Cookies on Project NEXUS Accessible

We use some essential cookies to make this service work.

We would also like to use analytics cookies so we can understand how you use the service and make improvements.

View cookies
Skip to main content

Beta Give feedback

Back to all releases
Changelog

1.5.0

Released 2026-05-13

Project NEXUS is now Generally Available. After running as a release candidate since 2026-03-27, the v1.5 line — covering the full Laravel 12 migration, the React SPA frontend, federation, multi-tenant scoping hardening, the SEO overhaul, the email system rewrite, and the PWA update architecture — is promoted to GA. The platform as a whole is live and supported; newer modules may still ship with their own per-module maturity label.

Changed

  • Release marker promoted from RC → GA. RELEASE_STATUS.stageKey is now 'ga' with label "Generally Available (v1.5)". The amber "Release Candidate" footer strip is replaced with a calm GA strip linking to the new Features page and the public Changelog (this file, on GitHub).
  • Footer Changelog link now points to CHANGELOG.md in the source repository — the canonical, public-facing version history.
  • /development-status page replaced with /features — a public marketing-grade features inventory with honest per-module maturity chips (GA / Beta / Preview). The old /development-status URL 301s to /features so existing bookmarks survive. Federation is explicitly labelled Beta — Live with external partners, protocols still hardening to reflect reality: real partnerships exchange data daily while the wire protocols are still being hardened against edge cases.
  • PWA update flow rewritten (2026-05-10). Replaced precache-shell + click-to-update workflow with NetworkFirst HTML + API stale-client gate. The HTML shell is no longer precached by the service worker; navigations are served NetworkFirst with a 3s timeout. Every API response carries X-Build: <sha>; the frontend interceptor force-redirects to /api/sw-reset if a build mismatch persists past a 10-minute grace window. Sentry events are now tagged with build_commit and build_time. Deploys propagate to users on their next navigation, with no UI prompt. See react-frontend/CLAUDE.md#pwa-update-architecture and the feedback_pwa_android_update.md memory file for the full architecture.

Removed

  • react-frontend/public/sw-rescue.js — service worker rescue shim that force-navigated clients via client.navigate(). Made redundant by NetworkFirst.
  • /clear-site-data nginx route. Older SWs intercepted it and served the precached SPA shell, making it useless for actually-stuck users. /api/sw-reset does the same job and bypasses every SW we've ever shipped via the universal /^\/api\// denylist.
  • "Update to the latest version" link in the mobile drawer (and the nav.update_app translation key in all 11 languages, the triggerSoftAppUpdate helper). With NetworkFirst + the API gate, no user will ever need a manual force-update button.

Added

  • Public SECURITY.md vulnerability disclosure policy.
  • Public CODE_OF_CONDUCT.md community participation expectations.
  • Dependabot coverage for Composer, npm, Docker, and GitHub Actions.
  • Dependency Review workflow for pull request dependency changes.
  • Tag-driven GitHub Release workflow and release process documentation.
  • Request ID middleware that returns X-Request-Id and shares request, tenant, and user context with application logs.
  • Comprehensive documentation suite
    • API Endpoints V2 reference (80+ endpoints documented)
    • React Component Library documentation (40+ components)
    • Developer Guide for extending the platform
    • User guides for Smart Matching and Reviews System

Changed

  • README now documents the public repository topology, visible quality gates, security process, and release process.
  • README now clarifies that native mobile packaging is separate from the default public Docker workflow.

Back to all releases