Tags

Tags give the ability to mark specific points in history as being important
  • v2.1.0

    ## 2.1.0 (2026-10-21)
    
    - Authentication moved from Tequila to [Entra ID][entra-id]. Sessions are now
      encrypted and their cookies carry the `HttpOnly` and `SameSite` attributes.
    - Upgrade to [Laravel 13][laravel], running on PHP 8.5 in production. The
      `php-fpm` and `workspace` images are now built from the official PHP images
      instead of the Laradock ones.
    - Click locations are resolved with the [DB-IP][db-ip] database rather than
      the `geoip` PHP extension, which is no longer bundled in the images. The
      traffic location stats credit DB-IP accordingly.
    - A QR code is now displayed on the new alias confirmation page, and the QR
      endpoint answers with a valid `Content-Type` and sensible default colours.
    - Owners are notified by email when they are added to an alias, and adding an
      owner now goes through an explicit verification step.
    - New magic redirects for SCR, Lex, SCCTI, Mediacom's EVT, LHDV3, and the FSD
      and RACTU Jira projects. EPFL's Moodle URLs are no longer rewritten.
    - Web analytics moved from Umami to [webanalytics.epfl.ch][webanalytics], and
      every third-party asset is now loaded with subresource integrity.
    - Security hardening: cryptographically secure token generation, rate limiting
      on the report route, stricter alias deletion and reporting rules, safer CSV
      export, and `facade/ignition` updated against [CVE-2021-3129][cve-2021-3129].
    - The Laravel scheduler runs in its own container and no longer relies on a
      cron job forcing the local environment.
    - Repository housekeeping: an `AUTHORS` file, a manual test checklist in
      `TESTS.md`, and `LICENSE` renamed to `LICENSE.md`.
    
    [entra-id]: https://www.microsoft.com/security/business/identity-access/microsoft-entra-id
    [laravel]: https://laravel.com/docs/13.x
    [db-ip]: https://db-ip.com/
    [webanalytics]: https://webanalytics.epfl.ch
    [cve-2021-3129]: https://nvd.nist.gov/vuln/detail/CVE-2021-3129
  • prod

    590458a3 · [fix] Less spam? ·
    prod
  • v1.9.0

    590458a3 · [fix] Less spam? ·
    Release: v1.9.0
    v1.9.0
  • v1.7.0

    ## 1.7.0 (2022-12-07)
    
    * Introduce Service Now magic redirects, for INCIDENT (INCxxxxxx), CHANGE 
      (CHGxxxxxx), CTASK, OUTAGE (OUTxxxxxx), KnowledgeBase (KBxxxxxx), RITM, IDEA, 
      PRB, SVC, RSK and AUD.
    * The API endpoint `aliases` now accept params for sorting the results.
    * Any alias's owner can now add other owners. For now, only Go's admin can
      delete an owner.
    * The whole metrics and monitoring have been updated.
    * QR code for Go's URL are now configurable (https://go.epfl.ch/qr/{alias})
    * Backoffice has now a loader and has been update to [React Router](https://reactrouter.com) v6
  • v1.6.0

    ed18d8e0 · [fix] run at startup ·
    Release: v1.6.0
    v1.6.0
  • v1.2.0

    f6b67553 · [BKP] CRONTAB ·
    Version that was in production from March 2020 to February 2021
  • v1.5.0

    753886bd · [feature] degraded mode ·
    v1.5.0
  • BeforeTPI

    87af19a4 · Quick fix ·
  • vdev-ready

    Laravel, docker and behat