160 earlier updates, newest first. Showing 141–160 on page 8 of 8.
Released
H5
Clearer Max monthly and yearly price comparison
The Max pricing card now follows the same comparison order as Pro: monthly first, then yearly. The limited yearly offer remains highlighted and explicitly shows “Best value” plus US$358.30 saved versus paying monthly for a year. Prices and membership benefits are unchanged.
Max now presents monthly before yearly, making the yearly offer easier to compare directly.
Yearly remains US$0.50 (regular US$299) and now shows the US$358.30 savings versus twelve monthly payments.
Released
Backend
Database monitoring, indexes, and payment uniqueness hardening
The backend adds parameter-redacted slow-query observation, sustained-signal alert thresholds, and a five-minute database health check. The database now enforces at most one current subscription projection and one user-initiated in-flight payment order per user, with order/user/provider identity checks. Each paid order retains its own entitlement fact and the read side selects the highest live tier, so out-of-order Pro settlement cannot downgrade Max. A new checkout releases an overdue unpaid pending slot, while possibly captured submitted evidence remains provider-reconciled; already-captured Apple/Google receipts bypass the checkout gate. Critical foreign-key indexes are added and two redundant indexes are removed to reduce write amplification.
SQL over 500ms feeds five-minute trend counts; sustained slow queries, one five-second query, long transactions, repeated deadlocks, connection pressure, or repeated pool waits trigger alerts.
Slow-query logging explicitly disables bind-parameter capture so emails, sessions, and payment payloads stay out of operational logs.
The database rejects concurrent checkouts and a second current subscription projection; entitlements remain per paid order with the highest live tier effective, and overdue unpaid intents release their slot.
Indexes now cover subscriptions.latest_order_id and oauth_nonces.user_id; two redundant hand_actions and coach_hints indexes are removed.
Released
H5Backend
Table and startup upgrades, localized emails, alerting ready, and restored Max pricing
This release ships H5, backend, and the marketing site together: the current actor gets a reconnect grace window, multiway all-ins show live main and side pots, folding when a check is free requires confirmation, and folded players may voluntarily reveal after the hand. Telegram cold-start navigation now recovers automatically; verification-code, password-reset, and email-change messages follow the user's active language; and the backend gains configurable anomaly aggregation and alerting while container logs have rotation limits. H5 and server passwords share an 8–128-character rule, and one-time local payment methods explicitly describe the fixed-term training membership being purchased. Max monthly returns to US$29.90 (3000 XTR/month), while Max yearly keeps the US$0.50 beta promo with a struck-through US$299 regular price.
The current actor is no longer auto-folded immediately after disconnecting; a grace window and stale-action isolation prevent accidental actions after timeout.
Multiway all-ins now show the main pot and every side pot live, with Total reconciled to the breakdown.
Folding when a check is free now asks for confirmation, and folded players can choose to reveal their cards after the hand ends.
Hand-history and standings drawers use a denser layout so nine-player showdown information fits better on phones.
Telegram Mini App cold starts size to the visible viewport immediately and resume bottom-navigation synchronization when a delayed WebApp bridge arrives.
Verification-code, password-reset, and email-change messages use the active product language, safely falling back to English instead of mixing languages.
The server gains configurable anomaly aggregation, de-duplication, and Telegram alerting; container log caps activate with this release to prevent logs from filling the disk.
H5 and server signup, credential setup, and password reset now share an 8–128-character rule while still rejecting common and predictable passwords.
One-time Alipay, WeChat Pay, and PayNow checkout now labels the fixed-term training-membership fee and explicitly excludes wagering, chips, deposits, and cash prizes.
Max monthly returns to the standard US$29.90 / 3000 XTR; Max yearly remains a US$0.50 limited beta offer with the US$299 regular price struck through.
Production releases are now built only from main and require one new bilingual changelog entry before prod switches; H5, backend, and the site share one SHA and release id.
Released
H5Backend
Open-source solver mirror re-synced to the deployed build
This release re-publishes the public AGPL §13 Corresponding Source (the engine and postflop-solver subset) so it byte-matches the deployed build (tag solver-src-2026-07-18). It is a routine dependency-lock refresh only — solver results and gameplay are unchanged.
The public mirror tag solver-src-2026-07-18 is byte-identical to the deployed build, keeping the AGPL §13 source offer valid.
Only the dependency lock (Cargo.lock) was refreshed; the postflop-solver source and algorithm are unchanged.
Released
H5Backend
Email signup now uses six-digit, proof-first verification
H5 signup now proves mailbox ownership with a six-digit code before showing password and consent. Existing accounts are routed to sign-in or recovery. The server remains compatible with legacy eight-digit clients while strengthening new-password and email-account lookup rules.
New H5 signup codes are exactly six digits and preserve leading zeroes; legacy clients can still finish their eight-digit flow during the compatibility window.
After verification, new mailboxes continue to account creation while existing mailboxes move to sign-in or recovery instead of a late registration conflict.
New and reset passwords require at least 15 characters and reject common weak choices; existing short passwords can still sign in.
Sign-in and password recovery prefer canonical email lookup while retaining an exact-email compatibility path for legacy accounts.
Released
Backend
Telegram Stars test balances now require provenance attestation
Real-provider verification on Telegram's Test Server now requires the controlled test flow to attest both an existing Stars balance and its non-store test provenance before creating an order, preventing store-funded, refunded, or disputed balances from being treated as safe test funds. Production Telegram Stars checkout is unchanged.
Missing, mismatched, or store-origin provenance is rejected before any order write or Telegram provider call.
Each restricted run remains limited to one 1-XTR invoice, with the one-run budget still preventing retries from expanding risk.
The test wrapper, operational status, and bilingual incident review now agree: stop real-provider testing when no trusted non-store test balance is available.
Released
H5Backend
Table hands upgraded to a readable side drawer
Table history now opens as a full-height right drawer with larger board and hole cards, while rabbit hunt is strictly scoped to the selected hand. This release also fixes bet, pot, and hero-zone collisions on compact iPhone viewports.
History focuses one hand at a time with large board and hole cards, a visible slice of the table, and bottom hand-by-hand paging.
Rabbit hunt now lives inside the selected history hand; its runout never enters the live board or another history hand.
History enforces strict visibility: the viewer always sees their own cards; opponents are face-up only when explicitly authorized by the server, while folds, mucks, and unpersisted voluntary reveals stay face-down.
Dedicated safe lanes separate top bets, pot, blind markers, hero cards, and the bottom rail in iPhone 14 browser viewports.
Released
H5
Every sub-screen now has a way back
A full audit of back navigation across every H5 screen: the Solver page had no back button at all, and the Drills and History pages only showed one when entered from specific paths. In shells without browser chrome (installed PWA or Telegram Mini App), players could get stuck on those screens. All three now always show a back button.
The Solver page gained a back button: it returns along the in-app history when present (for example from Review), and falls back to the Tools hub otherwise.
The Drills and History back buttons no longer depend on an entry parameter — arriving from a notification, from Review, or via a direct link still offers a way back.
Back handling is safe for cold deep links: with no in-app history it falls back to the parent screen instead of a dead browser back.
Released
H5Backend
Stripe checkout fixed with availability-aware payment options
This release fixes the API-version mismatch that blocked Stripe Elements sessions for Apple Pay and Google Pay, and only exposes payment methods that Stripe has enabled and the release preflight has verified.
Apple Pay and Google Pay Elements sessions now use the API version matched to the frontend Stripe.js release.
Methods not enabled on the live Stripe account, such as Alipay, WeChat Pay, or Google Pay, are hidden and cannot be forced through the server endpoint.
The release preflight now verifies Stripe's live payment-method configuration and wallet domain, then creates and expires no-charge sessions; rejected requests mark the local order rejected and retain only safe diagnostic fields.
Released
Backend
Mobile update checks now report the correct store versions
In-app update checks now return the currently published App Store and Google Play versions independently instead of reusing a stale shared version record.
iOS and Android now compare against the build currently published in their own store.
Local installs and candidate builds no longer overwrite the published catalog before a store release is available.
Released
H5Backend
In-app subscription verification goes live, plus Telegram subscription fixes
This release activates server-side verification and real-time developer notifications for Google Play in-app subscriptions in production, and fixes Telegram Stars subscriptions that could not be cancelled or refunded after lapsing.
Google Play subscription purchases are now server-verified and grant membership automatically, with real-time developer notifications (RTDN) active.
Telegram Stars subscriptions can now be cancel-marked and refunded correctly even after they lapse; other provider rejections still fail closed.
A test-environment-only subscription-period override enables repeatable regression checks; production stays locked to 30-day periods and rejects misconfiguration at startup.
Released
H5Backend
Email-code protection for account signup and upgrades
H5 now sends an eight-digit email code for new-account signup, guest upgrade, and Telegram account email/password setup, confirming inbox access before the account write completes.
Signup now includes send-code and enter-code steps, and submits the new account only after verification.
Guest upgrades and Telegram account email/password setup use the same inbox-ownership check while preserving existing hands and account data.
Codes expire after ten minutes and allow up to five attempts; delivery failures prompt a retry instead of being treated as a successful send.
Released
H5Backend
Legacy APK hosting fully retired
Google Play remains the website's only Android install path. Legacy APK files, static hosting, server mounts, and deployment or rollback preservation logic have all been removed.
Historical APK download bookmarks retain only a permanent redirect to Google Play and no longer map to any APK file or hosted directory.
Production releases no longer mount, copy, or exempt any APK directory from deletion.
Released
H5Backend
Android website entry moves exclusively to Google Play
The website no longer offers direct APK downloads. Every Android entry and historical download link now opens the official Google Play listing for the current public release and future updates.
Every Android entry on the website now uses BluffKing's official Google Play listing.
Legacy APK download URLs permanently redirect to Google Play instead of serving an outdated installer.
Released
H5Backend
Friend-beta pricing: Max drops to each channel's minimum charge
During the friend-beta period, Max membership drops to each payment channel's minimum chargeable amount: US$0.50 per month and US$0.50 per year on Stripe, and 1 XTR per month on Telegram Stars. Pro membership pricing is unchanged.
Max monthly on Stripe drops from US$29.90 to US$0.50, Stripe's minimum chargeable USD amount.
Max yearly on Stripe drops from US$299 to US$0.50, and Telegram Stars monthly drops from 3000 XTR to 1 XTR, the Telegram minimum.
Pro membership and its Telegram Stars pricing stay unchanged.
Released
H5Backend
Bet-slider fix and hardened release rails
This release fixes a new-table bet slider issue where releasing a drag could commit the action twice and improves VPIP/PFR stat accuracy.
The new-table bet slider now commits exactly one action per drag.
Added VPIP/PFR regression cases for forced-blind folds, call-shaped all-ins, and wager-increasing short all-ins so stat classification keeps poker semantics.
Continued hardening the release and independent-review rails, including a credential-lookup fix for unattended reviews, so every merge keeps passing independent scrutiny.
Released
H5Backend
Public release notes, payment safeguards, and a steadier table
This release launches public release notes, continues improving table and membership experiences, keeps the not-yet-enabled BNB rail hidden and disabled server-side, restores compatibility with the existing migration 0060 checksum, and strengthens App Store notification verification.
Added bilingual public release notes for future H5, backend, and mobile releases.
Refined table countdowns, status information, and small-screen layout while aligning membership descriptions across H5 and mobile.
Strengthened regression protection for blinds, action order, and session continuation.
The BNB Chain USDT option now follows its server-side switch; it stays hidden while disabled and cannot be bypassed through order or administrative endpoints.
Restored the checksum of production-applied migration 0060 and moved the refund-constraint change to new migration 0063 so this upgrade can start safely.
Added support for official App Store test notifications so the notification path can be verified before purchases open.
Released
Android
Android 1.1.2: Tools tab and richer standings
Android 1.1.2 adds the Tools tab and a session leaderboard summary, shows VPIP and win rate in standings, introduces the free time bank for extending action time, and improves overall stability.
New Tools tab with quick access to poker calculators.
Session leaderboard summary, plus VPIP and win rate in standings.
Free time bank for extending action time.
Smoother table experience on small screens, stability improvements and bug fixes.
Released
H5Backend
Table controls, session continuity, and fairness updates
This release focuses on clearer live-table play, smoother recovery after interruptions, and fairness information players can verify directly.
Refined mobile table layout, betting controls, and dealer / blind markers so key information stays visible.
Improved table identification and recovery when returning to the lobby, reconnecting, or resuming a session.
Expanded verifiable-deal seed evidence and made showdown results easier to read.
Adjusted AI opponent names, styles, and action timing for more natural, readable practice tables.
Released
iOSAndroid
iOS 1.1.1 and Android 1.1.0
The first public mobile releases bring practice tables, friend rooms, review, replay, and focused drills to the native apps with phone-specific display refinements.
iOS: corrected blind display, added the new Tools entry, and improved overall stability.
Android: improved edge-to-edge display, bottom navigation, and table information accuracy.
Both apps include practice-chip tables, AI opponents, friend rooms, hand review, and training drills.