rallly
v4.17.0Rallly is an open-source scheduling and collaboration tool designed to make organizing events and meetings easier.
- Maintenance
- ActiveBased on the last push: commit history is not collected yet
- License
- AGPL-3.0Copyleft · OSI-approved
- Security
- 14 advisories2 critical, 12 medium
- Supported versions
- No scheduleendoflife.date does not track this project
5.4k stars · 592 forks · 7 open issues · last release 4 days ago · data checked 4 hours ago
Breaking changes
What to check before upgrading, taken from the notes of the last 30 releases.
- v4.15.0Sep 9, 2026
- ## ⚠️ Action required: Microsoft SSO
- v4.12.0Aug 3, 2026
⚠️ Breaking changes
- Legacy
/p/and/admin/poll links no longer work (#2781). These redirects served links created before v3. The backing columns are dropped by a migration, so this is irreversible. Old bookmarks and emailed links from pre v3 polls will return 404. - New polls have comments disabled by default (#2792). Comments are deprecated and will be removed in a future release. In most cases, participant response notes (new in this release) cover the same need. Organizers can still turn comments on in poll settings.
Also changed for existing instances:
- Gravatar support is removed (#2780). Participant avatars fall back to initials.
- Poll retention semantics changed (#2720). Polls are now kept for at least 30 days after their final date, and any activity extends the window. Previously polls were removed when not updated for 30 days with all dates in the past.
- Legacy
- v4.8.0Apr 1, 2026
- 💥 Crash on deleted poll — Accessing a poll that no longer exists now shows a proper 404 page instead of crashing. (#2218)
Release history
All releases on GitHub🚦 Rate limits fixed behind proxies
On instances behind a reverse proxy, Rallly often couldn't tell visitors apart, so everyone shared one rate limit. A few sign ins or responses from anyone could lock out the whole instance with rate limit errors.
Rallly now reads each visitor's address from X-Real-IP, then X-Forwarded-For, so limits apply per visitor again. If requests pass through more than one proxy, set the new TRUSTED_PROXIES variable. The bundled proxy needs no change. See Configuration.
🔍 Search
Press ⌘ K (Ctrl K on Windows and Linux) to find polls, events and members, or to switch spaces.
The command menu searching for "team", listing the poll Team Offsite Planning and the event Team Offsite
✉️ Participant email on by default
New polls ask participants for an email address. Existing polls keep their setting.
The new poll settings with Require email switched on
🐛 Fixes
- The public poll page no longer includes other respondents' email addresses in the page data.
- Gmail's "Add to calendar" works on the organizer's copy of the finalized event.
- Fixed crashes when translating the page in the browser, and when mixing all day and timed options in the poll form.
⬆️ Upgrade notes
- 2 database migrations run on start. Back up before upgrading.
---
Full Changelog: https://github.com/lukevella/rallly/compare/v4.16.1...v4.17.0