v1.11.4

What's Changed

• update Go to 1.22 and remove dependency on gobuffalo/buffalo image by @briskt in #617
• respond to robots.txt with a global disallow by @briskt in #619
• Release - robots.txt, updates, and fixes by @briskt in #620
• Release - allow for two IdP certificates by @briskt in #621
• Bump golang.org/x/net from 0.22.0 to 0.23.0 in /application by @dependabot in #622
• Release -- x/net security patch by @briskt in #623
• CVR-767: Fix item card for team policies by @jason-jackson in #624
• set access token in session CVR-610 by @hobbitronics in #625
• Release - fix item card, set access token cookie in session by @hobbitronics in #626

Full Changelog: v1.11.3...v1.11.4

Convert to Github actions

Changed

• Convert to Github actions

Full Changelog: v1.11.2...v1.11.3

Security patch, move HSTS to Cloudflare

Changed

• Changed the whenavail URL in Dockerfile-dev

Removed

• Remove the hstsMiddleware which applies a Strict-Transport-Security header to all responses. This can easily be done in a Cloudflare Transform Rule. (See cover-terraform)

Security

• Bumped golang.org/x/crypto from 0.14.0 to 0.17.0.

fix use of nulls

Fixed

• Fixed code where nulls objects weren't tested for Valid before use.

CVR-787

New LedgerStatus flag, security patch, and other fixes

Added

• Added a field to the LedgerStatus object to tell the UI whether it should enable the process renewals buttons

Changed

• Set vehicle auto-approve max to $0 in local dev data seed to match production database
• Changed NetSuite export to match Workato expectations
• Remove summary line and put that number in creditaccount row
• InterCoAccount is suitekey
• Append _C to ministry accounts
• One csv file, not zip
• Store block names in array to keep map ordered, so tests are more consistent

Security

• Bump golang.org/x/image from 0.6.0 to 0.10.0

Fix policy search bug

Fixed

• Fixed the policy search feature. It was not including policies with no users.

Fix ledger entry household ID bug

Fixed

• Don't set the ledger entry household ID column when the policy's household ID isn't valid

Added monthly coverage and vehicle risk category

Added

• Monthly billing option
• Category-based premium and deductible
• Vehicle risk category
• Added risk category name to transaction description

Fixed

• Ensure the Claim TotalPayout is updated after adding a ClaimItem
• Coverage starts on the day of item approval

1.9.1 - security patch

Fixed

• Temporarily use gosec 2.17.0 to avoid a crash when scanning the source code

Security

• Bump golang.org/x/net from 0.8.0 to 0.17.0 (CVE-2023-39325)

Several NetSuite changes and other fixes

Changed

• NetSuite report: Added report date to csv filenames, removed summary rows, removed RECTYPE, SCURNDEC, SRCELDGR, SRCETYPE columns, added TRANSID column using the format , split out cost center and account from transref column
• Created a "Service User" for identifying the user that was responsible for canceling coverage after a claim, and for any updates during background job processing.
• For email template data, use the name of the most senior steward, not the latest to log in.

Fixed

• Include the entity code Active flag for non-admin users to fix the searchable select on the /policies/new UI page. Fixes issue CVR-604.