v1.0.0-rc2

What's Changed

• rename speedprogramming_module_disabled into speedprogramming_module_enabled by @proditis in #1300
• Database optimizations before release by @proditis in #1309
• Limit the amount of queries performed for a single target/view of non guests by @proditis in #1312
• Dont show tabs with no records for a given player by @proditis in #1313
• Issue 1298 by @proditis in #1314
• Minor fixes by @proditis in #1320
• Make our cookies a bit more strict by @proditis in #1323
• introduce exec_before_replace flag for cases where we want the exec commands before the replace operations by @proditis in #1326
• Discord and API Target bug fix by @proditis in #1328
• Fixes 1324 by @proditis in #1331
• micro fixes by @proditis in #1332
• fix a set of minor bugs by @proditis in #1333
• remove migration that is already on our main schema by @proditis in #1335
• Ensure our docker containers work on non https by @proditis in #1336
• We now require php >=8 by @proditis in #1337
• Fix memcached not starting after containers stop/start/ down/up and restart by @proditis in #1338
• make sure we grant super privs for our docker db user by @proditis in #1341
• grant access to all databases since we use the set global command by @proditis in #1342
• Docker updates by @proditis in #1343
• Update Docker docs and change the VPN server IP into 10.0.160.253 instead by @proditis in #1344
• Documentation and ansible updates by @proditis in #1345
• no easy way to test this without merging by @proditis in #1346
• Update runner versions since Ubuntu 20.04 has been deprecated by Github by @proditis in #1348
• Update stripe/stripe-php requirement from ^16.3 to ^17.1 in /backend by @dependabot[bot] in #1347
• Update yiisoft/yii2 requirement from 2.0.50 to 2.0.52 in /backend by @dependabot[bot] in #1339
• Latest Ansible playbook updates for OpenBSD 7.7 and minor fixes by @proditis in #1349
• Update yiisoft/yii2 requirement from 2.0.52 to 2.0.53 in /backend by @dependabot[bot] in #1364
• Team module improvements by @proditis in #1369
• Playbook improvements by @proditis in #1372
• email field: add min restriction and make it required by @proditis in #1373
• Improve frontend metadata display a tiny bit by @proditis in #1376
• Feat export players by @proditis in #1377
• Custom migration templates introduction by @proditis in #1378
• Moderation improvements by @proditis in #1379
• initial legwork for headshot points by @proditis in #1383
• Add duplicate signup IP's initial moderation page by @proditis in #1384
• improve the way it we display the duplicates of moderation by @proditis in #1385
• Issue 1392 by @proditis in #1393
• Ansible improvements by @proditis in #1395
• add tls-verify by @proditis in #1402
• Multiple small improvements by @proditis in #1403
• Issue 1400 by @proditis in #1404
• update arp timeouts by @proditis in #1405
• Rename spints and restarts to reboot by @proditis in #1406
• Issue 1381 by @proditis in #1407
• Small fixes packed into a single PR by @proditis in #1408
• fixes #1375 by @proditis in #1409
• fixes #1315 by @proditis in #1410
• Issue 1380 by @proditis in #1411
• Issue 1388 by @proditis in #1412
• Issue 1389 by @proditis in #1413
• fixes #1370 by @proditis in #1414
• Issue 1359 by @proditis in #1418
• update client and server to be at sync by @proditis in #1419
• Issue 1417 by @proditis in #1420
• add support to check for a given server instead of autodetection and … by @proditis in #1421
• add and document disable_ondemand_operations key by @proditis in #1422
• Issue 1399 by @proditis in #1423
• Issue 1391 by @proditis in #1424
• Ansible logical bugs and improvements by @proditis in #1430
• Issue 1428 by @proditis in #1431
• Issue 1425 by @proditis in #1432
• Moderation and validation improvements by @proditis in #1433
• Issue 1415 by @proditis in #1434
• fixes #1398 by @proditis in #1435
• Issue 1351 by @proditis in #1436
• add sample migrations for new events by @proditis in #1437
• Limit activity stream displayed records by @proditis in #1438
• A lot of improvements to target guest view and stream pagination by @proditis in #1439
• VPN operations and playbook updates by @proditis in #1440
• Team rank and academic grouping by @proditis in #1443
• Migration improvements by @proditis in #1444
• optimise the query of procedure by @proditis in #1445
• Issue 1446 by @proditis in #1447
• minor fixes by @proditis in #1448
• hook the localized timezone instead by @proditis in #1451
• add some missing settings and comment by @proditis in #1453
• Set of minor updates by @proditis in #1454
• Small bugfixes and improvements by @proditis in #1456
• Docs and such by @proditis in #1458
• Improve ansible documentation by @proditis in #1459
• fix typo in post credits by @proditis in #1467
• Issue 1466 by @proditis in #1468
• Ansible and doc improvements by @proditis in #1469
• Changes towards multiple issues by @proditis in #1471
• Issue 1464 by @proditis in #1472
• Team Stream updates by @proditis in #1473
• Issue 1461 by @proditis in #1474
• something got messed up before by @proditis in #1475
• indent and fixes by @proditis in #1476
• Issue 1357 by @proditis in #1478
• Issues 1480, 1479, 1449 & 1316 by @proditis in #1481
• Openvpn connect improvement by @proditis in #1482
• Introduce tester controller for testing mail settings by @proditis in #1484
• comment out verify-cn but leave it there. by @proditis in #1485
• forgot to add the password by @proditis in #1486
• Minor fixes by @proditis in #1487
• Findings and Sysconfig updates by @proditis in #1488
• minor fixes to configuration form and documentation by @proditis in #1489
• add a few m...

v1.0.0-rc1

What's Changed

• Add api/profile/me by @proditis in #1296
• Towards v1.0.0-rc1 by @proditis in #1295

Full Changelog: v0.25.0...v1.0.0-rc1

Pre-v1.0.0 release

This release is the last from the version 0.x.x series.

What's Changed

• minor updates to mx validations by @proditis in #1069
• make automatic_tax configurable by @proditis in #1071
• Force HTTPS & add default value and range for player_type of challenge/question by @proditis in #1074
• dont force repository use on db playbook by @proditis in #1076
• remove global vars udf since its not in use by @proditis in #1077
• playbook updates for connection=local by @proditis in #1078
• fix icu version by @proditis in #1079 #1083 #1089
• proper variable name by @proditis in #1080
• respect version from settings by @proditis in #1081
• remove hard requirement for GITHUB_* vars by @proditis in #1082
• remove github questions by @proditis in #1084
• fix memcached package no flavors by @proditis in #1085
• add missing python netaddr by @proditis in #1086
• Add nstables to the playbooks and update localhost inventory entry by @proditis in #1087
• make ansible runs a bit more silent by @proditis in #1088
• Minor cleanups on ansible related files by @proditis in #1090
• replace curly braces by @proditis in #1098
• Playbook fixes by @proditis in #1104
• fix team instances logical bug by @proditis in #1105
• Backend fixes by @proditis in #1107
• Frontend improvements by @proditis in #1108
• Fix layout overrides by @proditis in #1112
• dont throw status 500 on duplicate records by @proditis in #1113
• Cli metadata commands by @proditis in #1115
• make sure uploads is owned by www-data by @proditis in #1125
• attempt to suppress buildkit for now by @proditis in #1126
• Handle challenge fileuploads better by @proditis in #1127
• fix hints when player type is both by @proditis in #1128
• Multiple improvements and fixes from dev environment by @proditis in #1131
• fix sidebar scrolling in small screens by @g0rchy in #1139
• Tooltip fixes by @proditis in #1145
• UI fixes by @proditis in #1146
• Issue #1147 by @proditis in #1148
• Issue #1151 by @proditis in #1153
• Issue #1152 by @proditis in #1154
• Issue #1134 by @proditis in #1155
• Backend help updates by @proditis in #1156
• Player approval status and process by @proditis in #1163
• mass rename players_require_approval into player_require_approval by @proditis in #1168
• Player metadata and configuration by @proditis in #1169
• Shellscripts and typo fixes by @proditis in #1170
• Mail related improvements by @proditis in #1173
• Target datails by @proditis in #1175
• Writeup language indication by @proditis in #1176
• fixes #1075 by @proditis in #1177
• Team improvements by @proditis in #1178
• Multiple minor fixes and corrections by @proditis in #1191
• Update yiisoft/yii2 requirement from 2.0.49 to 2.0.50 in /backend by @dependabot in #1198
• thnx dependabot for messing up my dependencies... by @proditis in #1201
• Updates from offensivex by @proditis in #1207
• Ansible and metadata by @proditis in #1234
• no more docker-compose but docker compose instead!!! by @proditis in #1235
• Multiple fixes and improvements from a lot of events by @proditis in #1251
• academic grouping and issue #1253 by @proditis in #1254
• Closing some of the issues by @proditis in #1257
• update target and profile links to ensure they work on backend by @proditis in #1258
• make sure unbound is configured and run by @proditis in #1259
• thumbnail and event end notification by @proditis in #1260
• issue #1236 by @proditis in #1261
• update some documentation by @proditis in #1262
• Migrate to php8.x by @proditis in #1263
• Cleaning up some of the issues by @proditis in #1271
• remove old images, add captchas, layout fixes and plus_writeups sysconf key by @proditis in #1272
• add default status of pending on backend by @proditis in #1277
• validation, swal and docker params by @proditis in #1278
• add check local subs against stripe by @proditis in #1281
• team improvements by @proditis in #1282
• update yii symfonymailer by @proditis in #1283
• Player operations by @proditis in #1284
• tokens and api work by @proditis in #1285
• Better avatar generation with support for future expansions by @proditis in #1288 #1291 #1292
• Speed programming module by @proditis in #1289 #1290
• Update stripe/stripe-php requirement from ^12.0 to ^16.2 by @dependabot in #1287 #1286
• update player maintenance and add keys for expiration by @proditis in #1293
• make sure our dockerfiles work properly by @proditis in #1294

Full Changelog: v0.24.0...v0.25.0

v0.24.0

What's Changed

• typo post_exploitation instead of post_credits by @proditis in #950
• dont spin ondemand targets rather pull them by @proditis in #951
• minor documentation updates by @proditis in #957
• Improvements to the docs, playbook and docker related files by @proditis in #958
• Regenerate the player badge when there are updates to the player by @proditis in #959
• Improvements to multiple components by @proditis in #960
• Multiple updates to docs and yml by @proditis in #965
• minor chores by @proditis in #967
• Update docker containers by @proditis in #968
• add triggers for challenges and stream by @proditis in #971
• Another attempt at fixing the memcached issue that we're experiencing under docker by @proditis in #972
• Micro corrections by @proditis in #973
• Avoid throwing exception for foreach from command line cron/instances command by @proditis in #975
• docker related improvements by @proditis in #978
• frontend profile and backend player layout updates by @proditis in #981
• again logic bug by @proditis in #982
• add cron to packages by @proditis in #983
• make sure we dont fail on brand new startups by @proditis in #984
• merge with development by @proditis in #988
• Minor improvements by @proditis in #992
• merge with dev by @proditis in #995
• Some documentation tweaks by @g0rchy in #1017
• Multiple changes/fixes brought forward by events by @proditis in #1009
• Add default entries for FAQ, Rules and Instructions by @proditis in #1019
• Only show subscribe button to networks that are part of subscription products by @proditis in #1021
• players and target support sort and filter by @proditis in #1022
• Team audit by @proditis in #1023
• fixes #998 by @proditis in #1024
• Update configure form with more settings by @proditis in #1025
• fixes #1008 by @proditis in #1027
• improve require_activation=false by @proditis in #1028
• add updated_at/created_at fields to target_player_state by @proditis in #1029
• make the target dropdown listing ordered alphabetically on player findings and treasures by @proditis in #1031
• make sure we order challenge_solver.created_at by @proditis in #1032
• delete copy of validator by @proditis in #1037
• add team_allowed field on target_instance by @proditis in #1042
• bug: fix typo in relation by @proditis in #1043
• remove funding by @proditis in #1044
• dont notify owner and redir to index by @proditis in #1045
• fix typo that broke cron/instances by @proditis in #1046
• fix team instances logic bug by @proditis in #1047
• make card follow col size of parent page by @proditis in #1050
• add only approved players to team instances by @proditis in #1051
• New Icon for teams by @0xJaeg3r in #1053
• make sure team instances respect approved players all around by @proditis in #1054
• use the new icon by @proditis in #1055
• we dont have an activequery named active() here by @proditis in #1056
• sync backend team view avatar by @proditis in #1057
• Player badge improvements by @proditis in #1058

New Contributors

• @0xJaeg3r made their first contribution in #1053

Full Changelog: v0.23.0...v0.24.0

v0.23.0

What's Changed

• Fix subscriptions from firefox by @proditis in #899
• make col-XL distribution a bit better by @proditis in #901
• dont clear when dropdown hides by @proditis in #902
• make default non zero IP copy to clipboard by @proditis in #903
• currently displayed writeups must respect the current user by @proditis in #905
• Findings before claim by @proditis in #906
• update docker example and maintenance/sync-collations actions by @proditis in #908
• add new line on cron/healthcheck when container not on our list by @proditis in #909
• Backend dashboard improvements by @proditis in #910
• Update autocomplete ajax widget by @proditis in #912
• backend infrastructure dashboard details by @proditis in #913
• fix beforeAction bug when csrfValidation failed by @proditis in #914
• add some extra icons that can be used by notifications and links by @proditis in #915
• AccessControl overload and namespace path changes by @proditis in #916
• fix notifications url to the right controller action by @proditis in #917
• Backend fixes by @proditis in #924
• Backend add relative times by @proditis in #925
• comment out this functionality for now by @proditis in #926
• Maintenance mode by @proditis in #929
• wrap everything into a try/catch by @proditis in #930
• Backend target full view by @proditis in #932
• Tooltips and profile columns by @proditis in #935
• update the menu entries a bit by @proditis in #936
• Update notification rotation logic and management by @proditis in #937
• Spin history relation by @proditis in #938
• fix success class of boolean column by @proditis in #939
• Player subscription cancellation by @proditis in #940
• Maintenance notification by @proditis in #943
• fix the message (double back) by @proditis in #945
• Docker servers playbook update by @proditis in #946
• update jquery to 3.6.4 by @proditis in #947
• admins dont need the notification popups by @proditis in #948
• add version update by @proditis in #920

Full Changelog: v0.22.0...v0.23.0

v0.22.0

What's Changed

• Minor post release bugs by @proditis in #828
• display prod_vip entries in price/index by @proditis in #831
• add activated-writeups action and view by @proditis in #833
• introduce 2 more maintenance commands and fix mailer by @proditis in #838
• log registration errors by @proditis in #839
• fix documentation typo by @g0rchy in #840
• Example target updates by @proditis in #844
• repair the logic to match only on given user by @proditis in #845
• add groups creation prior to users by @proditis in #846
• minor updates to example target by @proditis in #847
• Fix progress and guest network view by @proditis in #848
• Credits pages by @proditis in #853
• updated default mysql auth command & some slight md tweaks by @g0rchy in #855
• Issue 852 by @proditis in #857
• add created_at partial search by @proditis in #858
• multiple minor fixes by @proditis in #859
• Writeup Logic modifications by @proditis in #860
• Last visited targets and dashboard improvements by @proditis in #861
• update headshot trigger spin conditions by @proditis in #862
• Private instances dashboard by @proditis in #864
• add letencrypt configuration by @proditis in #865
• fix minor bug that replaced dashboards title by @proditis in #866
• Target card fixes by @proditis in #870
• minor fixes to player cli and backend by @proditis in #873
• Bootstrap5 by @proditis in #875
• Backend profile column by @proditis in #880
• Profile headings by @proditis in #881
• update tad_player trigger by @proditis in #882
• Tad player update by @proditis in #883
• Subs and network improvements by @proditis in #885
• Update miloschuman/yii2-highcharts-widget requirement from ^7.1 to ^10.0 in /backend by @dependabot in #887
• remove container overload leftovers by @proditis in #888
• Partial date search by @proditis in #889
• credentials is part of the gameplay by @proditis in #890
• Backend profile improvements by @proditis in #891
• Breadcrumb link index by @proditis in #893
• Notification improvements by @proditis in #894
• remove error log of visits by @proditis in #895

New Contributors

• @g0rchy made their first contribution in #840

Full Changelog: v0.21.0...v0.22.0

v0.21.0

What's Changed

• Remove number format from team cards for points, it breaks the translations by @proditis in #754
• News discord webhooks by @proditis in #755
• update playbook by @proditis in #756
• create cli commands for backend by @proditis in #757
• team listing and discord messaging improvements by @proditis in #758
• Target difficulty indicator improvements by @proditis in #759
• Backend ovpn dl by @proditis in #760
• Introduce the ability to hide inactive targets from the frontend by @proditis in #761
• this color theme with icons is much better by @proditis in #762
• Issue 752 by @proditis in #763
• Json encode all sysconfig keys by @proditis in #764
• update workflows to newer ubuntu by @proditis in #765
• update and merge 🤦‍♂️ by @proditis in #781
• Add unannounced network flag by @proditis in #782
• Fix finding details by @proditis in #784
• remove dev dependencies from frontend by @proditis in #788
• Css overrides and mui fixes by @proditis in #789
• Notification types and counters update by @proditis in #790
• Short polling notifications by @proditis in #791
• Escape flash messages that receive untrusted input by @proditis in #793
• use checkout@v3 on our workflows by @proditis in #797
• Fix xss in help widget by @proditis in #798
• only do api GET when Notifications or Hints exist by @proditis in #799
• fix indentation and escape username by @proditis in #800
• Static content improvements by @proditis in #802
• Validation pages by @proditis in #803
• Discard private instances by @proditis in #804
• Issue 670 by @proditis in #805
• Monthly leaderboard by @proditis in #809
• Improve frontend validator command by @proditis in #810
• Issue 806 by @proditis in #811
• make sure we dont fail when there is no pf table by @proditis in #812
• Maintenance cli by @proditis in #814
• fixes #813 by @proditis in #815
• try to catch exception and not Error on Target command by @proditis in #816
• Multiple prices per stripe product by @proditis in #817
• Stripe portal link by @proditis in #821
• Add products import by @proditis in #824
• Leaderboard additions by @proditis in #825
• dont fail for VIP subscriptions by @proditis in #826

Full Changelog: v0.20.2...v0.21.0

v0.20.2

• [BUG] Fix writeup update not updating content
• Replace echoCTF.RED with echoCTF on error pages
• Many documentation updates
• Updates on ansible playbooks
• Add target allowed_instances field to enable/disable private instance support per target
• Add sysconfig key for enabled/disabled public view of target pages
• [BUG] CSS/JS overrides dont work as expected
• [BUG] Add check for exception on frontend/themes/material/site/error.php
• Make registration validators configurable by the backend
• Redirect or refresh instead of error page on CSRF token validation error
• Redirect instead of error page on verify-email
• Make sure we display the uploaded team picture after update
• Add support for subscriptions menu item

v0.20.1

• Improvements to backend stripe operations
• Improvements to the teams module
• Improvements to the networks module
• Improvements to the subscription access rules
• Improvements to the Docker Compose and Dockerfiles

Special thanks to the echoCTF Discord Staff (@0rgis, @bibaf, @g0rchy, @r0b0tG4nG)

v0.20.0

• Significant improvements on cron commands
• Improve frontend performance (reduce the number of queries performed)
• Show failed logins on player profile
• Make backend forms that require player_id into ajax search
• Display better errors when pulling and starting images
• Add precision to stream timestamp
• Reduce CSRF validation errors and turn them into alerts instead of error pages
• Improve error handling on nginx templates
• Player settings update avatar, updates the first time
• Support for private instances
• Improve on demand powerups
• Frontend indicator when connected to vpn
• Make support staff ids into a sysconfig key
• Fix docker-compose errors that got introduced by mixed encoding
• Fix bugs on ratings, writeups, typos in Inquiry models (thnx @HitmanAlharbi)