Laraowl Release Notes

What's Changed

• perf: detect error spikes off the rollups instead of the raw records by @voicecode-bv in https://github.com/laraowl/laraowl/pull/49
• perf: ship only the two languages the code blocks actually highlight by @voicecode-bv in https://github.com/laraowl/laraowl/pull/50
• perf: count the grouped listings instead of running them twice by @voicecode-bv in https://github.com/laraowl/laraowl/pull/51

Full Changelog: https://github.com/laraowl/laraowl/compare/v1.1.2...v1.1.3

What's Changed

• fix(composer): stop reading app version from composer.json by @solis-eduardo in https://github.com/laraowl/laraowl/pull/30
• fix: chart exceptions on the dashboard by their own time series by @solis-eduardo in https://github.com/laraowl/laraowl/pull/34
• fix: split dashboard requests chart into authenticated vs guest bars by @solis-eduardo in https://github.com/laraowl/laraowl/pull/35
• fix: classify scheduled-task rollups by status instead of exit_code by @solis-eduardo in https://github.com/laraowl/laraowl/pull/36
• refactor: use Collapsible primitive for record Headers/Payload cards by @solis-eduardo in https://github.com/laraowl/laraowl/pull/40
• refactor: consolidate ad-hoc icon rendering into shared Icon component by @solis-eduardo in https://github.com/laraowl/laraowl/pull/41
• Add uptime monitoring switch by @voicecode-bv in https://github.com/laraowl/laraowl/pull/43
• feat(config): make app timezone configurable via APP_TIMEZONE by @solis-eduardo in https://github.com/laraowl/laraowl/pull/32
• chore(composer): update composer.lock to match composer.json by @solis-eduardo in https://github.com/laraowl/laraowl/pull/31
• feat: add CLI commands to create teams, invite members, and create projects by @solis-eduardo in https://github.com/laraowl/laraowl/pull/37
• feat: show sidebar toggle button on desktop with shortcut tooltip by @solis-eduardo in https://github.com/laraowl/laraowl/pull/38 …

Security

Fixed a cross-tenant access flaw. Resources under a project — records, issues, integrations, alert rules and thresholds — were bound by global id without checking they belonged to the project in the URL. Any authenticated member of one team could read, modify or delete another team's data by id, including integration secrets such as Slack/Discord webhooks and bot tokens. All routes under a project are now scoped to that project. If you run LaraOwl with more than one team, upgrade promptly.

Performance: the dashboard now scales to millions of records

Charts, counters, lists and drill-downs used to be computed by scanning the raw records table and grouping on JSON — a 504 at ~50k records. They are now served from pre-aggregated rollup tables written at ingest time.

Measured on 2.28M real records (MySQL):

Page	Before	After
/requests?period=24h	~13.8 s	~200 ms
user details	~12 s	~55 ms
security	~14 s	~10 ms
dashboard	~1.2 s	~380 ms

• Log search is now full-text indexed instead of scanning every log's JSON payload — an index lookup on MySQL/MariaDB and PostgreSQL.
• Aggregates outlive raw records (projects.rollup_retention_days, default 90), so long-range charts keep working after raw data is pruned.

Fixed

• The dashboard flooded the server with duplicate requests — every page …

Added

Update notifications and a laraowl:update command (#20)

LaraOwl now checks the GitHub releases API daily and shows a banner to the first registered account when a newer version exists. The check is cached and never blocks a request. Disable it with LARAOWL_UPDATE_CHECK=false.

php artisan laraowl:update            # install the latest release
php artisan laraowl:update --check    # report only
php artisan laraowl:update --dry-run  # print the steps, run nothing

The command runs inside maintenance mode: pull, install dependencies, rebuild assets, migrate, clear caches, restart queue workers. It refuses to run outside a git checkout or on a dirty working tree, and if a step fails it lifts maintenance mode and leaves you on the previous version.

Fixed

Notification links pointed at the wrong URL (#23)

Alert and integration links were built as /projects/{project}, but routes are nested under a team prefix — /{team}/{project}, so every link 404'd. Six call sites across AlertService, IntegrationService, and projects:check-health now build URLs from named routes.

Upgrading

php artisan laraowl:update

No new migrations, no config to publish.

Full Changelog: https://github.com/laraowl/laraowl/compare/v1.0.7...v1.0.8