Changelog

All notable changes to the public HTTP API and the official SDKs. Dates use ISO-8601 (UTC).

The HTTP API path is versioned (/api/v1/). Breaking changes happen at major version boundaries. Additive changes (new fields, new endpoints, new event types) ship within the current major version.

2026-05-08

Added

• New endpoint: POST /api/v1/generate/bulk/ for batch rendering up to 5 000 QRs in one call. Returns a ZIP archive plus a manifest.json. See Bulk concept and the bulk endpoint reference.
• New data_type: "dynamic" on POST /api/v1/generate/. Creates a dynamic QR row and renders the encoded short URL in one call.
• New endpoints: /api/v1/dynamic/ CRUD plus /api/v1/dynamic/{short_id}/analytics/.
• New endpoints: /api/v1/webhooks/ CRUD plus rotation and delivery inspection.
• New response headers: X-QR-Plan, X-QR-Quota-Remaining, X-QR-Cache, X-QR-Duration-Ms, X-Request-Id.
• Render styling: pattern accepts dot, diamond, liquid, connected-h, connected-v, hexagon, star, halftone, frame.
• Eye styling: eye_border_shape, eye_center_shape, plus eye_border_color and eye_center_color.
• Decorative frames: frame_style, frame_color, frame_label, frame_label_color.
• Vertical gradients via gradient_from and gradient_to.
• Background images via bg_image_url and bg_image_file, paired with pattern: "halftone".
• A/B variants on dynamic QRs (variants array, Pro+).
• Custom domains for white-label dynamic redirects (Agency+).

Changed

• Free plan tightened to 5 monthly renders, 1 active dynamic QR with 1 lifetime destination edit, 50 dynamic scans per month.
• Free plan max print size reduced from 4 inches to 3 inches.
• Production base URL switched to api.qrstudio.agency (was api.qrstudio.example in pre-release docs).
• Stripe is now in live mode; every checkout charges real money.

Security

• SSRF protection extended to bg_image_url and webhook url at registration time.
• Dynamic redirect now sets Cache-Control: no-store mandatorily.
• Webhook signing scheme documented as X-QRStudio-Signature: t=<unix>,v1=<hmac>.

2026-04-01

Added

• First public preview. Single-render endpoint, API key auth, monthly quota, render cache.
• vCard, Wi-Fi, email, SMS, geo, text data types.

SDKs

Each SDK has its own changelog at the package source. Major versions follow the HTTP API; a 2.x SDK will require /api/v2/.

Subscribe to changes

• RSS: https://qrstudio.agency/docs/changelog.rss
• Email: support@qrstudio.agency with the subject "Subscribe to changelog"

For incidents and maintenance, follow status.qrstudio.agency.