Tagged 'release'
- 2026-09-241.30.1 — Sign in with Apple completes behind Bouncer
A Bouncer-gated login page no longer challenges a visitor returning from Sign in with Apple, so the sign-in completes instead of looping back to the login page.
- 2026-09-241.30.0 — Sign-in administration and fleet configuration fixes
Adds system Sign-in setup, fixes Apple callback session handling, and improves fleet configuration editing and the bundled settings viewer. Quoted configuration strings now decode Python escapes; review literal backslashes before upgrading.
- 2026-09-241.29.4 — Chat delivery follows live access; atomic member saves
Open realtime sockets stop receiving chat as soon as a user loses access. Group member saves now commit together with their signal cleanup. Serializing a file's renditions reuses prefetched rows.
- 2026-09-231.29.3 — Password-aware account closure
Adds a read-only password capability to the signed-in user response so clients can choose the correct account-closure confirmation for password and Apple, Google, or passkey sign-ins.
- 2026-09-211.29.2 — Immediate account closure and the fleet operator tool
Adds immediate in-app account closure for a signed-in session with Sign in with Apple token revocation, erases every credential and sign-in link when an account closes, and ships an operator tool for surgical config edits, health-gated rolling restarts and node/database health.
- 2026-09-181.29.0 — Fleet Configuration and verified job activation
Adds structured Admin/REST configuration publishing and restore, graceful job activation with per-node revision checks, and S3 client reuse. Existing GeoIP publishers must enable S3 versioning before upgrading.
- 2026-09-181.29.1 — Bounded file renditions
Stops automatic full-length video transcodes and ensures external rendition tools cannot hold workers or survive them indefinitely.
- 2026-09-161.28.2 — Opt-in realtime group-topic permissions
Adds optional permission checks for realtime group subscriptions and message delivery, including revocation checks on existing connections.
- 2026-09-151.28.1 — Mobile verification recovery and inbound email fixes
Improves hosted Bouncer verification on mobile, adds a support review path, and makes SES receiving setup report actual readiness.
- 2026-09-141.28.0 — Push verification and realtime disconnect fixes
Fixes server-enforced WebSocket disconnection and makes push verification truthful. Includes stricter push-test input and authentication requirements.
- 2026-09-141.27.1 — Remove the hosted Bouncer slider
Replaces the hosted Bouncer slider with Continue and removes its retry cooldown, fixing the interaction blocking mobile visitors.
- 2026-09-131.27.0 — Safe secret failures, private Assistant history, and chat moderation control
Adds a runtime chat moderation switch and repairs secret storage, conversation privacy, and test reliability. KMS secret readers and key-backed Assistant integrations must account for changed access behavior.
- 2026-09-131.26.0 — Advisory chat moderation and hosted sign-in recovery
Chat now preserves flagged messages with moderation scores and reasons for clients to hide or reveal. Hosted login, registration and contact pages gain bounded challenges, explicit recovery guidance and fresh form tokens. Chat consumers must update display handling and coordinate writer upgrades.
- 2026-09-131.25.3 — Trusted brand context for login handoffs
Gated login handoffs consistently use the trusted destination brand for geofencing, login records and application callbacks, while preserving device attribution and the original request context.
- 2026-09-111.25.2 — Manual job retry publishes a runnable, linked replacement
Retrying a failed, canceled or expired job now publishes a replacement with a fresh expiration and leaves the original as a terminal record linked to it. Before, an expired job's retry inherited its past deadline and expired before running, and the original was reset to `pending` with its diagnostic…
- 2026-09-111.25.1 — Admin feedback and Phone Hub connection fixes; faster Redis cleanup
Updates the bundled Admin to portal-mojo 0.2.4 with visible modal notifications, accurate Phone Hub connection results and safer confirmations, and reduces Redis round trips for cleanup and cache invalidation.
- 2026-09-111.25.0 — Date of birth is immutable after signup; consumer roles for brand metrics
Two framework changes. `account.User.dob` can no longer be changed by the account holder once a value is stored — on an age-gated deployment that field is the eligibility record, and it was editable at any time after signup. That is breaking for any consumer offering a self-service date-of-birth edi…
- 2026-09-101.24.27 — Metrics anonymous read surface hardened
Three fixes on the anonymous /api/metrics/* read surface: a bounded date range (one request could previously materialise ~105M Redis keys), value/get answers 400 instead of an anonymous 500 that filed a level-12 incident per call, and a configured view permission on the public account is now actuall…
- 2026-09-101.24.26 — Updated Admin portal with custom SMS
Bundles portal-mojo 0.2.3 with custom SMS composition, responsive detail dialogs, safer lifecycle controls, and expanded incident evidence.
- 2026-09-101.24.25 — Allow realistic broker startup time
MojoSec now gives short-lived firewall broker startup and readiness checks a bounded five-second correlation window, eliminating a narrow false-positive edge on busy nodes.