Laraowl Release Notes

What's Changed

• fix(composer): stop reading app version from composer.json by @solis-eduardo in #30
• fix: chart exceptions on the dashboard by their own time series by @solis-eduardo in #34
• fix: split dashboard requests chart into authenticated vs guest bars by @solis-eduardo in #35
• fix: classify scheduled-task rollups by status instead of exit_code by @solis-eduardo in #36
• refactor: use Collapsible primitive for record Headers/Payload cards by @solis-eduardo in #40
• refactor: consolidate ad-hoc icon rendering into shared Icon component by @solis-eduardo in #41
• Add uptime monitoring switch by @voicecode-bv in #43
• feat(config): make app timezone configurable via APP_TIMEZONE by @solis-eduardo in #32
• chore(composer): update composer.lock to match composer.json by @solis-eduardo in #31
• feat: add CLI commands to create teams, invite members, and create projects by @solis-eduardo in #37
• feat: show sidebar toggle button on desktop with shortcut tooltip by @solis-eduardo in #38
• fix: Record::prunable() uses MySQL-only DATE_SUB() syntax on Postgres by @solis-eduardo in #33
• Fix real-time broadcasting so Reverb actually connects by @voicecode-bv in #46
• Fix for 502 errors: Import the namespaced defer() helper in UpdateService by @voicecode-bv in #45
• Make alert rule occurrence threshold and time window actually work by @voicecode-bv in #47
• Prevent health check runs from piling up and exhausting memory by @voicecode-bv in #48

New Contributors

• @solis-eduardo made their first contribution in #30
• @voicecode-bv made their first contribution in #43

Full Changelog: v1.1.1...v1.1.2

Security

Fixed a cross-tenant access flaw. Resources under a project — records, issues, integrations, alert rules and thresholds — were bound by global id without checking they belonged to the project in the URL. Any authenticated member of one team could read, modify or delete another team's data by id, including integration secrets such as Slack/Discord webhooks and bot tokens. All routes under a project are now scoped to that project. If you run LaraOwl with more than one team, upgrade promptly.

Performance: the dashboard now scales to millions of records

Charts, counters, lists and drill-downs used to be computed by scanning the raw records table and grouping on JSON — a 504 at ~50k records. They are now served from pre-aggregated rollup tables written at ingest time.

Measured on 2.28M real records (MySQL):

• Page
• Before
• After
• /requests?period=24h
• ~13.8 s
• ~200 ms
• user details
• ~12 s
• ~55 ms
• security
• ~14 s
• ~10 ms
• dashboard
• ~1.2 s
• ~380 ms

Log search is now full-text indexed instead of scanning every log's JSON payload — an index lookup on MySQL/MariaDB and PostgreSQL.

Aggregates outlive raw records (projects.rollup_retention_days, default 90), so long-range charts keep working after raw data is pruned.

Fixed

The dashboard flooded the server with duplicate requests — every page reloaded in full on each ingested batch. Reloads are now throttled.

Request details showed no queries, no events, and never the request body.

Drill-down pages showed only the first 50 occurrences with no way to page. All detail pages now paginate, and the First/Prev/Next/Last controls work.

Slow-performance thresholds fired 1000× too eagerly — durations are in microseconds, thresholds in milliseconds; they are now compared in the same unit.

Guests were counted as authenticated users in the user panels.

Upgrading

php artisan laraowl:update

Runs migrations, then laraowl:rollups:backfill --missing to build the rollups from your existing records. The backfill can take a few minutes on a large instance.

Full Changelog: v1.0.8...v1.1.0

Added

Update notifications and a laraowl:update command (#20)

LaraOwl now checks the GitHub releases API daily and shows a banner to the first registered account when a newer version exists. The check is cached and never blocks a request. Disable it with LARAOWL_UPDATE_CHECK=false.

php artisan laraowl:update # install the latest release
php artisan laraowl:update --check # report only
php artisan laraowl:update --dry-run # print the steps, run nothing

The command runs inside maintenance mode: pull, install dependencies, rebuild assets, migrate, clear caches, restart queue workers. It refuses to run outside a git checkout or on a dirty working tree, and if a step fails it lifts maintenance mode and leaves you on the previous version.

Fixed

Notification links pointed at the wrong URL (#23)

Alert and integration links were built as /projects/{project}, but routes are nested under a team prefix — /{team}/{project}, so every link 404'd. Six call sites across AlertService, IntegrationService, and projects:check-health now build URLs from named routes.

Upgrading

php artisan laraowl:update

No new migrations, no config to publish.

Full Changelog: v1.0.7...v1.0.8