before entering and submitting a new credential.
  • - Screen readers announce the same concise length and confirmation guidance from both password controls.
  • - Class join and account recovery now use one consistent instruction without changing validation or password-manager behavior.

Verification

  • - Both focused Chromium password-requirement cases pass against a rebuilt production bundle.
  • - All 10 password-guidance cases and all 320 public smoke and accessibility cases pass across Chromium, Firefox, WebKit, Mobile Chrome, and Mobile Safari.
  • - All 21 public DOM states per browser remain clear of serious and critical axe findings.
  • - All 65 feedback-boundary cases and all 25 input-purpose cases remain green.
  • - All 219 required unit tests pass with 81.60% statement, 63.71% branch, 91.97% function, and 91.20% line coverage across the critical-source set.
  • - Typecheck, lint, static security, production build, backendless demo, 10 skeleton states, theme contrast, and npm audit with zero vulnerabilities pass.
  • - The Linear release ledger was updated before this public page entry.

Source: Linear release ledger document, PI-213

  • Added one visible password-requirement hint to class join and one to the valid password-reset form.
  • Associated both password controls on each form with its local hint while retaining required, new-password, and minimum-length metadata.
  • Added two separately reported browser regressions per profile for the exact instruction, description relationships, and native length constraints.

Version 0.29

July 16, 2026

Trusted sign-in and recovery messages

Public sign-in, class-join, and password-recovery screens now show only route-approved SimDeck messages instead of treating arbitrary query-string text as trusted feedback.

Why it matters

  • - A crafted link can no longer place caller-written claims inside SimDeck's real alert or status styling.
  • - Legitimate sign-in failures, enrollment recovery, reset confirmations, and password-update results keep their established wording and accessibility semantics.
  • - Password-reset provider diagnostics remain server-side while students receive safe, actionable recovery guidance.

Verification

  • - All 13 focused Chromium feedback cases pass: eight legitimate alert/status states and five crafted-query rejection states.
  • - All 65 feedback-boundary cases and all 310 public smoke and accessibility cases pass across Chromium, Firefox, WebKit, Mobile Chrome, and Mobile Safari.
  • - All 21 public DOM states per browser remain clear of serious and critical axe findings.
  • - All 219 required unit tests pass with 81.60% statement, 63.71% branch, 91.97% function, and 91.20% line coverage across the critical-source set.
  • - Typecheck, full lint, static security, production build, backendless demo, 10 skeleton states, theme contrast, and npm audit with zero vulnerabilities pass.
  • - The Linear release ledger was updated before this public page entry.

Source: Linear release ledger document, PI-213

  • Added unique feedback keys and route-specific allowlists for teacher login, student login, class join, reset request, and password update.
  • Updated every public authentication redirect to use SimDeck-owned feedback states instead of URL-encoded message prose.
  • Added five crafted-link regressions per browser profile and kept all eight legitimate alert and status states under exact assertion.

Version 0.28

July 16, 2026

Smarter sign-in and password autofill

Teacher login, student login, class join, reset request, and password update forms now identify each personal-data field with the correct browser-standard input purpose.

Why it matters

  • - Teachers and students get more reliable email and password-manager suggestions on sign-in screens.
  • - Class join and password reset distinguish credential creation from existing-password entry.
  • - Browsers and assistive technology can identify names, email addresses, current passwords, and new passwords without guessing from visual labels alone.

Verification

  • - All five focused Chromium form cases failed against the previous markup and passed after the metadata change in a rebuilt production bundle.
  • - All 25 form-purpose cases and all 285 public smoke and accessibility cases pass across Chromium, Firefox, WebKit, Mobile Chrome, and Mobile Safari.
  • - All 40 feedback-role cases and all 115 accessibility-specific cases remain green.
  • - All 215 required unit tests, typecheck, lint, static security, production build, and npm audit with zero vulnerabilities pass.
  • - The Linear release ledger was updated before this public page entry.

Source: Linear release ledger document, PI-213

  • Added email and current-password metadata to teacher and student sign-in fields.
  • Added name, email, and new-password metadata to class join, reset request, and password update fields.
  • Kept the classroom code outside personal-data autocomplete because it is not a username or one-time authentication code.
Newer releases

Page 13 of 19

Older releases

SimDeck is demo classroom software for role-based card inventories.

PrivacyTermsSupportHelpWhat's new