• admin released this 2026-04-15 18:33:13 -06:00 | 37 commits to main since this release

    Bug fix — VERSION promotion regression

    Single-commit patch release fixing a regression in the health-check logic that incorrectly gated VERSION promotion on soft warnings, causing upgrades to roll back unnecessarily.

    Commits:

    • Fix VERSION promotion regression: don't gate on soft health-check warnings (0cd7ba3a)

    Upgrade notes: Safe upgrade; recommended if you've seen unexpected rollbacks after an upgrade.

    Downloads
  • admin released this 2026-04-15 16:57:13 -06:00 | 38 commits to main since this release

    Update system hardening bundle 3 — breaking-release gate, release-mode rollback, Phase 7 budgets, symmetric success archival.

    Downloads
  • admin released this 2026-04-15 16:13:04 -06:00 | 39 commits to main since this release

    Upgrade infrastructure hardening

    Makes upgrade failures observable and adds an out-of-band smoke test from the host.

    Commits:

    • Upgrade failure visibility + atomic VERSION + external smoke test (7c25a2d5)

    Key changes:

    • VERSION file is now written atomically — upgrades either complete fully or not at all, no half-promoted state
    • Upgrade failures surface in admin UI instead of silently reverting
    • scripts/test-deployment.sh can be invoked externally (from dev machine or CI) against the running stack

    Upgrade notes: Safe upgrade.

    Downloads
  • admin released this 2026-04-15 15:40:59 -06:00 | 40 commits to main since this release

    Upgrade watcher timeout extended

    Single-commit patch: raises the systemd changemaker-upgrade.service TimeoutStartSec from 900s to 3600s. Heavy upgrades (image pulls + migrations + seed) can legitimately exceed 15 minutes on slower networks.

    Commits:

    • Bump upgrade watcher TimeoutStartSec 900s → 3600s (39a1b717)

    Upgrade notes: If you have the upgrade watcher installed, re-run bash config.sh (Step 13) or manually update /etc/systemd/system/changemaker-upgrade.service to pick up the new value.

    Downloads
  • admin released this 2026-04-15 11:57:50 -06:00 | 41 commits to main since this release

    Fresh-install + upgrade-path hardening

    Addresses friction surfaced during fresh-install testing — specifically, a boot race between nginx/newt and the API healthcheck window.

    Commits:

    • Fix nginx/newt boot race by raising API healthcheck start_period to 120s (b8a14d1f)
    • Fresh-install + upgrade-path hardening bundle (f07e1961)

    Key changes:

    • API healthcheck start_period bumped 60s → 120s so nginx/newt don't panic during initial migrations
    • Miscellaneous fresh-install and upgrade edge cases from test-bench iterations

    Upgrade notes: Safe upgrade.

    Downloads
  • admin released this 2026-04-12 15:17:59 -06:00 | 43 commits to main since this release

    Changemaker Lite v2.9.1

    Security hardening release with volunteer dashboard improvements and new document/action-campaign features.

    Security

    • Red-team remediation pass (auth, input validation, rate limits)
    • CCP and WIP security updates

    Features

    • Volunteer Dashboard — Redesigned FAFC two-column layout with auto-minted referral codes and action-based points
    • Action Campaigns — New module with admin editor and volunteer-dashboard aggregator
    • Documents — New Document model with upload/download routes (PDFs as first-class media)
    • Event Staffing — Link shifts to ticketed events with auto pre-fill; ShiftKind picker in admin

    Infrastructure

    • CCP restore/tunnel/upgrade improvements
    • upgrade.sh release-mode fixes
    • Documents volume mount + hardened compose health checks

    Installation

    curl -fsSL https://gitea.bnkops.com/admin/changemaker.lite/raw/branch/main/scripts/install.sh | bash
    

    Or upgrade an existing install:

    ./scripts/upgrade.sh --use-registry
    
    Downloads
  • admin released this 2026-04-12 15:17:00 -06:00 | 43 commits to main since this release

    Re-release of v2.9.1

    No code changes vs v2.9.1 — re-cut for release-artifact refresh. If you are on v2.9.1, there is no need to upgrade to v2.9.2.

    Downloads
  • admin released this 2026-04-12 11:09:46 -06:00 | 44 commits to main since this release

    What's New in v2.9.0

    Volunteer Dashboard

    • New Action Campaigns module — admin-defined action steps that volunteers can complete for points
    • Volunteer Dashboard page with two-column FAFC-style layout, highlighted steps, and progress tracking
    • Auto-mint referral codes and action-based points system
    • Visual polish across all volunteer dashboard components

    Documents

    • New Document model with upload and download routes (PDFs as first-class media)
    • Documents volume mount for persistent storage

    Ticketed Events

    • Link event staffing shifts to ticketed events with auto pre-fill
    • Expose ShiftKind selector in admin panel with Dropdown.Button picker
    • Add event description field to ticketed event schema

    Changemaker Control Panel (CCP)

    • Instance Restore — full backup restore workflow with progress tracking and audit logging
    • Pangolin Tunnel Service — subdomain prefix support, teardown action, dedicated CCP-Pangolin client
    • Slug Mutex — concurrent operation safety for agent-side backup/restore
    • Expanded upgrade service with remote driver orchestration
    • 3 new database migrations (instance restore, pangolin subdomain prefix, pangolin teardown action)

    Installer & Upgrade

    • upgrade.sh rewritten to properly handle release-mode installs (no git operations, tarball-based upgrades)
    • config.sh gains --ccp-url, --ccp-invite-code, --ccp-agent-url flags for CCP fleet registration
    • Auto-detect JVB advertise IP in non-interactive mode
    • Hardened Docker Compose health checks

    Full diff: 12 commits, 35 files changed, +4,188 / -326 lines

    Upgrade: ./scripts/upgrade.sh or ./scripts/upgrade.sh --use-registry
    Fresh install: curl -fsSL https://gitea.bnkops.com/admin/changemaker.lite/raw/branch/main/scripts/install.sh | bash

    Downloads
  • admin released this 2026-04-09 14:01:02 -06:00 | 56 commits to main since this release

    Fresh-install hardening — Gitea, Pangolin, non-interactive mode

    Focus release: making fresh installs reliable. Fixes several init-container and first-boot edge cases discovered during end-to-end deployment testing.

    Commits:

    • Add full non-interactive mode to config.sh (b127100c)
    • Fix Pangolin site creation: omit address field from payload (a85e153b)
    • Fix pangolin_create_site blocking on read in non-interactive mode (f38cc9ce)
    • Fix set -e crash in pangolin_create_resources arithmetic (ad9a4481)
    • Automate Gitea init, NocoDB auto sign-in, and fix prod compose (b2cb60f8)
    • Rework Gitea init to use separate init container pattern (97c7bb7c)
    • Fix gitea-init.sh running as root — drop to git user via su-exec (f4744aa1)
    • Fix Gitea init: must-change-password flag syntax + auth check (caeacb9a)
    • Revert NocoDB auto sign-in, keep CSP fix for embed proxy (f97b2fcb)

    Key changes:

    • config.sh gets a true -y non-interactive mode (no TTY prompts) — unblocks CI-driven and automation-driven installs
    • Gitea init moved to a separate init container running as the git user (was previously root-running with race conditions)
    • Multiple Pangolin site-creation bugs fixed (address payload, read blocking, arithmetic errors)
    • NocoDB embed proxy CSP fix retained

    Upgrade notes: Safe upgrade. Affects fresh installs primarily.

    Downloads
  • admin released this 2026-04-09 11:43:23 -06:00 | 66 commits to main since this release

    CCP registration + mobile responsiveness

    First release with CCP registration for existing installs and mobile responsiveness improvements across admin modals.

    Commits:

    • Add register-with-ccp.sh for existing installations (c2f7a23b)
    • Add CCP registration page to CML admin panel (67b21ea9)
    • Add ccp-agent to build pipeline and fix registry image name (2cf2be60)
    • Pass GITEA_SSO_SECRET and SERVICE_PASSWORD_SALT to API container (1e5ade0b)
    • Fix config.sh Pangolin setup and MongoDB init for fresh deployments (599498fc)
    • Update admin modals and page components for mobile responsiveness (82546131)

    Key changes:

    • scripts/register-with-ccp.sh + admin UI for retrofitting an existing CML instance into a CCP fleet
    • ccp-agent now in the build pipeline
    • MongoDB init fix for fresh RocketChat deployments
    • Mobile responsiveness pass on admin modals and pages

    Upgrade notes: Safe upgrade.

    Downloads