# CPalius CMF 2.2.5

**Released:** 2026-09-24 · **Channel:** stable · **Critical:** yes

Turkish: [2.2.5-tr.md](2.2.5-tr.md)

2.2.4 rebuilt frontend assets on the server and deleted the working stylesheet manifest when Tailwind could not run. Every page then returned 500.

## What's fixed

**Styles survive the update.** The built Tailwind CSS ships in the package. The updater copies it into place before compiling, and it does not throw away the existing manifest when that file is missing.

**Login telemetry.** Passwords and tokens are no longer stored in the security log.

## Upgrade notes

If 2.2.4 already took the site down, the updates screen cannot open. Copy `cp-core/assets/tailwind/app.built.css` from this package to `cp-core/var/tailwind/app.built.css` on the server (create the folder). The site comes back, and the update button works again.

Sites still on 2.2.3 can update straight to 2.2.5.