Changelog
1.5.0
Released 2026-05-13
Project NEXUS is now Generally Available. After running as a release candidate since 2026-03-27, the v1.5 line — covering the full Laravel 12 migration, the React SPA frontend, federation, multi-tenant scoping hardening, the SEO overhaul, the email system rewrite, and the PWA update architecture — is promoted to GA. The platform as a whole is live and supported; newer modules may still ship with their own per-module maturity label.
Changed
- Release marker promoted from RC → GA.
RELEASE_STATUS.stageKeyis now'ga'with label "Generally Available (v1.5)". The amber "Release Candidate" footer strip is replaced with a calm GA strip linking to the new Features page and the public Changelog (this file, on GitHub). - Footer Changelog link now points to
CHANGELOG.mdin the source repository — the canonical, public-facing version history. /development-statuspage replaced with/features— a public marketing-grade features inventory with honest per-module maturity chips (GA / Beta / Preview). The old/development-statusURL 301s to/featuresso existing bookmarks survive. Federation is explicitly labelled Beta — Live with external partners, protocols still hardening to reflect reality: real partnerships exchange data daily while the wire protocols are still being hardened against edge cases.- PWA update flow rewritten (2026-05-10). Replaced precache-shell + click-to-update workflow with NetworkFirst HTML + API stale-client gate. The HTML shell is no longer precached by the service worker; navigations are served NetworkFirst with a 3s timeout. Every API response carries
X-Build: <sha>; the frontend interceptor force-redirects to/api/sw-resetif a build mismatch persists past a 10-minute grace window. Sentry events are now tagged withbuild_commitandbuild_time. Deploys propagate to users on their next navigation, with no UI prompt. Seereact-frontend/CLAUDE.md#pwa-update-architectureand thefeedback_pwa_android_update.mdmemory file for the full architecture.
Removed
react-frontend/public/sw-rescue.js— service worker rescue shim that force-navigated clients viaclient.navigate(). Made redundant by NetworkFirst./clear-site-datanginx route. Older SWs intercepted it and served the precached SPA shell, making it useless for actually-stuck users./api/sw-resetdoes the same job and bypasses every SW we've ever shipped via the universal/^\/api\//denylist.- "Update to the latest version" link in the mobile drawer (and the
nav.update_apptranslation key in all 11 languages, thetriggerSoftAppUpdatehelper). With NetworkFirst + the API gate, no user will ever need a manual force-update button.
Added
- Public
SECURITY.mdvulnerability disclosure policy. - Public
CODE_OF_CONDUCT.mdcommunity participation expectations. - Dependabot coverage for Composer, npm, Docker, and GitHub Actions.
- Dependency Review workflow for pull request dependency changes.
- Tag-driven GitHub Release workflow and release process documentation.
- Request ID middleware that returns
X-Request-Idand shares request, tenant, and user context with application logs. - Comprehensive documentation suite
- API Endpoints V2 reference (80+ endpoints documented)
- React Component Library documentation (40+ components)
- Developer Guide for extending the platform
- User guides for Smart Matching and Reviews System
Changed
- README now documents the public repository topology, visible quality gates, security process, and release process.
- README now clarifies that native mobile packaging is separate from the default public Docker workflow.