Peter Amiri
04/23/2026, 8:58 PMdevelop between 3.0.0 and now (~15 weeks). I bucketed every user-visible change and cross-linked with the CHANGELOG.
https://github.com/wheels-dev/wheels/blob/develop/docs/releases/wheels-4.0-audit.md
By the numbers:
• ~70 distinct user-visible features/changes
• 40+ security-hardening PRs (SQL injection, path traversal, CORS/CSRF/HSTS, rate limiter, MCP)
• 7 breaking changes — all documented with detect/fix/opt-out in the upgrade guide
• Contributors: @bpamiri, @zainforbjs, @chapmandu, @mlibbe, @MukundaKatta, plus dependabot
If you want the "what's in 4.0" with receipts instead of marketing, this is the doc.