Changelog

What shipped. What we fixed.

Dated, versioned, and honest. No marketing disguised as "release notes."

v1.4.2 · 2026-04-24 LATEST

Full Fastify integration test suite (register → login → CRUD → cross-org isolation)

iputils-ping bundled in worker Alpine image (ICMP checks now function)

Update schemas strict-partial-refine ordering — unknown fields rejected with 400

+ ADDED

apps/web — Astro marketing site on Cloudflare Pages

+ ADDED

Daily Postgres backup cron (7-day gzipped retention)

+ ADDED

Docker host log rotation via daemon.json (10m × 3 gzipped)

+ ADDED

X-Total-Count header on all paginated list endpoints

~ FIXED

Scheduler tick double-firing (exponential backoff into Redis)

~ FIXED

PATCH schemas returned 500 on validation error — now 400 + issue list

~ FIXED

ClickHouse timestamp format — JSONEachRow now accepts epoch millis

✓ TESTS

92 tests total across @upstat/security, auth, schema, queue, api

✓ TESTS

Full E2E: register → login → create → patch → delete monitor

v1.4.0 · 2026-04-24

Correlation IDs threaded scheduler → queue → worker → alert

Loki + Promtail observability stack with pino JSON field promotion

OpenAPI 3 spec at /openapi.json

+ ADDED

Pino child loggers on every BullMQ job (requestId, jobId, monitorId, incidentId)

+ ADDED

Loki datasource pre-provisioned in Grafana

+ ADDED

CORS_ORIGINS env-driven allowlist

+ ADDED

JWT_SECRET minimum bumped to 64 chars

v1.3.0 · 2026-04-24

Full PATCH support on monitors / status pages / maintenance windows

BullMQ DLQ + retry config (5 attempts, 7-day retention)

Scheduler graceful shutdown (await in-flight tick)

Alert idempotency via deterministic jobId

v1.2.0 · 2026-04-24

DNS-resolving SSRF guard — RFC1918, loopback, metadata, IPv4-mapped IPv6

execFile (never exec) for ICMP ping — zero shell-injection surface

Process-level unhandledRejection / uncaughtException handlers

Compose secrets moved out of version control

v1.0.0 · 2026-04-24

First deployable build — 11 services on one Docker host

9 Postgres tables + ClickHouse check_results with 90-day TTL

End-to-end verified: register → login → monitor → check → alert

What shipped. What we fixed.

Full Fastify integration test suite (register → login → CRUD → cross-org isolation)

Correlation IDs threaded scheduler → queue → worker → alert

Full PATCH support on monitors / status pages / maintenance windows

DNS-resolving SSRF guard — RFC1918, loopback, metadata, IPv4-mapped IPv6

First deployable build — 11 services on one Docker host

Every commit, public.