From 5cb7480bb423f4fad0593c8b2ab728c955e94dff Mon Sep 17 00:00:00 2001 From: Oliver Kieselbach Date: Sun, 10 May 2026 22:35:33 +0200 Subject: [PATCH] updated Changelog --- .../app/changelog/page.tsx | 61 +++++++++++++++++++ 1 file changed, 61 insertions(+) diff --git a/src/Web/autopilot-monitor-web/app/changelog/page.tsx b/src/Web/autopilot-monitor-web/app/changelog/page.tsx index f0a3fed4..d73ad663 100644 --- a/src/Web/autopilot-monitor-web/app/changelog/page.tsx +++ b/src/Web/autopilot-monitor-web/app/changelog/page.tsx @@ -1,5 +1,6 @@ "use client"; +import Link from "next/link"; import { PublicPageHeader } from "../../components/PublicPageHeader"; export default function ChangelogPage() { @@ -34,6 +35,66 @@ export default function ChangelogPage() { {/* Entries — newest first */}
+
+
+ + 2026-05-10 - 12:00 CET + + + Platform Update + +
+

+ Agent V2 rollout, MS-Graph pagination, SignalR push notifications, and security hardening +

+
    +
  • + ⚠ + Agent V2 rollout (action recommended) — The agent has been rebuilt on a new internal architecture (Decision Engine, lifecycle-anchor allowlist, Death-Rattle recovery for crashed runs) for more reliable session detection and stricter completion logic. The Intune bootstrapper script (Install-AutopilotMonitor.ps1) was updated and now verifies the runtime process started after launch. Replace the script in your Intune tenant with the latest version from the repository. +
    • +
  • + • + Submit Logs page — A new Submit Logs page lets you send diagnostic files to the Autopilot Monitor team without an associated session, useful for issues caught outside of an active enrollment. +
    • +
  • + • + Real-time notifications via SignalR push — The notification bell now updates purely from SignalR events (one fetch on mount, re-fetch on reconnect) instead of polling every 60 seconds, with audience-aware delivery for tenant admins vs members. +
    • +
  • + • + MS-Graph style pagination — All large list endpoints (sessions, events, audit, ops events, reports) now support opt-in nextLink pagination with HMAC-bound continuation tokens. Dashboard, Fleet Health, and MCP tools have been migrated to the new model. +
    • +
  • + • + MCP server — A new get_resource tool, leaner get_session_summary payloads, and a security & capability audit covering OAuth proxy hardening, access-guard tightening, and pagination of the last three legacy diagnostic tools. +
    • +
  • + • + Backend security hardening — Client-certificate chain trust is now pinned to the embedded Intune root certificate, and query-tenant guards moved to centralized middleware. +
    • +
  • + • + Web hardening & portal split — Tightened Content Security Policy, hardened /go bootstrap error handling, and a host-based middleware now cleanly separates the public site from the authenticated portal. +
    • +
  • + • + Web performance — In-flight request collapser (dedupedAuthFetch) eliminates duplicate parallel fetches, the dashboard load path was refactored +
    • +
  • + • + Delivery Optimization — Download breakdowns now include Microsoft Connected Cache (MCC) and LinkLocal sources, applied symmetrically across all layers (collector, telemetry, dashboard). +
    • +
  • + • + WhiteGlove improvements — Timeline now splits Part 1 / Part 2 at the Part-2 agent_started event (not the legacy whiteglove_resumed), Part-2 architectural cleanup landed on the agent side, summary dialog is suppressed on Part 1, and Modern Deployment EventID 1010 was added to the harmless-noise default list. +
    • +
  • + • + Bugfixes & polish — TenantIdResolver fallbacks for non-Type-6 enrollments and Hybrid Join (CloudDomainJoin + MS-Organization-Access cert), event-driven TenantId wait via RegistryWatcher, software-inventory now accepts AAD/MSA SIDs and emits real registry paths, full-width dashboard toggle with ?span= URL persistence, SLA violator link routes correctly, and many smaller fixes across pagination, audit fetching, and submit-diag sidebar entries. +
    • +
+
+