Changelog

New features, fixes and improvements to the Monitive uptime monitoring service.

Security Release v2.2.0 v0.41.2

A series of security updates have been released today.

Recipients Verification

When adding recipients, the recipient has to be verified with an OTP code before it is added. This prevents adding invalid or un-approved alerting recipients.

Rate Limiting

We defined 4 categories of endpoints according to their abuse vulnerability, from GET requests that are the lightest to number four, POST request that generate costs in our or external systems. We added rate limiting for each category so any abuse will be logged and rejected with HTTP 429 Too Many Requests. I'm still debating if we should also block the IP or not. We will assess this later.

Recipient Test Limitation

We've limited the test feature of the recipients to 10 tests for free/trialing accounts. Paid accounts have no such limitation, but the overall throttling protection will kick in if abuse is detected.

Remove PWA - Adding Cloudflare Caching Headers

The Progressive Web Application code was not behaving as required, so we decided to remove it until a better version is thoroughly tested. This version had a few side effects, one of which was that it would cache the admin interface indefinitely, requiring a hard refresh to get the latest version, which is unacceptable.

If you scroll to the footer of the Admin area and you don't see Admin v0.41.2 (minimum), it means you're stuck with an older version of the frontend interface.

On Firefox, Command/Ctrl + Shift + R forces a hard refresh and you should get to the latest version.

On Safari, go to Safari menu → Develop → Empty Caches, then reload with Command + R.

Also, we added proper caching headers, so that HTML is never cached, and static resources (which are versioned), are cached indefinitely.

React Upgrade

This version contains a React version update, now using React v18 for Wrangler and other Node-based tools. We also switched from yarn to npm to better address dependencies.

Acknowledge phone call alert on answer

Now when answering a phone call alert it will be marked as acknowledged. This helps keep track of which alerts were successfully delivered when it comes to phone call alerts.

API v2.1.0

Minor updates such as package updates and changing our logging provider to Graylog, for better control of logging inputs.

Security Release v1.36.2

Today we had an OTP attack causing a lot of SMS messages being sent in a short time. This update is the main protection of this ever occurring again.

The attack started yesterday at 19:33 UTC and ended at 22:26 UTC. For security reasons we are not going to disclose all the details, but feel free to ask us directly.

As a result of this attack, the signups, SMS alerts and Phone Call alerts were disabled all day.

More limitations will be added in the following days, but a normal user shouldn't be able to trigger them.

API v1.36.2 Updates

Security

  • OTP codes are throttled system-wide, protecting signups (#958)
Recent checks details on hover

Recent checks details on hover

We're excited to announce a small but mighty enhancement to our recent checks table on the "view monitor" page. Now, when you hover over the location column, you'll see a tooltip that displays the city, country, and area.

It will also display the status code for HTTP checks, the full date and time of the check, and the latency in milliseconds when hovering on the corresponding components.

This may seem like a small change, but it's a big deal when it comes to debugging issues that are happening only from certain monitoring nodes that are in the same country.

Before, it was difficult to tell which nodes were acting up. But now, with this enhancement, it's much easier to pinpoint the exact location of any issues, making troubleshooting a breeze.

Admin v0.40.0 Updates

Added

  • Check details toolip on hover (#370)

Changed

  • Tracking Google Analytics 4 signups and purchase (#367)

Security

  • Bump decode-uri-component from 0.2.0 to 0.2.2 (#359)

API v1.36.1 Updates

Fixed

  • Mocked risky tests (#939)
  • Update some tests to work all day, which were previously failing if run at certain times (#948)
(Re)Start a Pro Trial period

(Re)Start a Pro Trial period

Starting today, if you signed up for a free account, you were definitely missing out on the Pro features that we give for free for a 15-day trial period. That's why, starting now, if you have a phone number in your account, you can jump-start your free 15 days Pro trial with no strings attached.

We also squashed some more pesky bugs 🪲 that were making the Free account users lives harder.

Admin v0.39.0 Updates

Added

  • Option to start a Trial if you didn't already have one (#361)
    You'll find this option in the Subscription screen.

Fixed

  • Send 10 minutes interval if the user is on Free plan, insted of just throwing an error (#366)
  • When deleting a rule, delete all types (recovery+outage) otherwise the user is left with Recovery rules that have no Outage equivalent (#365)

API v1.36.0 Updates

Added

  • Endpoint to start a Trial for a user owning a team on the Free plan (#696)

Changed

  • Custome HTTP Header lenght limit increased from 2048 characters to 8192 characters (#947)
  • Switch deployment runners to GitHub's standard ones (ubuntu-latest).

Fixed

  • Free users where getting an eternal loading panel in the Subscription screen as they didn't have a corresponding customer in Stripe (#945)
  • Tests were improved (#937, #943)

Removed

  • Old alerting email templates for outage and recovery alerts that weren't used (#941)
Improved alerting rules flexibility

Improved alerting rules flexibility

This release brings some pretty cool updates to the add/edit monitor box, including a major revamp of the alerting rules - the settings of a monitor that determine who gets alerted, when they get alerted and how they get alerted.

On the Add / Edit Monitor dialog you might notice a few changes:

  • It's in two columns on desktop;
  • The Test Monitor button is just below the monitoring settings;
  • The Alerting Rules are easier to skim;
  • The Save button is in the lower right;
  • There is a Cancel button next to the Save one (but you can still close the dialog from the upper left X button).

On the Alerting Rules front there have been major updates:

The biggest change of the alert rules is the ability to set different recipients on the same channel at different delays, for example you can set to call someone after 2 minute of downtime and then someone else after 10 minutes.

Also we added more delay options, up to 1 day. Whatever works for you!

Admin v0.38.0 Updates

Changed

  • Add/edit monitor screen and flexible alert rules (#356)
  • Timeline alert rules settings (#358)

API v1.35.4 Updates

Fixed

  • Remove free-plan-maintenance scheduled run (#931)
  • Only list recipients that are available (#929)
  • Create alert rules for enabled channels only (#928)
  • Delete unconfirmed accounts (#919)
  • Enforcing free accounts benefits (#917)
  • Retry failed phpunit tests in the pipeline (#934)

Maintenance Release API v1.35.3

This release fixes some important issues that we discovered recently, so it's more of an under-the-hood update. Very important one, nevertheless.

API Updates

Added

  • More tests for Alerting rules, which are getting an upgrade in the client web-app (#905)

Removed

  • The Ambassador System, which was a way to divide the customer in markets based on geographical parameters (#899)

Fixed

  • Add Email, SMS and Phone call alert to the right monitor when signing up. Currently they were added to the sample monitor (#915)
  • Tests that were making bogus but live requests to Movalio (#898)

Security

  • Added authentication requirements for the /domains endpoint (#897)

Maintenance Release v1.35.1 v0.37.4

This is mainly addresses stability issues and includes media used in the Black Friday special campaign.

API v1.35.1 Updates

Added

  • Promotional media support in the weekly/monthly newsletter and email recovery alert (#883)

Changed

  • Tests now using database transactions instead of migrations (#851)
  • Updated a few tests to not make calls to Stripe (#849)
  • Updated tests to stop on fail (#857)
  • Updated CI template to enable Renovate (#874)
  • Some of the tests no longer make external requests (#888)
  • Configured Renovate (#847)

Fixed

  • Don't subscribe a user to our mailing list if they didn't confirm their email (#845)
  • Avoid Pro double-subscriptions by keeping a past-due subscription active (#854)
  • Fixed a few tests that were being skipped (#870)

Security

  • Updated compose packages (#846, #860)

Admin v0.37.4 Updates

Added

  • Dashboard black promo card for Black Friday special (#353)

Changed

  • Show message in the SMS Feature dialog when non-admin user wants to acquire SMS packages (#351)
  • Tried out Renovate, decided not to use it for now (#336)

Locations endpoint and sample monitor

Added a simpler way to list the IPs where we're checking the websites from, so our users can easily script in whitelisting or other network automations.

The always-up-to-date list of monitoring locations is, from now on, available at https://api1.monitive.com/locations.

A secondary improvement is the sample monitor. Whenever someone signs up for a new Monitive account, they get an empty dashboard, empty screens, as we've just started to gather data about their monitor's uptime.

No more.

From now on, whenever someone signs up, we're also including a sample monitor, just two months old, but enough to give an idea of what Monitive does and how it looks like when it does it.

API v1.34.1 Updates

Added

  • Locations listing endpoint /locations (#817)
  • Sample data with new accounts (#735)

Fixed

  • Monitor URL validation was not allowing query strings (#832)
  • Improved unit test suite (#840)

Security

  • Updated composer packages (#820, #828, #833)

Admin v0.37.2

Fixed

  • show correct UTC time in the availability charts (#335)

Security

  • Updated node packages (#333)

Maintenance Release v1.33.1 v0.37.1

This release is addressing some issues that we had to fix and also cleaning up our code by removing some components that have been retired.

API v1.33.1 Updates

Added

  • Secondary email confirmation message, when a user signed up but didn't confirm their email (#813)
  • SMS reminder that an account doesn't have its email confirmed and will be deleted (#813)

Changed

  • Subscribe to newsletter updates only when the user confirms the email (#815)

Removed

  • Legacy alerting system and it's components from before Recipients were introduced (#791)

Security

  • Updated composer packages (#814)

Admin v0.37.1

Fixed

  • Display different message if editing another user's core recipient (#331)

Removed

  • Storybook JS library (#329)

Security

  • Update node packages (#315, #328, #330)
Phone number verification

Phone number verification

With this release, we're enabling signups again, so if you've been waiting to get your Monitive account, now is the time.

We've taken several steps towards ensuring that all signups in our system are valid, by verifying phone numbers when signing up for free accounts, and also when updating an account's phone number.

Besides this, we squashed a few bugs 🐛 to make your experience even better.

Admin v0.37.0 Updates

Added

  • Phone verification via SMS code on profile phone number update (#317)
  • Phone verification for Free account signups (#316)
  • Validation and help links to the add/edit recipient dialog (#305)

Fixed

  • Friendly message when a Free account is trying to enable an optional feature (#322)
  • Availability chart tooltip which was showing single-digit minutes in the wrong format (#323)
  • Validation error on the Profile edit page when changing only one of Silent hour start or stop and then trying to update (#321)

API v1.33.0 Updates

Changed

  • Require verified phone number for Free accounts (#769)
  • Refuse to update profile with unverified phone number (#760)

Fixed

  • Updated stripe subscription ID used in phpunit tests (#812)

Security

  • Updated dependencies (#806)

Maintenance Release v1.32.0

This is a stability and security update involving several packages upgrades and bugfixes. Starting with this release, we've started a series of updates targeting confirming accounts (including emails and alerting options). More about this soon.

API v1.32.0 Updates

Added

  • Email confirmation date is now stored in the database for each user (#777, #781, #804)
  • Validation of recipients on add/update (#700), now a user cannot add a recipient if it's invalid (such as letters for a phone number)

Fixed

  • Prevent multiple alert rules for the same recipient & monitor (#775)
  • Updating an alerting rule was causing errors with ongoing delayed outages (#538)
  • HTTP URL monitor validation was not allowing port-based URLs (#766)
  • Week calculation in tests for SaaS metrics (#771)
  • Test suites that didn't fit in memory (#768)

Changed

  • Updates channel names, removing the "New" keyword and other markings that were use in the migration to Recipients (#758)

Security

  • Updated composer packages (#801, #802, #798, #793, #790, #789, #788, #787, #783, #782, #780, #770, #767)

Maintenance Release v1.31.4

This is a stability and security update.

API v1.31.4 Updates

Fixed

  • When failing to create a short URL for and SMS alert, send the SMS alert without the short link. (#751)

Changed

  • (internal) API tests and unit tests take less than 15 minutes to run (#752).

Security

  • Updated composer packages (#750, #753, #759, #761)

Maintenance Release v1.31.3

This is mainly a security update, plus two minor updates.

API v1.31.3 Updates

Fixed

  • Allow team owner to revoke an invitation issued by a team member (#744)

Changed

  • Migrate to a new Movalio account for the email automations & newsletters (#749)

Security

  • Updated composer packages (#743, #745)

Maintenance Release v1.31.2

A few back-end updates of packages, to get safely through the holidays.

API v1.31.2 Updates

Security

  • Updated composer packages (#736, #738, #739, #740)

Maintenance Release v0.36.3

This is a set of small fixes, addressing issues that were around for a while.

Admin v0.36.3 Updates

Fixed

  • Avoided redundant navigation to current location, error thrown when clicking on the logo on the Dashboard page (#301)
  • Check for dataLayer existence when firing GTM (#296)
  • If user loads the app but doesn't have a team/account, notify via Snackbar message, sign out, and redirect to sign-in (#299)
  • Null item check in the Outages list was throwing (#298)

Admin v0.36.2 Updates

Fixed

  • Demo account login was triggering an error due to the fact that the user is no more available when the user clicked Start Monitoring (#295)

Admin v0.36.1 Updates

Added

  • Google Analytics even when the user signs up from the Demo Account (#294)
Demo Account release

Demo Account release

Starting today, any visitor of monitive.com can automatically sign into a demo account and see what Monitive is all about.

Check it out – https://app.monitive.com/#/demo-account

API v1.31.1 Updates

Fixed

  • Read-only users should be able to list the Status Pages (#734)

Security

  • Updated composer packages (#732)

Admin v0.36.0 Updates

Added

  • Demo Account automatic logs the user out and into the demo account (#289, #290, #291, #292)
Demo account support

Demo account support

The new feature in this release is support for a read-only demo account, where a visitor of monitive.com can access with just one click. This is an active, live account, monitoring several websites, where any user can get a feel of how Monitive looks and works.

Besides the demo account support, these two releases include fixes for several issues in our system. Our first and foremost focus is on providing a stable and reliable system, therefore any bugs found have priority compared to other features.

API v1.31.0 Updates

Added

  • support for a demo account with live monitors (#722)

Fixed

  • Prevent monitor Phone Call and SMS alert settings to be cleared on edit profile (#731)
  • Phone Call test alert sends the recovery alert twice (#726)
  • Set up InfluxDB subscription stream on monitive:setup  (#728)
  • "Message object class Unknown" errors (#729)

API v1.30.1 Updates (Maintenance Release)

Fixed

  • Silent hours condition check fixed (#724)
  • "Cannot use object of type App\Models\Check as array" error (#717)
  • "Illegal operator and value combination" error in quicktests (#718)
  • Changed file name for send-test TwiML content (#714)
  • Phone Call channel test alerts (#713)
  • "Undefined variable: TwiMLFilePath" error (#711)

Security

  • Update composer packages (#723, #716)

Admin v0.35.1 Updates (Maintenance release)

Fixed

  • API Docs link (#285)

Quick-test Improvements

These releases bring some under-the-hood improvements and fixes to quick-tests, alerting system, custom reports and user management.

API v1.30.0 Updates

Added

  • Calculate percentile & top percentile for any quicktest executed (#690)

Fixed

  • Skipping Twilio alert during Silent Hours generates error (#683)
  • Email validation errors might prevent user to sign up (#689)
  • Within a team, custom reports having same time period but different monitors are being overwritten (#697)

Changed

  • Delete associated invitations when User deletes profile (#698)
  • Free plan users should not be able to enable optional features (#699)

Security

  • Updated composer packages (#695, #703)

API v1.30.1 Updates

Fixed

  • Changed file name for send-test TwiML content to prevent conflicting reports (#714)
  • Channel-phonecall test alerts (#713)
  • Undefined variable: TwiMLFilePath issue displayed in the interface when user is trying to do a test alert for Phone Calls (#711)
Webhook alerts migrated to recipients

Webhook alerts migrated to recipients

Starting today, the webhook alerts are manageable from the Recipients screen, along with all the other alert types.

API v1.29.0 Updates

Changed

  • Webhook alerts migrated to recipients via notifications system (#662)
  • Webhook request structure changed (BREAKING CHANGE)

Added

  • Added internal logging to investigate check misfires patterns (#688)

Security

  • Updated composer packages (#687, #682)

API v1.29.1 Updates

Fixed

  • attempt to de-duplicate webhook recipients (#694)

Changed

  • Mailchimp integration replaced with Movalio (#678)

API v1.29.2 Updates

Changed

  • Webhook structure reverted to the original one (#702)

Admin v0.35.0

Changed

  • Webhook alerts are now managed from the Recipients screen (#277)
SMS & Phone Call Alerts as Recipients

SMS & Phone Call Alerts as Recipients

This release migrates the SMS and Phone Call alerting settings from a monitor, from being user-bound to being managed in the Recipients screen.

Now you can add as many SMS and Phone Call recipients you need, and set them up as alerting recipients on any of your monitors.

Admin v0.33.2 Updates

Changed

  • SMS and Phone call alerts are now defined and managed in Recipients (#266)
  • the Get Started screen Pro description now shows the "15 days free trial" at the top (#275)

Fixed

  • update SMS channel for signup verification (#273)

API v1.28.1 Updates

Added

  • New channel-sms and channel-phonecall notification-style features and alerts (#626)
  • Sync recipients when a user joins a team (#668)
  • Enable channel-sms and channel-phonecall features trialing users (#671)

Removed

  • creation of legacy alert rules on sign up (#666)

Security

  • Update composer packages (#682, #665)
Website requirement for Free Signups

Website requirement for Free Signups

This release adds the website input box in the Forever free signup page. Previously you could sign up without a website, which resulted in many accounts created without anything to monitor. Since Monitive is only useful when it monitors something, we're now requiring a website for the free account signup.

Admin v0.32.0

Added

  • Website input field when signing up for a free account (#259)

API v1.27.0 Updates

Added

  • Website in the sign-up for free request (#659)
  • Validation for the POST /monitors/test request (#660)
  • Custom validation messages for first name, phone number, website (#658)

Removed

  • Delay when deleting an account - now when you delete your account, it is immediatelly removed along with all its data (#657)

Security

  • Update composer packages (#661)

Fix Email alert selection in add/edit monitor

Admin v0.31.1

Fixed

  • When Team Management is enabled, the Add/Edit Monitor screen should only display the Recipients dropdown for email alerts, without the Users dropdown (#261)