v0.1.51

Features

• accept the system.updateCheckEnabled app setting as a boolean (cfbc054)
• add the critical station security events panel and alert (ab33afa)
• check the driver RFID self-service switch in appSettings (c3f3e38)
• check the driver distance unit and language defaults in appSettings (fdc597e)

Bug Fixes

• (config): refuse a list for the driver default settings (01fcba7)

Other Changes

• Releasing version 0.1.51 (9395170)

v0.1.50

Features

• add Grafana panels and alerts for the v0.1.50 features and worker jobs (a78cba0)
• (config): add loadManagement.allowSimulatedEnergyAssets for simulated battery and solar readings (2238616)
• (waf): exempt the bus depot path /vdv463 from the country rule (f84e75c)
• add the bus depot interface switch and its Redis channel (10133a9)

Tests

• accept a Cloudflare R2 origin in storage.imgSrc (68f90e3)

Chores

• (observability): sync dashboards from the CSMS (c5bf1a4)

Other Changes

• Releasing version 0.1.50 (789cc65)

v0.1.49

Features

• set the storage image origins of the CSP on the csms and portal tasks [skip ci] (c69c458)
• add the payment terminal settings, simulated terminal gate and webhook WAF rule [skip ci] (9db7701)
• accept the 1NCE SIM provider switch and client id in appSettings [skip ci] (555eb90)

Bug Fixes

• (ecs): run every task on on-demand Fargate and refuse Fargate Spot [skip ci] (15203e0)
• (waf): share one exemption and rate limit for the payment webhooks within 1,500 WCU [skip ci] (2245e08)

Other Changes

• Releasing version 0.1.49 (772ceb6)

v0.1.48

Features

• raise the ALB idle timeout default to 600 seconds for station data plans [skip ci] (577c06d)
• check the SIM provider settings and refuse the SIM provider mock (7cf26b7)
• check required MFA for drivers and note a passkey RP ID the portal does not share (0a2c453)
• validate the passkey settings and the WebAuthn relying party ID (ac2b34a)
• validate the required MFA app settings (ce94259)
• validate the password policy and session lifetime app settings (4ec33f7)

Bug Fixes

• give the api task the simulator TLS address (bf40642)
• grant the shared rate limit and station credential keys in the Redis rules (7664ef2)
• acknowledge the cdk-nag findings of the OCPP TLS load balancer (3a0b886)
• accept an uppercase WEBAUTHN_RP_ID and cap the required MFA roles (b853648)
• refuse an IP address or a single label as the WebAuthn relying party ID (320e020)
• refuse required MFA without email or TOTP (9d9b8a3)

Documentation

• describe database storage sizing and log retention for large networks (63a3fb6)
• document the three OCPP station entry points and how to turn each on (b4e34fa)

Chores

• let the api user add driver avatar cleanup jobs in the Redis ACL [skip ci] (214368c)
• (dev): turn on every OCPP station entry point in dev (7f88a2a)

Other Changes

• Releasing version 0.1.48 (a6bafd7)
• feat!: refuse service env overrides of the values the stack derives (15b0a0a)
• feat!: refuse data retention keys in appSettings (59196a1)
• fix!: refuse a weakened prod config (ab99138)

v0.1.47

Features

• (invoices): validate the invoice bank details and EPC QR code settings (bbe1b91)

Bug Fixes

• (redis): grant the ocpp user the payment-stops queue (60a4bee)

Tests

• drop an unnecessary type assertion in the API and OCPI proxy check (6d8094d)

Chores

• (redis): remove the unused worker hand-off channels from the api, ocpp and worker users (51ae33e)

Other Changes

• Releasing version 0.1.47 (3c8d2b2)

v0.1.46

Features

• (config): check the insight expiry setting (f3d3ac6)
• (network): remove the NAT id stack exports kept for App stacks before 0.1.43 (327ced4)

Bug Fixes

• (config): check the offline end threshold of stuck sessions (c909f9f)
• (cache): grant the api user the guest start counter keys (13fb7c8)
• (api): trust the load balancer for client addresses (fe1dbbe)
• (db-job): wait up to 55 minutes for migrations that build indexes concurrently (fa8b07b)
• (redis): grant api and ocpp the worker queues they add jobs to (dc98a1d)
• (ocpi-sim): give the simulators the advertised OCPI URL as their target (feba792)
• (deps): update aws-cdk-lib to 2.273.0, which bundles brace-expansion 5.0.12 (b3f56f2)
• (redis): let the api user add member-invoices jobs (a1b810b)

Other Changes

• Releasing version 0.1.46 (51d861a)

v0.1.45

Features

• (config): replace the MCP proposal TTL with ai.mcp.allowWrites (ec33947)
• (config): validate the driver support AI settings and grant the driver AI channel (b76f165)

Reverts

• restore 0.1.45 for its re-release (cd3ffe0)
• withdraw 0.1.45 until it is re-released (4a6d541)

Other Changes

• Releasing version 0.1.45 (a964206)

v0.1.44

Features

• (redis): grant the automatic insight request channel (48e8517)
• (config): validate the AI insight, worker, MCP and budget app settings (d96e517)

Other Changes

• Releasing version 0.1.44 (05a4a9a)

v0.1.43

Features

• (config): validate the AI assistant settings and its upload bucket rules (d2db13a)
• add a prod sizing preset, Valkey replica steps, NAT ids in SSM, endpoint rules, worker scaling (4d44e10)

Bug Fixes

• (redis): grant the api user the AI rate limit counter keys (9270077)
• (redis): let the worker hold its job locks (9540b44)
• (grafana): show OCPP connected stations per server (d5beb0f)
• (grafana): restore the Process panels in System Metrics (b6fdcce)
• (grafana): show total active requests across API tasks [skip ci] (6c74e06)
• (grafana): name series in legends instead of only the instance address (4e6d2fb)
• (grafana): collapse per-task copies of database gauges (3420247)

Documentation

• say why several worker tasks are safe (20042b1)

Tests

• check that the worker task role can delete app bucket objects (ba55029)

Other Changes

• Releasing version 0.1.43 (f98794f)

v0.1.42

Features

• (config): refuse the notification test sink in every environment (5bbed5b)

Other Changes

• Releasing version 0.1.42 (64a7e7b)