Changelog

Changelog

May 9, 2026

Chore

• Explicitly added secure versions to force Dependabot updates (9a48f86)
• Strictly locked versions in .kilo (ecc8a56)

May 8, 2026

Chore

• Updated lodash and hot-formula-parser to the actual latest versions to fix dependabot vulnerabilities (436fae0, c566fcd, df28193, f7d2267)

May 6, 2026

Fixed

• Updated DEVOPS_GUIDE.md to accurately reflect the deployed infrastructure (7d2f8eb)
  • Corrected VPC name, Cloud SQL instance name, service names, and Artifact Registry repo name.
  • Clarified VPC connector usage and updated manual deployment commands with correct flags.
  • Updated the network topology diagram and added VPC architecture notes.

May 2, 2026

Fixed

• Addressed Mixed Content errors, executed a service-wide async migration, and completed infrastructure/routing follow-up items (35c22e1)
  • Mixed Content: Updated FastAPI Dockerfiles to honor X-Forwarded-Proto from Cloud Run/Kong and bypassed redirects in frontend API calls.
  • Infrastructure: Hardened cloudbuild.yaml with correct VPC connectors, ingress settings, and unauthenticated invocation blocks.
  • Routing: Added Kong response-transformers to prevent *.run.app hostname leaks, and deconflicted router prefixes in the immunization service.
  • Endpoints: Implemented a public compliance endpoint for token-validated compliance result retrieval.
  • Code Cleanup: Removed orphaned RESOURCES/HELP frontend code.
  • Database Sessions: Fixed a critical bug masking AttributeError exceptions by migrating database sessions to AsyncSession across student-service and immunization-service.

April 30, 2026

Added

• Migrated frontend to a legacy Vite React application and integrated with microservices (2be1f98)
• Initial project setup (dd62424)