Wizzo v0.46.0 Release Notes
Released May 24, 2026Public Beta
Highlights
- Reorganized backlog documentation so `docs/backlog/ACTIVE_BACKLOG.md` is the current execution queue, `docs/backlog/RELEASE_GATES.md` is the validation contract, completed release-prep and AI rebaseline artifacts live under `docs/backlog/archive/`, and sprint-history backlog redirect stubs are removed.
- Added an RC smoke-test gate with `pnpm test:rc-smoke` and `pnpm validate:rc-smoke-gate` so pre-tag checks cover public status/metrics, authenticated chat, Public API token issuance, and core settings surfaces.
- Added rollback drill evidence and `pnpm validate:rollback` so release rollback procedures are validated before release freeze.
- Added release bug bash and freeze evidence plus `pnpm validate:release-freeze` so release-critical issue gates are checked before production validation.
- Added a release notes approval gate with a required issue template, release-owner/product/technical/marketing sign-offs, and `pnpm validate:release-approval` before tagging.
- Added an on-call and escalation runbook with SEV levels, acknowledgement targets, incident issue intake, rollback handoff, and `pnpm validate:on-call-escalation`.
- Moved production scheduled jobs from Vercel Cron to a GitHub Actions external scheduler and added `pnpm validate:external-checks` so release checks are not blocked by Vercel Hobby cron limits or Snyk private-test quota.
- Added an ongoing beta tester bug triage process with beta feedback issue intake, priority/source/cohort/SLA/owner labels, weekly closeout reporting, and `pnpm validate:beta-triage`.
- Added Public API per-client rate limiting, a multi-region cache strategy, and Sprint 43 value-gate carryover closeout under `pnpm validate:scale-readiness`.
- Restored production-grade scheduled job cadence with secure cron bearer auth, scheduled GET routes, and a `pnpm validate:scheduler` production gate.
- Added `NOTIFICATION_WORKER_BATCH_SIZE` so notification queue throughput can be tuned without redeploying code.
- Added a public Terms of Service page, auth/profile links, and a legal framework doc for release-prep review.
Fixes
- Added a Drizzle migration health audit command and development guide so the remaining migration-history debt is explicit and future schema work avoids unsafe journal assumptions.
- Formalized the runtime database schema contract, synced development/preview/production Neon branches to the same expected app tables, repaired missing columns/enums/primary keys, removed the stale `tasks` SQL view, and fixed database verification record counts.
- Fixed scheduled job endpoints so Vercel Cron/external schedulers can use `GET` with `Authorization: Bearer $CRON_SECRET`, while unsigned `x-vercel-cron` headers are no longer trusted.
- Fixed scheduled-job auth so `ADMIN_JOB_TOKEN` is accepted only through `x-admin-token`, keeping bearer auth dedicated to `CRON_SECRET`.
- Gated LogRocket initialization, user identification, app-load tracking, and weekly engagement telemetry behind optional analytics consent.
- Updated bug report intake so new bugs start in triage and get release-priority/source labels from the issue form instead of defaulting every bug to high priority.
- Added executable public and authenticated accessibility gates for sign-in, sign-up, privacy, terms, main chat, settings, connectors, security/privacy, and appearance surfaces; restored visible `aria-live` regions; fixed legal links that relied on color alone; and corrected labeled controls, nested theme-card interactions, and low-contrast warning copy.
- Restored whole-card theme selection behavior without nested interactive controls, prevented saved light-theme preferences from briefly hydrating with dark tokens, and guarded malformed communication-log payloads from crashing settings.
- Adjusted Vercel cron schedules to satisfy Hobby deployment limits and documented the release follow-up for production-grade scheduler cadence.
- Fixed release JSON generation so wrapped changelog bullets and uppercase `Z` characters are parsed correctly.
- Added public status-page coverage to the WCAG 2.1 AA axe release gate.
Known issues
- _None yet_