Releases

Hardened production delivery, runtime isolation, and operational recovery safeguards.

• Pinned production runtime images and release builds to immutable digests and commit SHAs.
• Added tighter CPU, memory, process, descriptor, filesystem, and Linux capability limits across production services.
• Restricted internal services to private Docker networking and kept public web surfaces behind the reverse proxy.

Improved search discovery, structured metadata, and deterministic delivery checks.

• Added curated state, qualification, category, organization, results, admit-card, and answer-key discovery routes.
• Improved canonical URLs, robots controls, sitemap freshness, lifecycle structured data, and verified recruitment metadata.
• Strengthened CI fuzz-test reliability and deterministic completion for tracking workflows.

Added a privacy-aware foundation for preparation tracks, practice tests, and progress workflows.

• Added preparation tracks, syllabuses, subjects, chapters, topics, practice tests, questions, and current-affairs foundations.
• Added deterministic scoring with immutable question snapshots and owner-scoped progress data.
• Added editorial provenance, licensing checks, privacy export/clear boundaries, and review-safe content controls.

Added consent-aware notifications, inbox delivery history, and lifecycle event handling.

• Added notification preferences, consent controls, inbox state, unsubscribe handling, and account isolation.
• Added verified-contact delivery, retries, suppression, signed provider callbacks, and bounded templates.
• Added lifecycle notifications for deadlines, admit cards, answer keys, results, corrigenda, and recruitment status changes.

Added private opportunity tracking and application lifecycle workflows.

• Added saved, interested, planning, applied, withdrawn, and resumed tracking states.
• Added private notes, reference numbers, next actions, reminders, history, and dashboard projections.
• Added optimistic concurrency, idempotent mutations, privacy-safe responses, and account isolation.

Completed Phase 8 eligibility, profile, and personalization workflows.

• Completed the eligibility, profile, and personalization workflow set from Phase 8.
• Published through the authenticated GitHub release process.

Redesigned the admin editorial workflows and release UI.

• Redesigned admin editorial workflows for staff users.
• Improved the release UI used to review published changes.

Updated development dependencies through the automated release chain.

• Refreshed the development dependency group to keep the engineering toolchain current.
• Applied the approved package updates through the automated release process.
• No public workflow changed; this release improves maintenance and security hygiene.

Kept the deployment SSH session alive while production images build remotely.

• Kept the deployment connection alive while production images build remotely.
• Reduced the chance of a healthy deployment being reported as failed because a remote build took longer than the SSH session.
• Deployment still waits for the application health checks before completing.

Recovered staff sign-in when a stale session caused a CSRF failure.

• Recovered staff sign-in when an old session caused a CSRF error.
• Kept CSRF protection enabled while making the retry path safe and predictable.
• Improved the sign-in experience for editorial staff without changing public account security.

Added the official-source registry, ingestion boundary, provenance, and editorial handoff foundation.

• Added a registry for official recruitment websites and their jurisdictions.
• Added bounded discovery jobs, source health, freshness state, and retry-safe scheduling records.
• Added provenance, candidate normalization, quarantine metadata, and a controlled handoff into editorial review.

Synchronized the public navigation and login surface with the current authentication state.

• Aligned the public login and navigation experience across authenticated and anonymous states.

Brought the public website and editorial admin onto the shared visual language.

• Unified typography, surfaces, controls, navigation, and responsive layout primitives across the public and editorial experiences.
• Added shared visual behavior for cards, buttons, focus states, spacing, and mobile navigation.
• Improved consistency so operators and visitors can move between product surfaces without learning a new interface.

Synchronized the public release projection through GitHub release v0.1.20.

• Reconciled the public release log with the verified release history.

Corrected missing recruitment responses and prevented verification pages from being indexed.

• Unknown recruitment slugs now return a real not-found response instead of a misleading success page.
• Verification pages now use noindex metadata so private account flows do not enter search results.

Resolved issues found during the production frontend and admin live review.

• Corrected live admin and authentication route behavior found during production review.

Improved staff administration and public empty-state behavior.

• Resolved live admin and empty-state issues found during acceptance review.

Restored staff sign-in through the same-origin authentication proxy.

• Repaired the admin authentication proxy and staff sign-in journey.

Required staff authentication before editorial pages can be viewed.

• Added server-side staff protection to editorial routes.

Introduced the editorial workspace for source-backed recruitment publishing.

• Added an editorial workspace for preparing source-backed recruitment records.
• Added draft, review, request-changes, approval, publication, correction, close, historical, archive, and withdraw states.
• Added independent review, privileged MFA, revision history, optimistic concurrency, audit events, and safe publication boundaries.

Completed the public recruitment contract and source-backed visibility boundary.

• Public recruitment pages now show only reviewed, source-checked, non-demo records with retained official evidence.
• Added provenance, source freshness, lifecycle events, application-method clarity, and verified structured data.
• Removed runtime mock fallback from public recruitment reads so unavailable data fails safely instead of looking real.

Corrected the production mail configuration required by identity flows.

• Fixed the production SMTP deployment configuration required by identity emails.

Completed the API/database and identity/authentication foundations.

• Added the Go API and PostgreSQL foundation for structured recruitment data.
• Added secure sessions, registration, verification, password recovery, MFA foundations, throttling, and same-origin web integration.
• Added typed API boundaries for jobs, taxonomy, dashboard, applications, tracking, and recommendations.

Updated the Chi HTTP router dependency in the API service.

• Updated the API HTTP router dependency from 5.2.3 to 5.2.4.

Prevented production Compose image-name collisions during deployment.

• Separated production Compose image naming to avoid deployment collisions.

Provisioned the API configuration required for the production runtime.

• Added and aligned the production API configuration.

Implemented the API and PostgreSQL foundation for structured recruitment data.

• Added API routing, forward-only database migrations, and taxonomy-backed recruitment queries.
• Added bounded search, filtering, sorting, pagination, detail projections, and health/readiness endpoints.
• Connected the public web experience to the API boundary while preserving safe empty states.

Updated the npm development dependency group through Dependabot.

• Refreshed development dependencies across the workspace.

Updated Next.js to the latest approved production patch release.

• Updated Next.js from 16.3.5 to 16.3.6.

Established the repository, security, testing, and operational baseline.

• Added reproducible workspace tooling and clean-install verification.
• Added CI gates for formatting, lint, types, tests, production builds, audits, secret checks, and container checks.
• Added runtime, logging, health, threat-model, backup, deployment, rollback, and local-service documentation.

Closed the product research, scope, taxonomy, and SEO baseline.

• Documented India-wide product scope across Central, State, Union Territory, and District/Local recruitment.
• Recorded taxonomy, terminology, trust rules, evidence classification, competitor task-flow research, and SEO findings.
• Defined the implementation backlog and boundaries for the following engineering phases.

Published the public release log and clarified official-source and private-platform language.

• Added the public release-log foundation and streamlined trust copy.

Aligned the reverse-proxy configuration template with the production hosting setup.

• Corrected the NGINX configuration template for the production reverse proxy.

Made deployment wait for production health readiness before completing.

• Added a production health-readiness wait to CI and deployment.

Established the first SarkariMohar public frontend and automated delivery foundation.

• Built India-wide government opportunity discovery across Central, State, Union Territory, and District/Local scopes.
• Added Docker deployment, release automation, CI identity, and production deployment workflows.