Roadmap

August 29th 2024

Improvement - OTP

• Added OTP to staging

August 28th 2024

Update/Improvement - Fortress

• Updated the commands list inside the Security > Fortress tab in the website customizer

August 27th 2024

Improvement - OTP

• Added OTP to additional features
• Additional OTP security enhancement

August 26th 2024

Fixed - Fortress

• API responds with "The site id field is required." on gpfort site.url -update

August 23rd 2024

Improvement - Account

• Email verification is now a requirement when updating account email address

Fixed - Git

• jo utility incorrectly parsing commit string value as number

August 15th 2024

Improvement - OTP

• Improved OTP Security

New - OTP

• OTP settings that are active by default can now be disabled via toggle. (This was a added due to a feature request, but it is not recommended)

Fixed - Password resets

• Email enumeration possible due to error message language

August 13th 2024

Fixed - Caching

• New Stack /etc/hosts loopback on sites build doesn't include www and staging

August 8th 2024

Fixed - 360

• Previously cancelled subscriptions grace period prevents servers from being able to re-sign up server to 360

August 7th 2024

Fixed - 360

• Multisite server guard not preventing adding additional websites to server once enrolled in 360

August 1st 2024

New - Agency Plan

• Agency clients now have their own custom plan inside the GridPane application

Improvement/Fixed - Sessions

• Prevent 419 errors in rare cases due to browser caching

July 22nd 2024

Fixed - Cloning

• Cloning not copying Fortress settings correctly

Fixed - Multitenancy

• Deploy failures where /root/gridenv/git.env is not found

July 1st 2024

Fixed - Server deletion

• In very rare circumstances, servers can’t be deleted from the dashboard

June 28th 2024

New - SSH Keys

• Add SSH keys to all servers in one go

Security Update/Improvement - 2FA/OTP Enhancements

• System user password available again, but protected by OTP

Update - OTP

• Default OTP time changed from 15 minutes to 120 minutes

June 26th 2024

Security Update/Improvement - 2FA/OTP Enhancements

OTP added to the following feature settings:

• Deleting a server
• OTP aeleting a website
• Editing a server name and/or IP address
• Opening Monit
• Opening PHPMyAdmin
• Opening the website build log
• Site logs
• Modifying system users

June 5th 2024

Security Update - Sites Page

• Improved security for sensitive site data

June 2nd 2024

Fixed - Multitenancy

• False 500 error when attaching a Git repository to a Multitenancy server

Fixed - PeakFreq

• Upcoming invoices not displaying within subscription settings

May 29th 2024

Fixed - Custom servers

• Error preventing custom servers from provisioning
• Custom servers not shown in servers filter

May 27th 2024

Fixed - Security Settings

• Authy still showing in 2FA options even though it is no longer be supported

May 24th 2024

Security Update - Settings

• 2FA session duration time limit now customizable within account Settings > Security

May 23rd 2024

Security Update - Settings

• 2FA no longer needed every single time settings pages accessed
• 2FA session duration default time set to 15 minutes

Fixed - 2FA

• Fixed copy pasting bug (pasting added all code into first OTP box)

May 22nd 2024

Security Update - Settings

• Enforce 2FA to access settings page
• Integrations API masking

May 14th 2024

Update/Fixed - Fortress

• Remove existing cache:clear from Fortress scripts

May 9th 2024

Improvement - Backups

• Make hourly workers to wait for at least 2 more hours before deleting the restore token

May 8th 2024

New - PHP

• PHP 8.3 added to Ubuntu 22.04 and 20.04 servers

Improvement - Vulnerability Scanning

• Added vulnerability ID to email alerts

April 24th 2024

Fixed - Cloneover/Failover

• Sync site settings not working correctly during cloning/failover sync

April 23rd 2024

Improvement - Fortress & Relay

• Sync commands added to scripts

Improvement - Cron jobs

• Added fuzzy setting
• Improved efficiency of daily cron jobs

Fixed - Server Provisioning

• Not all default SSH keys are added to a newly provisioned server

April 18th 2024

Improvement - Fortress

• GP-CLI created for Code Freeze feature
• Easy enable/disable added to the GridPane UI

Fixed - Cron jobs

• Setting cron jobs with GP-CLI doesn't accept integers that end with “0”

April 17th 2024

Fixed - Cloning

• PHP worker setting defaulting to Dynamic setting regardless of source site settings when cloning on Nginx

April 16th 2024

Improvement - Database Imports

• Tokens created to allow database imports to run longer than 2 hours

Fixed - Fortress Integration

• Fortress fails to install in a specific instance without giving failure error

April 15th 2024

Security Update/Improvement - PHP

• Updated PHP 8.1 and 8.2

April 11th 2024

Update/Improvement - OpenLiteSpeed

• OpenLiteSpeed updated to 1.7.19

Fixed - PHP

• disable_functions cloning incorrectly

April 9th 2024

Update - Relay

• Relay scripts added/updated updated

Fixed - GP-CLI

• Fixed -all-sites flag failing for all remaining sites after the first site

April 4th 2024

Fixed - Teams

• Admin team members have no access to Git features

March 28th 2024

Improvement/Fixed - Nginx

• Ensure Nginx starts/restarts even if one of the prestart processes fail

April 15th 2024

Security Update/Improvement - PHP

• Updated PHP 8.1 and 8.
  

March 22nd 2024

Improvement - PHPMA

• Moved PHPMA to its own sockfiles and ownership

Fixed - Monit

• Monit giving 503 error on OLS servers

March 19th 2024

Update/Improvement - App Guard

Guard to reserve `gridpane-phpma-*` as a system user and ensure users cannot manually create it

March 17th 2024

Fixed - Stack

• Ensure FPM pool.d confs are generated with 640 permissions
• Ensure all existing pool.d confs have 640 permissions

March 4th 2024

Fixed - SendGrid Integration

• SendGrid toggle becomes disabled and greyed out once a SendGrid integration has been activated

March 1st 2024

Fixed - Object Caching

• Prevent the possibility for object cache drop-in to become corrupt on the destination site after cloning

Fixed - Failover

• Guard against existing domains on failover destination server failing

February 28th 2024

Improvement - Notifications

• Adjustments to notification frequency for 70-75% system load average and memory usage

Improvement - GP-CLI

• Added “gp site site.url -dbcreds” command directly into “conf write db-pass” command

Fixed - Multitenancy

• Guards needed for WPFail2Ban, SMTP, and Caching integrations and required plugins

February 23rd 2024

Improvement - GP-Cron

• Added new functionality for randomising GP-cron trigger time and additional -fuzziness flag for custom configuration
• Added custom sleep functionality for customizing per second trigger time for cron jobs with -sec-delay flag for custom configuration
• Added logging for debug

Improvement - Ubuntu 20.04

• Added updated functionality developed for 22.04 into the 20.04 stack

Fixed - GP-Cron

• CPU spikes caused by GP-Cron triggering at the same time for lots of websites on a server

February 21st 2024

Update - Billing

• Altered invoice table display

January 18th 2024

Fixed - OpenLiteSpeed

• Separate listeners for IPv6 support

January 10th 2024

Fixed = Backups

• Staff team member accounts showing an endless spinner when going to restore a backup

November 30th 2023

Fixed = nG Firewall

• nG Firewall tab greyed out if 6G WAF enabled

New - Uptime Monitoring

• Uptime monitoring is now available for Developer Plus account holders
• Toggle turn monitoring on and off is available within the site customizer

New/Improvement - Fortress

• New Fortress UI integration now live:
  - Enable/Disable Fortress
  - 14 commands available to run
  - View Fortress Audit Log
  - Fortress GP-CLI Log

Improvement - PeakFreq

• When a card is updated or a top payment is made, payment retry should be triggered instantly, and server turned back on if payment or credit is present

Improvement - Vulnerability Scanner

• Updated and improved 360 integration

Fixed - Teams

• Teams section unavailable on Panel plan

November 10th 2023

Improvement/Fixed - Vulnerability Scanning

• Added webhook to update timestamp directly from server scan, fixing vulnerability timestamp notice

November 8th 2023

Improvement - Maldet

• Add Ubuntu 22.04 paths for nG logs to maldet ignore list

Fixed - PHP

• Add PHP 8.2 to user chroot on Ubuntu 22.04

November 7th 2023

Fixed - PHP

• www.conf breaking on PHP switch

November 3rd 2023

Update - PHP

• System-wide check for any servers missing PHP versions
• Ioncube loader update for PHP 8.2

Update/Fixed - Slack Notifications

• PHP 8.2 added
• Missing PHP 8.0 added

Fixed - PeakFreq

• PeakFreq servers creating multiple support tickets for the same issue

November 2nd 2023

New - API

• GET /server - include os_version in payload

November 1st 2023

New - Ubuntu 22.04

• The Ubuntu 22.04 stack is now out of beta and available for all API providers and custom servers

New - PHP

• PHP 8.2 released on Ubuntu 22.04 and 20.04

New - API

• Add 22.04 to POST /server
• GET Site PHPMA Link

Fixed - PHP/Monit

• PHP 8.2 failed to install on some servers, resulting in Monit warning notifications

October 31st 2023

Improvement - Website Build Form

• Add server provider logo to the "select server" dropdown in the website build form on the Sites page

Fixed - Server Stats

• Stats only become available once a site is added to server

Fixed - PeakFreq

• Make PeakFreq server build guard dynamic and ensure it updates without needing a page refresh
• Core accounts without credit card on file getting errors - guard created

October 30th 2023

New - PeakFreq

• PeakFreq now available to all GridPane account holders
• New Credit Balance section within account settings
• PeakFreq billing now available inside Settings > Credit Balance
• Manual One Time Balance Payment section
• Automated Balance Maintenance option
  - Automatic minimum payment of $1 (to avoid invoicing issues)
• View past invoices
• View current credit balance
• View expected monthly usage
• Invoice amount due guards
• PeakFreq instructions/messaging on Servers page

Improvement - MySQL

• MariaDB updated to version 10.5 on Ubuntu 18.04 servers

October 27th 2023

Update - Domain Swaps

• Cloning is always the safer option. This update advises to clone websites instead of domain swapping to mirror our official recommendation

Fixed - Vulnerability Scanning

• Webhook to update timestamp directly from server scan to prevent confusing notice

Fixed - Notifications

• Notification popups appearing multiple times

October 26th 2023

Improvement + Fix - MySQL

• WP CLI 2.9.0 update broke SQL sockets on Ubuntu 22. Fix has been implemented and future proofed to prevent this issue again

October 23rd 2023

Fixed - Redis

• Redis 7 binds to IPv6 loopback instead of IPv4 by default

October 20th 2023

Improvement - Include Check

• Removed empty lines (if they exist due to user error) at the beginning of wp-config.php, user-configs.php include, and secure-debug.php include

October 18th 2023

New/Improvement - Vulnerability Scanner

• Exclude three vulnerabilities from scanner across all servers
• Created whitelisting functionality for vulnerabilities for all sites on a server
• Created per site whitelisting functionality

View the details here in the knowledge base.

October 12th 2023

Security Patch - Nginx

• Vulnerability fix for HTTP2 on GridPane Nginx servers (OLS is not vulnerable)

Fixed - Fortress

• Fortress smoke screen test generates invalid username on multisite

October 9th 2023

Update/Improvement - Redis

• New servers are now provisioned with Redis 7
• Update Redis repo for server builds

Improvement/Fixed - MariaDB

• Repo version set for each stack

October 6th 2023

Improvement - Monit

• Improved Nginx syntax checks

Fixed - Monit

• Monit MySQL config fix

Fixed - Configs

• Server config backup changes to utilise less disk space

Fixed - MariaDB

• Removed MariaDB 10.5 workers from Ubuntu 22.04 servers

22nd September 2023

Fixed - Redis

• Redis Spare servers depleted in first 10 tries

13th September 2023

Improvement - Staging

• Better error visibilty on staging push database dumps

12th September 2023

Fixed - Backups

• Backup site before deletion is missing the -local-single-site flag

5th September 2023

Fixed - Teams

• Sites not visible on drop down when adding client team member

1st September 2023

New - Vulnerability scanning

• Tokens now available to exclude sites or full servers from scanning

Improvement/Fixed - PeakFreq

• Billing anomalies on specific accounts

31st August 2023

Improvement - PeakFreq

• PeakFreq billing: Invoicing data section has been updated
• Server usage reporting updated

30th August 2023

Improvement/Fix - MySQL

• Updated database table export format for latest mydumper update

Fixed - Monit

• Only update monit if the monit threshold is less than the allowed RAM

29th August 2023

Improvement - Redis

The Ubuntu 20.04 stack has been updated so that:

• Websites now use their own Redis database, instead of each sharing a singular database
• Redis now uses Unix sockets

Improvement - Multitenancy Git

• Improvements to overall deployment structure
• Updated deploy scripts to include site level predeploy.sh and postdeploy.sh
• Added new ENV variable will allow the pre/post deploy server scripts to include conditional logic that executes code that should only be run on a new code deploy
• gpgit commands for enabling and disabling maintenance mode on sites during deployments + custom maintenance.php file for during maintenance mode
• Agency only tokens

Fixed - Monit

24th August 2023

Improvement/Fixes - PeakFreq

• Billing updates and UI fixes

Fixed - PeakFreq

• Core accounts: No access to backup functionality on site build form, server and site customizers

14th August 2023

Fixed - OpenLiteSpeed

• Adjust 7G URI ruelset order when Fortress active to ensure ruleset works correctly

Fixed - Monit

• MySQL Monit Memory not adjusting after scaling server up

7th August 2023

Fixed - OpenLiteSpeed

• 7g-gridpane.php settings file not copying across during cloning
• 7g-gridpane.php not updating during staging push

7th August 2023

Improvement - Fortress Integration

• Integration with new Vaults & Pillars features: Adaptations made to cloning, staging, and Fortress removal scripts

3rd August 2023

Update - System Users

• Remove password from user details callback as no longer needed

2nd August 2023

Improvement - OpenLiteSpeed

• LSPHP handler updated

1st August 2023

Update - Application

• The GridPane dashboard has been updated to Laravel 9

Update - Fortress Integration

• Update to wipe log, recycle secret, force update for latest plugin release

New - PeakFreq

• PeakFreq is now available for select accounts
• PeakFreq servers all run Ubuntu 22.04

New - Ubuntu 22.04

• The Ubuntu 22.04 stacks are now out of beta for Vultr provisioned servers (other API-integrated providers will have their full production release soon, followed by custom servers after that)

Improvement - 22.04 Sudo Users

• Passwords accepted, but restriction still in place for password SSH login

25th July 2023

Update - OpenLiteSpeed

• Update default memory value for PHP 8.0

20th July 2023

Updated/Improved - OpenLiteSpeed

• OLS updated to 1.7.17
• Global allow/deny list created for OLS 7G

Improved - Additional Security Measures

• Use 444 on Nginx stack instead of deny to reduce overhead

Fixed - Fortress

• Worker calling gpfort directly being tripped by gpfort pipefails

Fixed - Git

• Git enable command updated to be idempotent

19th July 2023

Update - WP Fail2Ban

• Plugin force updated where possible on all sites running PHP 7.4 and above

Improved - Git

• GP_GIT variables made to be available to site system users

Improved - WP Debug

• When turning secure debug on/off track if query monitor was pre-installed - only remove when toggling off if we installed

Improved - WP-CLI Usage

• WP-CLI usage by our platform has been improved to ensure we can attempt to successfully run commands even when WP-CLI would other fail due to user websites codebase errors

Improved/Fixed - Backblaze B2 Backups

• Check for bucket existence and name limitations when first using Backblaze on a new server

Improved/Fixed - Fortress

• Nginx servers only: Move Fortress 7G whitelist to its own whitelist configuration “fortress-whitelists-7g-context.conf”

Improved/Fixed - Git

• Replace site_url variable with SITE_URL

4th July 2023

New - 22.04 Stack: MySQL

• Use Unix socket for MySQL connections
• Resource-based memory configuration - defaults max usage to approximately 45%
• Automatic resource configuration on scaling

New - 22.04 Stack: Nginx

• Redis-Cache object caching configured for Unix Sockets, autoconfigured
• Redis-Cache object caching using separate database per site, auto-configured, and compatible with Object Cache Pro
• Redis-Page caching using unix sockets
• Automatically configure the Nginx-helper plugin settings when enabling either version of Nginx caching

New - 22.04 Stack: OpenLiteSpeed

• LiteSpeed Redis Object caching uses separate databases per site, and the plugin is autoconfigured

New - 22.04 Stack: Backblaze B2

• B2 CLI and /tmp lock issues resolved, and B2 backups are fully functional

New - 22.04 Stack: System Users

• Autocleaning of unused system users on site deletes

New - 22.04 Stack: GP-Cron

• GP-Cron and server cron enabled by default for all sites on build, multisite compatible, with a daily cron log on rotate

New - 22.04 Stack: Cloning and Backup Restores

• Database dump/import tool updated using streams to speed up clones and restores (this also fixes issues with hangs on massive databases)

New - Fortress Integration

• Use Fortress login links for SSO (if available) on all sites running Fortress

23rd June 2023

Improved - GPFort

• Dynamic checking and healing of missing secrets
• Dynamic checking that there are no secrets in wp-config

Update - GPFort

• “Migrate all” GPFort CLI has now been retired

13th June 2023

Fixed - GPFort

• Pre-smoke and post-smoke install improvements
• Improved WP-CLI check for MyISAM tables guard and improved output
• GPFort CLI preserves WP-CLI stdout so it's usable for users

Fixed - Vulnerability Scanning

• Scan not running when Maldet is also enabled on a server

9th June 2023

New - Ubuntu 22.04 Beta

• Nginx 22.04 Stack
• OpenLiteSpeed 22.04 Stack
• System user SSH access and GP-CLI
• Improved chroot shell
• /tmp directory lockdown and new GP-CLI

5th June 2023

Improvement - Vulnerability monitoring

• Added green check mark after manual vulnerability repeat check is ran and no vulnerabilities are detected

Fixed - Vulnerability monitoring

• UI Bug: Status update requires page refresh after manual vulnerability repeat check is ran
• UI Bug: Repeat check doesn't update vulnerability status when a vulnerability is fixed

17th May 2023

New - Multitenancy

• Multitenancy now available for Developer Plus plans

New/Improved - Vulnerability Scanning

• Vulnerability scanning rolled out for Developer Plus plans
• New vulnerability section inside website customizer detailing vulnerabilities
• Repeat scan button inside website customizer
• Separation between 360 and Developer Plus servers

New/Improved - Git

• Git moved from private beta to public beta, available to all Developer, Developer Plus, and Agency plans

Improved - Server Provisioning

• Automatically block ARM servers from running provisioning scripts

Improved/Fixed - 360 Support

• Vulnerability Scanning daily scan not automatically running
• Management of scanning now handled by automatically created server token
• Scanning improvements for 360 server

Fixed - Multitenancy

• Website customizer Git tab guard for multitenancy servers not active

Fixed - Staging

• 500 “Oops something went wrong” error when enabling staging on stagings page

Fixed - Slack

• Maldet notifications not being sent

Fixed - Teams

• Some team member privileges restricted, showing account as Core plan user

Update - Core Plan

• DigitalOcean servers no longer available on Core plan - plan restricted to Vultr only

4th May 2023

Fixed - Fortress Integration

• Swap Fortress to use /etc/fortress to fix permission issues from our ACLs

1st May 2023

Improvement - Fortress Integration

• Guard to warn during Fotress installation if LiteSpeed object cache enabled
• Worker to enable Fortress update daily
• Ensure processes handle crons and logrotates for Fortress

Fixed - Fortress Integration

• Permissions for Fortress log ownership

26th April 2023

New - Fortress Integration

• Install, Uninstall, Migrate GP-CLI for Fortress plugin
• Cron and logrotate autoconfigured
• Workers created to enable Fortress updates
• Scripts to integrate Fortress into cloning, staging, backups

Improvement - PHP

• Added PHP 8.1 to gp stack PHP configure CLI

Improvement - Scripts

• PHPMyAdmin redundancy created incase their main repo is down during server builds

Improvement/Fix - OpenLiteSpeed

• httpd.conf regenerate set to ignore -export

Fixed - OpenLiteSpeed

• Set Redis port and cache type before enabling object cache

Fixed - Multitenancy

• Domain Swap in multitenancy servers does not remove the bind mounts of original site from fstab

19th April 2023

Security - 2FA

• Block console access to 2FA reset codes

New - Fortress Integration

• Fortress activation status stored inside application

14th April 2023

Improvement/Fix - Domain Swap

• Rename the -main-{site.url}-context.conf file to new domain

12th April 2023

Improvement - Server Provisioning

• New guards and exits for PHP and PHPMA during server builds

Fixed - Git

• Git deployment fails with eternal spinner

Update - Multitenancy

• Info box added to “Immutable Git” settings page no longer in use

5th April 2023

Fixed - Elasticsearch integration

• Conf for Elasticsearch referencing out-of-date monitor

4th April 2023

Fixed - Scripts

• Guard added to prevent echo -n command adding n to env. files

3rd April 2023

Fixed - Enterprise Instances (not my.gridpane.com)

• Callback for server OS not working causing UI issues

29th March 2023

Update - Ubuntu 18.04

• Ubuntu 18.04 option is no longer available for new server builds in UI

28th March 2023

Improvement - SSL

• Guard to remove duplicate keywords in SSL config

Improvement - Cloning

• Server clone notification now includes specific server information

Fixed - Cloning

• Error notification in app when server connection issues corrections

27th March 2023

Fixed - OpenLiteSpeed

• HTTP Authentication not getting enabled in OLS servers

24th March 2023

New - OpenLiteSpeed

• GeoIP added to OpenLiteSpeed

Fixed - UpCloud

• Unable to delete disconnected servers

23rd March 2023

Fixed - Vultr

• Server status incorrect when server is destroyed directly at Vultr
• Force delete not working