IncidentRelay 2.0 introduces managed Event Orchestration, new integrations, and more flexible alert lifecycle controls.
Event Orchestration
A new event-processing layer between integrations and the alert lifecycle:
- Visual rule builder.
- Global and service-scoped orchestrations.
- Nested conditions and action sequences.
- Severity, priority, label, routing, grouping, and policy changes.
- Suppress, drop, and pause actions.
- Regex extraction, JSON path processing, and variables.
- Safe templates and reusable webhook actions.
- Drafts, validation, immutable versions, publishing, and rollback.
- Simulation and replay without creating real alerts.
- Shadow mode for safe testing.
- Execution traces, Explain output, and shadow metrics.
- legacy, hybrid, and orchestration compatibility modes.
Uptime Kuma Integration
Native support for standard Uptime Kuma webhook payloads:
- Automatic heartbeat and monitor payload normalization.
- UP and DOWN state handling.
- Severity and status mapping.
- Tag and custom field support.
- New uptime_kuma route source.
- Setup and troubleshooting documentation.
Silences and Maintenance Windows
Improved control over existing alerts:
- apply_to_existing applies a silence or maintenance window to already open alerts.
- reactivate_on_end controls whether suppressed alerts resume after the window ends.
- Notifications, reminders, and escalations are paused and resumed correctly.
- Automatic reconciliation after configuration changes.
- Improved timezone and datetime handling.
Secure Webhook Actions
Event Orchestration webhook actions now support: - Encrypted HTTP headers.
- Safe request body templates.
- Configurable timeout and retry policies.
- Private-network request protection.
- Allowlisting for approved internal destinations.
- Secret redaction in URLs, responses, and execution logs.
- Asynchronous execution without delaying incoming alert processing.
Granular API Token Scopes
New read and write scopes are available for major API domains:
- Alerts, incidents, and services.
- Teams, groups, and users.
- Rotations, routes, and channels.
- Maintenance and heartbeats.
- Policies and orchestrations.
- SSO, profile, and audit.
Existing resources:read, resources:write, and * scopes remain supported for backward compatibility.
Audit Log
A new audit log interface provides:
- Event filtering.
- Pagination.
- Safe data display with secret redaction.
- Improved auditing for orchestrations, maintenance windows, and silences.
Interface and Localization
- New dark theme.
- Per-user language and theme preferences.
- French localization.
- Improved localization for Event Orchestration, maintenance, and silences.
- Fixed SSO group mapping editing.
Heartbeats and Notifications
- Improved overdue transition handling.
- Duplicate overdue events are prevented.
- Heartbeat recovery correctly resolves alerts and sends resolved notifications.
- Consistent timestamp serialization.
- Improved heartbeat instance handling.
Kubernetes and Slack
- New Kubernetes and Helm installation documentation.
- The Helm chart now includes a dedicated Slack Socket Mode worker.
- Interactive Acknowledge and Resolve actions now work in Kubernetes deployments.
Reliability and Security
- Centralized UTC and timezone-aware datetime handling.
- Improved rotation scheduling.
- Stronger protection against SSRF, unsafe regular expressions, and secret exposure.
- Safer outbound HTTP request handling.
- Improved API payload validation.
- Expanded unit, integration, and regression test coverage.
Upgrade Notes
Create a database backup before upgrading. Database migrations are applied through the standard IncidentRelay migration process.
For a safe Event Orchestration rollout, start with shadow mode and hybrid compatibility mode. Review execution traces and shadow metrics before switching orchestrations to active mode.