Skip to main content

Wizzo v0.46.0 Release Notes

Released May 24, 2026Public Beta

Highlights

  • Reorganized backlog documentation so `docs/backlog/ACTIVE_BACKLOG.md` is the current execution queue, `docs/backlog/RELEASE_GATES.md` is the validation contract, completed release-prep and AI rebaseline artifacts live under `docs/backlog/archive/`, and sprint-history backlog redirect stubs are removed.
  • Added an RC smoke-test gate with `pnpm test:rc-smoke` and `pnpm validate:rc-smoke-gate` so pre-tag checks cover public status/metrics, authenticated chat, Public API token issuance, and core settings surfaces.
  • Added rollback drill evidence and `pnpm validate:rollback` so release rollback procedures are validated before release freeze.
  • Added release bug bash and freeze evidence plus `pnpm validate:release-freeze` so release-critical issue gates are checked before production validation.
  • Added a release notes approval gate with a required issue template, release-owner/product/technical/marketing sign-offs, and `pnpm validate:release-approval` before tagging.
  • Added an on-call and escalation runbook with SEV levels, acknowledgement targets, incident issue intake, rollback handoff, and `pnpm validate:on-call-escalation`.
  • Moved production scheduled jobs from Vercel Cron to a GitHub Actions external scheduler and added `pnpm validate:external-checks` so release checks are not blocked by Vercel Hobby cron limits or Snyk private-test quota.
  • Added an ongoing beta tester bug triage process with beta feedback issue intake, priority/source/cohort/SLA/owner labels, weekly closeout reporting, and `pnpm validate:beta-triage`.
  • Added Public API per-client rate limiting, a multi-region cache strategy, and Sprint 43 value-gate carryover closeout under `pnpm validate:scale-readiness`.
  • Restored production-grade scheduled job cadence with secure cron bearer auth, scheduled GET routes, and a `pnpm validate:scheduler` production gate.
  • Added `NOTIFICATION_WORKER_BATCH_SIZE` so notification queue throughput can be tuned without redeploying code.
  • Added a public Terms of Service page, auth/profile links, and a legal framework doc for release-prep review.

Fixes

  • Added a Drizzle migration health audit command and development guide so the remaining migration-history debt is explicit and future schema work avoids unsafe journal assumptions.
  • Formalized the runtime database schema contract, synced development/preview/production Neon branches to the same expected app tables, repaired missing columns/enums/primary keys, removed the stale `tasks` SQL view, and fixed database verification record counts.
  • Fixed scheduled job endpoints so Vercel Cron/external schedulers can use `GET` with `Authorization: Bearer $CRON_SECRET`, while unsigned `x-vercel-cron` headers are no longer trusted.
  • Fixed scheduled-job auth so `ADMIN_JOB_TOKEN` is accepted only through `x-admin-token`, keeping bearer auth dedicated to `CRON_SECRET`.
  • Gated LogRocket initialization, user identification, app-load tracking, and weekly engagement telemetry behind optional analytics consent.
  • Updated bug report intake so new bugs start in triage and get release-priority/source labels from the issue form instead of defaulting every bug to high priority.
  • Added executable public and authenticated accessibility gates for sign-in, sign-up, privacy, terms, main chat, settings, connectors, security/privacy, and appearance surfaces; restored visible `aria-live` regions; fixed legal links that relied on color alone; and corrected labeled controls, nested theme-card interactions, and low-contrast warning copy.
  • Restored whole-card theme selection behavior without nested interactive controls, prevented saved light-theme preferences from briefly hydrating with dark tokens, and guarded malformed communication-log payloads from crashing settings.
  • Adjusted Vercel cron schedules to satisfy Hobby deployment limits and documented the release follow-up for production-grade scheduler cadence.
  • Fixed release JSON generation so wrapped changelog bullets and uppercase `Z` characters are parsed correctly.
  • Added public status-page coverage to the WCAG 2.1 AA axe release gate.

Known issues

  • _None yet_