Changelog

EZ DZ Shipping Log

From a simple manifest board to a full operations suite, here’s how EZ DZ has grown. We’ll keep this timeline updated as we ship new features.

v2.1.3

2026-01-06
  • Launched fun jumper reserve tracking so DZ admins can now set multiple rigs per jumper with expiration dates—keeping gear currency visible and surfacing warnings when someone's reserve is due for a repack.
  • Built automatic alerts into the manifest flow that warn both fun jumpers and DZ admins when a jumper shows up with an expired reserve—system gives admins the option to override if the jumper decides to rent a rig instead of using their own gear.
  • Fixed small UI bugs across admin and user screens for better consistency and smoother workflows.

v2.1.2

2025-12-17
  • Continued security hardening across legacy API endpoints—no data was exposed, but closed potential access vectors that could have been exploited by advanced actors with specific internal details.
  • Added email parameter requirement to abandoned booking recovery endpoints to prevent potential enumeration attacks where someone could theoretically probe for customer booking IDs.
  • Hardened OAuth endpoints used for MCP token generation—previously an advanced actor with certain internal details (none of which have ever been publicly exposed) could potentially create unauthorized MCP tokens. Now properly validates all authorization flows.
  • Fixed critical user dashboard onboarding bug that was preventing new users from completing their profile registration or linking to their drop zones—onboarding flow now works as intended.

v2.1.1

2025-12-16
  • Applied minor security hardening updates across the platform to keep authentication and data access controls tight.
  • Fixed issues in analytics exports where some Excel formulas could be generated incorrectly, causing totals and rollups to calculate wrong in certain spreadsheets.
  • Cleaned up styling and UI consistency across admin and operations screens for a smoother, more readable experience.

v2.1.0

2025-12-13
  • Added comprehensive export features to analytics so drop zone owners can pull data into Excel and CSV formats for deeper analysis, custom reporting, and integration with existing business tools.
  • Updated the drop zone selector on the public booking page to support searchable filtering—customers can now quickly find their DZ instead of scrolling through a long list.
  • Enhanced charting across the analytics dashboard with better visualizations, more granular data breakdowns, and improved performance for large datasets.
  • Expanded DZ admin settings with new controls and capabilities for managing MCP configurations.
  • Shipped a big integration: added MCP (Model Context Protocol) server support, allowing drop zone owners to connect AI tools for intelligent insights and automation—enabling smarter operations at scale.
  • Implemented OAuth authentication alongside legacy MCP tokens to support both modern and legacy integrations, ensuring backward compatibility while providing secure token-based access.
  • Updated UI screens across admin and operations interfaces for better consistency, improved navigation, and clearer information hierarchy.

v2.0.5

2025-12-09
  • Shipped a gamified leaderboard feature for fun jumpers that tracks who's logging the most jumps at each DZ—monthly and yearly views keep the competition visible and give jumpers another reason to come back for more loads.
  • Added UI polishes across the fun jumper dashboard—cleaner layouts, smoother transitions, and better visual hierarchy make tracking jump counts and leaderboard rankings feel rewarding instead of buried in data.
  • Designed the leaderboard to highlight top performers while keeping everyone motivated—whether you're chasing first place or just trying to beat last month's numbers, the stats are front and center.

v2.0.0

2025-12-07
  • Launched EZ DZ 2.0 with a ground-up UI overhaul that keeps admin tools and fun-jumper dashboards visually cohesive, faster to navigate, and easier to scan under pressure.
  • Equipped DZ admins with new booking analytics so conversion rate, visitor counts, and traffic trends surface right inside the booking page without bouncing to another tool.
  • Delivered a comprehensive weather widget for fun jumpers that tracks jump status, wind, and temperatures while automatically adapting to the new dashboard layout.
  • Refined the mobile experience for both admins and fun jumpers so manifesting, booking approvals, and on-the-go status checks feel native on phones and tablets.
  • Rolled out a high-availability backend with redundant web + database infrastructure that fails over to a live replica in 5–30 seconds, keeping uptime high and bookings flowing.
  • Added WAF archives, daily backups to offsite + local storage, and a dedicated staging environment so new updates can be tested without touching production and providing a demo environment for onbaording.

v1.6.5

2025-11-25
  • Let dropzones layer overrides on top of their tandem booking schedules—block out specific days or date ranges, open extra availability, and add ad-hoc time slots without touching the base template.
  • Surfaced those overrides inside the tandem booking list and calendar views so blocked days are clearly labeled and staff can see at a glance when operations are paused or expanded.
  • Fixed the reschedule flow so moving a tandem booking also re-queues the automated reminder email sequence, keeping pre-jump communications on track.
  • Added a "Send Email" action to day-level selections so admins can bulk message every customer on a given date—perfect for weather holds, parking changes, or other mass updates straight from booking management.

v1.6.3

2025-11-24
  • Refined the analytics dashboard with more relevant KPIs, surfacing load turn-time, revenue per load/day, and aircraft utilization.
  • Added operations insights like automatic turn-time tracking so teams can spot slow cycles and adapt before they impact capacity and revenue.
  • Implemented secure email-token password resets so admins and fun jumpers can recover access without manual support, complete with expiry handling and audit logging.

v1.6.2

2025-11-21
  • Fixed timezone handling across all routes that use dates—load estimated takeoff times, booking emails, and scheduling features now calculate properly regardless of the user's timezone.
  • Ensured that when you set load times or estimated takeoff times in your local timezone, they're properly converted and displayed for users viewing from different timezones.
  • Corrected booking confirmation and reminder emails so they reference the correct local times instead of being offset by timezone differences.
  • Made date handling consistent across the entire platform so what you set actually affects the rest of the app correctly, no matter where your staff or customers are viewing from.
  • Fixed edge case bug that would cause loads to roll over midday, essentially resetting counts and miscounting loads in analytics due to timezone inconsistencies.

v1.6.1

2025-11-21
  • Put on my hacker hat last night and dove deep into the EZ DZ APIs to see what I could find—discovered a handful of endpoints that, with the right information, could potentially access some private data. Nothing critical was actually exposed (we don't have real customer data in production yet), but this was a wake-up call to lock things down properly before launch.
  • Spent the night and morning implementing comprehensive security fixes across the entire backend—secured 15+ vulnerabilities including Stripe Terminal access that was only checking dropzone association instead of admin roles (fun jumpers could have potentially registered terminals or processed payments).
  • Fixed critical pricing manipulation bug where customers could edit tandem booking prices in the request payload—backend was trusting client-submitted prices instead of looking them up from the database, now properly validated on the server side.
  • Removed PII exposure from public load board endpoint that was leaking phone numbers, emergency contacts, and credit balances for all users—now only shows jump-relevant info like names, licenses, and canopy details while keeping personal information properly secured behind authentication.
  • Locked down administrative endpoints for payment config testing, email automation settings, booking management, and load operations—all now require proper dropzone admin or owner roles instead of just any authenticated user.
  • Cleaned up public dropzone endpoints that were exposing Stripe account IDs and internal configuration via SELECT * queries—now explicitly selecting only public-facing fields to prevent data leaks.

v1.6.0

2025-11-20
  • Launched automated email workflows to strengthen customer engagement and recover—abandoned bookings now trigger follow-up emails 30 minutes after incomplete payment, giving customers an easy button to finish what they started.
  • Added day-before reminders sent at 9am to keep customers informed and reduce no-shows, plus post-jump review requests that go out an hour after the load lands to capture feedback while the experience is fresh.
  • Building out the foundation for intelligent + custom email automation that keeps customers engaged from booking through post-jump follow-up—helping drop zones recover revenue, improve show rates, and build stronger relationships at zero extra cost.

v1.5.0

2025-11-19
  • Updated Pro plan pricing model so customers pay full 6% when passing fees (previously we only passed 3% which did not make sense for most DZ's), DZ's now net almost the full booking value instead of paying to pass on less.
  • Modified backend fee calculation and UI to reflect the new revenue structure, ensuring drop zones on Pro plans maximize their margins while maintaining transparent customer pricing.

v1.4.0

2025-11-14
  • Added fun-jumper dashboard buttons so admins can top up credits or create custom charges (AFF gear rentals, non-registered jumpers, etc.) right from the interface without extra steps.
  • Patched the handful of bugs those buttons revealed so balances, receipts, and reporting stay aligned even when manifest staff move fast.

v1.3.5

2025-11-12
  • Gave every drop zone the option to pass EZDZ platform fees on to customers—or keep absorbing them—so pricing can align with each DZ’s strategy.
  • Made the change after reviewing how other platforms price access and focusing on what actually helps the sport grow.

v1.3.0

2025-11-10
  • Built out Stripe Terminal support for Tap to Pay after manifest teams asked for easier ways to collect tandem balances on-site without fumbling with saved cards.
  • Fixed cross-DZ staff visibility bug—turns out staff selectors were showing everyone instead of just the active drop zone's crew.

v1.2.1

2025-10-30
  • Discovered the package-selection modal was getting out of sync when switching between deposits and full payments, so we tightened that up to reflect custom charges properly.
  • Extended kiosk session lifetimes with silent token refresh after realizing manifest stations were timing out mid-day.

v1.2.0

2025-10-27
  • Pivoted to Stripe Standard Connect to reduce liability and unlock Apple Pay, deposits, and remaining-balance payments without the custom plumbing.
  • Caught a nasty double-charge edge case on balance collections and smoothed out payment webhooks for walk-in tandems.

v1.1.1

2025-10-22
  • Wrapped every admin and analytics route in middleware after discovering stats were leaking between drop zones—each DZ's data now stays isolated.
  • Hardened analytics delivery and request auditing to make sure we're tracking the right events for the right locations.

v1.1.0

2025-10-18
  • Shipped end-to-end fun-jumper credit purchases from phone or manifest, including fee logging, tips, and overpayment handling after ironing out the payment flow with real users.
  • Let drop zones configure their own timezone and lat/long so weather forecasts (Windy/Winslow) and timestamps actually match real aircraft operations.

v1.0.2

2025-10-15
  • Launched the "Assign to Load" modal with automatic tandem-student fill and the Five-Minute Call state after watching manifest teams struggle with manual load management.
  • Made sure each DZ's dashboard keeps its own stats and history without bleeding into neighboring locations.

v1.0.0

2025-10-11
  • Hit the big one-oh with Stripe onboarding, card-on-file charging, and custom charges for tandem bookings—plus tips and walk-in overpayment support.
  • Gave booking management the credit-purchase tooling it needed and built out accurate fee collection logs for reconciliation.

v0.9.0

2025-10-05
  • Rebuilt the entire booking/payment stack around Stripe Connect-only endpoints after realizing our hash routing was fragile and environment config was getting messy.
  • Instrumented the first wave of Ribbit analytics events across the public booking flow to understand where customers were dropping off.

v0.8.0

2025-09-15
  • Expanded Ribbit tracking to cover fun-jumper credit purchases and key admin actions so we could get real conversion insight.

v0.7.0

2025-08-28
  • Built the templated email engine from scratch—branded confirmations now go out automatically once DZs connect their SMTP, with customizable triggers for different events.
  • Polished the public booking UX with mobile "Add to Home Screen" prompts and dialed in OG/SEO meta tags after feedback about discoverability.

v0.5.0

2025-08-25
  • Closed the loop on booking + manifest: packages now persist to the backend, dashboards got dark mode (finally), and confirmation pages got a facelift.

v0.1.0

2025-08-24
  • Shipped the very first prototype with weather + load-board previews so fun jumpers could check aircraft status from their phones while manifest captured requests digitally instead of on paper.