Skip to content

chore(release): v0.18.0 - #252

Merged
fclairamb merged 2 commits into
mainfrom
release-please--branches--main
Aug 25, 2026
Merged

fclairamb merged 2 commits into
mainfrom
release-please--branches--main

Conversation

@fclairamb

@fclairamb fclairamb commented Aug 24, 2026 •

Copy link
Copy Markdown
Owner

🤖 I have created a release beep boop

0.18.0 (2026-08-25)

Features

  • Discord bot, audit log, SLO burn-rate alerts, path tracing, support inbox, status-page branding & private pages (#246) (87b33d7)

Bug Fixes

  • slack: register the login callback in the prod manifest (#251) (32fae86)

This PR was generated with Release Please. See documentation.

@fclairamb fclairamb changed the title chore(release): v0.17.1 chore(release): v0.18.0 Aug 25, 2026
@fclairamb
fclairamb force-pushed the release-please--branches--main branch from 85352a9 to a35a7dc Compare August 25, 2026 00:00
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@fclairamb

Copy link
Copy Markdown
Owner Author

Release v0.18.0

The changelog on this branch has been rewritten into human-readable prose — the generated one-liner has been expanded into 19 feature entries and 12 fixes grouped by theme. Highlights:

Discord bot — a real bot, not a webhook. Incidents become bot-owned threads that edit in place and carry acknowledge/comment buttons; org members map to Discord identities for on-call mentions; thread comments flow back onto the incident through a Gateway supervisor. Interactions are Ed25519-verified, rejecting stale and unsigned requests.

Audit log — typed events with actor metadata and a normalized source address across every session-minting path, membership change, token operation, config apply and service mutation. Redaction fails closed, failed logins are flood-controlled, retention is swept. Admin-gated audit page with family/type/actor/target/IP filters and working cursors.

SLO burn-rate alerting — multi-window alert policies; burn incidents are a distinct incident kind with their own lifecycle, templates and sweep job.

Path tracing — a pure-Go MTR-style prober traces the route when a network failure opens an incident. Pinned never-public.

Support inbox — inbound human messages from email, WhatsApp, Telegram, SMS, Slack DMs and Discord DMs, with idempotent capture, abuse ceilings and a mailbox mirror. The JMAP consumer is now safe to run more than once.

Status-page branding & private pages — per-page logo/favicon behind a white-label entitlement, password protection, webhook and Slack subscriptions.

Plus incident screenshots on a new attachment rail, acknowledgement actor surfaced everywhere, flapping made visible, check groups handled as groups, custom-domain lifecycle with grace/re-promotion, a self-monitoring watchdog, region migration with ghost detection, forced password rotation, an UptimeRobot importer, self-healing stale SSO provider links, and a broad pass making result/chart queries seek instead of scan.

No breaking changes. Full detail in CHANGELOG.md.

@fclairamb
fclairamb merged commit 068c1d5 into main Aug 25, 2026
11 checks passed
@fclairamb
fclairamb deleted the release-please--branches--main branch August 25, 2026 00:03
@fclairamb

Copy link
Copy Markdown
Owner Author

🤖 Created releases:

🌻

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant