• 1.0latest1Docs2026-10-12 13:22

  Change detail

  1 change across 1 operation

  AllBreakingWarningInfo

  • GET/health
    • info

      added the non-success response with the status 503

• Verify the audit log every hour and alert when it fails2Docs7a4435d2026-10-12 04:05

  Change detail

  2 changes across 2 operations

  AllBreakingWarningInfo

  • GET/audit-logs/verification
    • info

      endpoint added

  • GET/health
    • info

      removed the non-success response with the status 503

• Audit fail-closed: nothing acts unless its audit entry was written first1Docsa71066e2026-10-12 03:58

  Change detail

  1 change across 1 operation

  AllBreakingWarningInfo

  • GET/health
    • info

      added the non-success response with the status 503

• Debug logs: redact proxy responses and SQL args; MFA page reads the login initiator from the gateway1Docs2614d732026-10-12 01:14

  Change detail

  1 change across 1 operation

  AllBreakingWarningInfo

  • GET/auth/cli/initiator
    • info

      endpoint added

• Redact env var values in audit logs and Slack by default2Docsd065d112026-10-11 06:13

  Change detail

  2 changes across 2 operations

  AllBreakingWarningInfo

  • DELETE/apps/{app}/settings/audit-visible-env-vars
    • info

      endpoint added

  • PUT/apps/{app}/settings/audit-visible-env-vars
    • info

      endpoint added

• Settings review fixes: strict variable names and values, clearable ignored valuesno API changesDocs2d85b992026-10-11 03:59
• Settings: environment variables pin their settings6Docs8e236952026-10-11 03:22
• Review fixes: 409 body, deployed counts as done, explicit agent approvals1Docs187da942026-10-10 06:52
• Deploy approvals: one open request per app; approve several apps in one runno API changesDocs105abf52026-10-10 06:20
• Merge branch 'nathan/security-cli-loopback' into nathan/security-webauthnno API changesDocsfa0b2182026-10-09 23:11
• Review fixes for the loopback CLI login7Docs084c03e2026-10-09 23:06
• Merge branch 'nathan/security-authz' into nathan/security-webauthn13Docseb440ab2026-10-09 21:54
• Merge branch 'nathan/security-authz' into nathan/security-cli-loopback4Docsd3b4f072026-10-09 21:53
• Self-service for non-admin roles; route table checked against the router3Docs11acd992026-10-09 07:31
• Accept backup codes in the web UI; verify the browser on CLI login MFAno API changesDocsbb1d8672026-10-09 07:21
• Store WebAuthn challenges server-side; verify gateway TLS in the CLI13Docscd8e7df2026-10-09 05:02
• CLI login: RFC 8252 loopback flow bound to the approving browser4Docs547a6a82026-10-09 04:49
• Authorize every gateway API route; scope API tokens to their own permissionsno API changesDocs2c4fe532026-10-09 02:12
• feat: add version display to web UI, CLI version command, and gateway commandno API changesDocs3f885d82025-11-28 03:16
• fix: refactor audit log detail dialog to reduce cognitive complexityno API changesDocs453372e2025-11-27 03:44
• fixed more ci issuesno API changesDocs10b21382025-11-26 03:34
• fixed many more linting issues, added more deploy approval expiration features1Docsf18bd452025-11-21 03:59
• redirect after login1Docs46283552025-11-19 03:48
• fix mfa issues for cli, make sure we mark which ones can be used for clino API changesDocs0a861932025-11-13 05:52
• work on paginationno API changesDocs29249e62025-11-02 00:48
• more work on river bg jobs, set up minio for dev to test WORM store2Docs359bd9e2025-11-01 23:27
• fix go tests2Docs14f33532025-10-30 12:12
• fixed ci tasksno API changesDocs62129af2025-10-30 04:27
• fixes for migrations and bg jobs for emailsno API changesDocsb4df5ca2025-10-30 03:56
• more work on river2Docsf49ca6a2025-10-29 07:54
• slack notifications4Docs25c95d32025-10-29 04:53
• fix cino API changesDocs23e05ad2025-10-29 01:54
• updated go depsno API changesDocs887e5a62025-10-28 22:44
• much more refactoring work1Docsb5a886a2025-10-28 08:04
• refactor deploy approval handlers6Docs50dd7e22025-10-18 12:08
• added proper immutable, tamper-proof audit logsno API changesDocs1766d3d2025-10-17 10:43
• fix app env endpoint - get the app name from the pathno API changesDocs18627372025-10-14 14:22
• EVEN MORE work on MFA11Docs266479b2025-10-14 12:02
• making progress on mfa slowly18Docs9ddcfa42025-10-14 09:13
• big refactor3331Docs62a11572025-10-13 05:33
• tightened up rbac constants and mappings1Docs062d8732025-10-13 01:23
• removed .gateway prefix from routes, renamed /web/ to /app/, moved all api routes under /api/v1/, renamed convox cli => rack proxy routes to /api/v1/rack-proxyno API changesDocsfa2ec2a2025-10-12 14:31
• use batch endpoints for settings, fixed toast colors44Docse3c3c8b2025-10-12 01:41
• redesigned MFA enrollment flowno API changesDocs80672b42025-10-12 00:15
• more work on github/circleci integrationsno API changesDocscaae4d22025-10-11 11:47
• more settings workno API changesDocsf6510272025-10-11 10:43
• added app settings page, refactored settings11Docs55e602f2025-10-11 09:47
• settings refactor68Docs1ecc7f32025-10-11 08:22
• initial git supportno API changesDocsa288aaa2025-10-10 21:35
• much nicer deploy approval pageDocsf9dc17e2025-10-10 00:21

Revisions go back to the API's first capture.