2026
- 2026-08-221.15.28 — Application-owned fleet health checks
Brownfield AWS fleets can now bind each load-balancer target group to the application’s real readiness endpoint while existing managed deployments keep the historical `/api/version` behavior.
- 2026-08-221.15.27 — Remote agents and guarded AWS migration
django-mojo now lets operators connect external AI clients through OAuth 2.1-secured MCP, optionally grant explicit full REST access, and manage or revoke those connections from Admin. It also adds exact-reference brownfield fleet provisioning and rehearsed, journaled preserved-EIP NLB handoff and r…
- 2026-08-221.15.26 — Fresh nodes converge from the pinned framework
Fresh managed nodes now materialize the pinned django-mojo deployment contract before project convergence, and their instance role can resolve the exact public AL2023 image parameter required by provisioning.
- 2026-08-221.15.25 — Capacity follows provider truth
Admin capacity now keeps owned EC2, RDS, and ElastiCache members visible through provider transitions, scopes them to the declared MojoLand environment, and disables unsafe replay or controls until fresh AWS state is settled.
- 2026-08-221.15.24 — System Setup describes release-bucket CORS accurately
System Setup now distinguishes an already-permissive wildcard CORS rule from the missing dedicated portal-origin rule, so its warning tells operators exactly what is absent without claiming uploads are blocked.
- 2026-08-221.15.23 — System Setup reports complete readiness
System Setup now keeps complete readiness totals inside its safety limits, clearly reports omitted detail, and never offers a repair for a passing check.
- 2026-08-221.15.22 — WebApp routes survive address restore
Taking a WebApp offline and restoring its address now keeps its custom API and path routes instead of silently rebuilding only the managed sign-in routes.
- 2026-08-221.15.21 — Restored WebApp addresses reapply the live release
Putting an existing WebApp back on an address now starts a fresh fleet convergence for its already-current release instead of leaving the address on the welcome page.
- 2026-08-221.15.20 — Reliable legacy WebApp restore and honest offline state
Legacy WebApps can now be put back on their managed address without profile or DNS dead ends, while the Admin accurately reports apps that are offline.
- 2026-08-221.15.19 — Bounded Assistant approvals and operational tools
The Admin Assistant now has a complete operator surface, owner-managed credentials, server-owned approval cards for every mutation, and permission-aware WebApp and cloud operations. Maintenance refreshes also discover new django-mojo releases immediately.
- 2026-08-221.15.18 — Framework updates now reach the fleet
Admin framework updates now enter normal deploy coordination after creating their durable retry attempt, so the canary/fleet rollout starts instead of leaving a deployment permanently requested with an empty queue.
- 2026-08-221.15.17 — Consistent WebApp aliases, routes, and offline teardown
WebApp custom domains now inherit the primary address’s complete route contract, legacy trailing-slash routes converge safely, and taking an app offline removes every supported serving address atomically without touching unrelated vhosts.
- 2026-08-211.15.12 — Opt-in read-replica routing for the database and Redis
This release adds opt-in read-replica support for both the database and Redis — off unless you configure it — plus three bug fixes: safer Redis URL credential encoding, a fix for provisioning a brand-new empty account, and a fix for the admin assistant's rate-limit inspection tool.
- 2026-08-211.15.16 — Safer WebApp reruns and regional S3 uploads
WebApp workflow reruns now create distinct immutable releases, S3 uploads use the selected AWS region without overriding compatible-storage endpoints, and Admin rate-limit inspection is fair and bounded across standalone Redis and Redis Cluster.
- 2026-08-211.15.15 — MojoSec auth/host correlation, campaigns, and the blocking lifecycle
MojoSec now correlates SSH, sudo, and service/OOM evidence into per-node cases (an SSH failure burst followed by a success from the same address pages critical), coalesces distributed scanners into one campaign per tenant group, and owns all automatic MojoSec-driven IP blocking through a bounded rec…
- 2026-08-211.15.14 — Deploys stop dying over PyPI cache lag; fail-closed test isolation
The framework install becomes a convergence that fails open: the target is confirmed against PyPI's JSON API, installed with cache-bypassing retries on every pip version, and a target that still will not install files a deploy warning and deploys on the installed framework instead of killing a teste…
- 2026-08-211.15.13 — The nginx map wedge heals itself; capacity resize + batch plans; MojoSec authoritative cases
Heals the nginx WebSocket-map wedge introduced by 1.15.10 end to end: a wedged node repairs itself on its first deploy of this release, edge generations adapt to whichever side of the node's graph declares the map, and a live generation can never again be rewritten in place. Also ships capacity resi…
- 2026-08-201.15.9 — Provisioned nodes can finally take a deploy
A provisioned environment came out of `apply` looking finished — nodes serving, HTTPS valid — and could not accept a single deploy. `/opt/api` was not a git checkout, so the deploy plane's `git fetch && git reset` had nothing to work with; no webhook secret was ever generated, so GitHub's push deliv…
- 2026-08-201.15.8 — Stable outbound IPs for provider allowlists
Providers that require IP allowlisting need a fixed set of addresses, and a fleet whose nodes take whatever public IP AWS hands them cannot supply one. This release adds a Stable outbound IPs control to the Admin fleet screen: one confirmed action gives every registered node a permanent Elastic IP,…
- 2026-08-201.15.7 — The whole portal shows its work
A patch release completing the admin-portal responsiveness sweep. Every click that goes and does work now shows that it is doing it, across all the remaining surfaces — the WebApps list and app page, the onboarding wizard, Domains and DNS, settings, SMS, email, activity, the dashboard inspectors, th…