Docs changelog

What changed in this documentation, newest first. Each entry links the affected pages. The log starts at the public launch of the new docs site alongside BOA-5.88.8 Continuity Edition — earlier drafting predates the public site and is not listed.

2026-07-23

• Changed: Backdrop CMS sites moved to the top of the Using BOA chapter — it now sits right below Welcome instead of at the tail of the menu, with the sections in between shifted down one place. Page addresses are unchanged.
• Changed: Off-site backups & mybackup — reworked to the Basic use / Advanced use shape of the original backup guide: the hosted-or-PRO availability of the extended off-site subsystem now leads the page, a five-step basic path follows, and the deeper detail (includes/excludes, bucket naming, precise restores) sits under Advanced use. The backups chapter and the backups cheat sheet carry the same availability note.
• Changed: the Using-tree "Search, mail & access" grab-bag chapter is gone, split into Protecting your site — restricting access, site IP lock, login/admin IP lock, AI crawlers — and Extra services — Search (Solr), Adminer, outbound mail, New Relic.
• New: Print & PDF tools — the system wkhtmltopdf / pdftk binaries, previously mentioned only inside a chapter intro, now on their own findable page.
• New: Faster cloning and migration (FastTrack and MyQuick) — split out of Cloning and moving a site. The two optional speed switches and their FastTrack.info / ClassicTrack.info / MyClassic.info control files now have their own focused page.
• New: Ruby Gems and Node tools (Compass, Gulp, Grunt, Bower) — split out of Developing your site. The Sass/Compass and Gulp/Grunt/Bower shell toolchains and the compass.info control file gathered onto a dedicated page; the .dev. preview URL and theme debugging stay on dev-workflow.
• New: Whole-site IP allow-list — ip_access and Login/admin IP allow-list — user_admin_access — split out of Admin URL protection, which now covers only the default admin-path guard and its opt-out. Each new page carries its control file (access.txt / user_admin.txt) and cross-links its hosted-customer twin.
• New: Strict binary permissions and Security audit hardening — the deep hardening knobs relocated off the security model, which returns to a pure protection overview; the Node/NPM gate moved to lshell + manage_ltd_users, and the _PHP_FPM_DENY block deduped to FPM capacity sizing with a corrected description of the replace-not-append token mechanics.
• New: xoct — moving one account and xmass — moving a whole server — the two cross-host migration runbooks split out of Cross-host migration, which becomes the which-tool-when overview carrying the shared freeze and migration-proxy material.
• New: HTTP/3 and KTLS and SQL-admin vhosts — split out of Config templates, which keeps the static template set, the master http config and the rate-limit zones.
• New: Site IP lock and Login/admin IP lock — the two IP-based locks now have their own focused pages in the Using area, split out of Restricting access to your site, which becomes the family overview plus the default admin-page protection. Every access control is now its own entry in the section menu; the control files index rows for access.txt and user_admin.txt point at the dedicated pages.
• New: AI crawlers and assistants and AI crawler policy — the AI bot policy now has its own focused page in both the hosted-customer and the operator areas, split out of Restricting access to your site and Edge policy where it was buried as a trailing section. Both source pages slim down to their remaining topics and cross-link the new pages; the control files index rows for policy.txt now point at the dedicated pages.
• Updated: scan_nginx scoring, Ban pipeline, Operations + tuning, Abuse Guard internals and IP-blocked recovery — the adaptive IDS whitelist now covers IPv6: csf.allow cannot hold an IPv6 entry, so guest-water.sh mirrors the published Googlebot ipv6Prefix crawl ranges (146 /64 ranges as of today) into a new nginx-native allow store /var/xdrago/monitor/log/web6.allow, and the scorer family-dispatches every IPv6 client to it — a legitimate IPv6 crawler is exempt from both scoring and the v6 web ban. An empty provider fetch keeps the existing entries, and untagged manual lines survive the daily refresh — which is also how you whitelist your own IPv6 range. The web6.allow row joins the control files index.
• Updated: In-place upgrades — two important corrections: the Ægir Backup task never includes the platform codebase (it archives the site directory and, depending on the backup mode, a database dump), so the codebase must be backed up manually before an in-place upgrade; and a prominent warning is added — never use this method unless prepared for extended downtime, and never run a platform Verify before the PHP and Nginx caches have expired and proven the sites still work, because Verify re-locks the code immediately and a broken platform then stays broken until the next nightly run (or your host) returns ownership.
• Updated: Branches and editions, Start here and Solr overview and tuning — LTS and PRO are kept 1:1; the extended backup sub-system is the only PRO-only, licence-gated feature. The stale "Solr 9 is BOA PRO only" note is removed (Solr 9 ships to both editions).
• Updated: Restoring with mybackup now walks through setting up the off-site provider side — the ready-made credential templates with the aws.txt example, the KEEP_WITHIN / FULL_BACKUP_FREQUENCY retention knobs, and the automatic back-to-USER-HOSTNAME-PROVIDER bucket-naming rule; the per-provider <service>.txt credential file also joins the control files index.
• Updated: this changelog — the site-launch entry now correctly records the launch alongside BOA-5.88.8 Continuity Edition on 2026-07-18; it previously named BOA-5.88.811.
• Updated: all release notes pages now link the matching pages on this site — Manual BOA upgrade reference, SELFUPGRADE reference, the access-control and edge-policy pages, and Backing up & restoring — instead of the retiring GitHub docs/ files.
• Updated: upgrade blocks on older release notes pages now end with boa reboot (the BOA-aware graceful reboot), matching current guidance.
• New: In-place upgrades — unlocking your codebase — the unlock.info workflow for brave in-place composer/git upgrades, previously undocumented.
• New: The codebase lock — nightly ownership management — the mechanism behind the nightly ownership re-assert, the unlock.info/skip.info switches, and the operator knobs that gate it.
• Reference: unlock.info and skip.info added to the control files index.
• Updated: Shared codebase permissions — fixrepo now links the codebase lock page instead of describing the lock inline.
• New: this changelog page.
• New: Shared codebase permissions — fixrepo — the root-only fixrepo tool for group-write + setgid repair on shared codebases, previously undocumented; added to the commands index.
• Reference: _SYSTEM_AUTO_SECURITY added to the variables index.
• Updated: BOA-5.88.811 release notes gained the launch-day Backdrop CMS 1.34.3 same-day update.
• Updated: Dumps with mydumper now covers the myloader --overwrite-tables → --drop-table=DROP compatibility wrapper, the automatic --trx-tables=0 handling that keeps mixed-engine databases in the nightly archives, and the five-group /root/.my.cnf format.

2026-07-22

• Updated: Prebuilt stack packages documents the archived Percona 5.7 mirror safety net for fresh legacy installs.

2026-07-18

• Site launch — this documentation went live together with BOA-5.88.8 Continuity Edition.