Changelog
Track the latest updates to Ferqon Server. Release notes will appear here once the first version is published.
Latest
Recent improvementsRecent improvements
- Degraded and grace mode keeps the server usable when upstream services are unavailable, with a maintenance middleware that surfaces status to clients.
- Observability router exposes Prometheus metrics and system status endpoints for drop-in Grafana dashboards.
- Per-deployment identity persists a stable UUID across restarts, replacing machine-bound assumptions with a tamper-evident deployment record.
Security enhancements
- Admin tokens are no longer exposed in URLs and are masked in the UI; secure copy and login flows replace raw token display.
- Sandbox profiles (AppArmor + seccomp default/plugin/strict) constrain what backend processes can do at the syscall level.
- Secure sessions migration and schema hardening tighten constraints on session and wait-queue tables.
- External links across the UI now carry rel="noopener noreferrer" to prevent tabnabbing and referrer leakage.
Performance upgrades
- Response cache middleware short-circuits repeated read-heavy requests.
- Autoscaler and load balancer orchestration spread work across available workers.
- System metrics collection gives visibility into throughput and latency without external agents.
New features
- Signed server update channel verifies Ed25519-signed manifests before install, with a version store for rollback.
- Connection status, offline, and degraded banners in the web UI reflect real-time backend and WebSocket health.
- Runtime mode configuration separates dev and prod behavior explicitly.
Bug fixes
- Fixed claim_device response model mismatch that broke session creation under load.
- Fixed join_wait_queue NOT NULL constraint failure on position when no placeholder was set.
- Fixed force_https_ota_url missing from the config section map and OTA test config.
- Fixed auth initialization race: module-level localStorage access removed, with an isInitialized guard and 5-second timeout.
- Fixed hardcoded WebSocket port to use the configured backend port env var.
Release notes will appear here automatically once the first version is published via the release pipeline. The entries below are preview highlights from the current beta.