v2026.08.09.4
Added 1
- Proactively surface missing payout method before publish
Changed 2
- Preserve exact PayPal processor fees in calculations
- Cap the payout in processing safeguard age
Fixed 1
- Retry once on RecordNotUnique in audience_members upsert to fix race condition
Security 1
- Fix IDOR vulnerability in dispute evidence access to restrict seller-only visibility
What's Changed
Internal
- Fix IDOR: seller-only dispute-evidence access, not the buyer-visible external_id by @gumclaw in https://github.com/antiwork/gumroad/pull/7128
- Preserve exact PayPal processor fees by @gumclaw in https://github.com/antiwork/gumroad/pull/7131
- Retry once on RecordNotUnique in audience_members upsert (race fix) by @gumclaw in https://github.com/antiwork/gumroad/pull/7138
- Cap the "payout in processing" safeguard age (gp#1918) by @gumclaw in https://github.com/antiwork/gumroad/pull/7140
- Proactively surface missing payout method before publish by @gumclaw in https://github.com/antiwork/gumroad/pull/7146
Full Changelog: https://github.com/antiwork/gumroad/compare/v2026.08.09.3...v2026.08.09.4