Change log

Release Date

Tuesday 20th August, 2026

Summary

Upgrade the Sanity package and Studio from v5.18.0 to v6.9.0 as part of ongoing platform maintenance.

Release Date

Thursday 23 July, 2026

Summary

Redirect and CMS permission fixes: non-canonical page URLs now 301 to their real nested path, legacy redirects resolve correctly in two previously broken cases, and Publisher accounts can publish and edit content types that were incorrectly locked.

Features

• Non-canonical page URLs (old flat routes) now issue a 301 to their real nested path, derived from the document's parent chain in the CMS.

Defects

• Publisher role can now publish news articles, research projects and research publications — the URL path field is no longer read only.
• Publisher role can now edit Meta Properties across all Internet content types.
• Legacy redirects now resolve pages that are children of services to the correct destination URL.
• Legacy redirects now fire when the legacy URL's final slug matches an existing page, instead of serving that page.

Security and Maintenance

• Field-level access gates removed from URL/slug and Meta Properties on Internet document types; document-level permission checks remain unchanged.

Release Date

Tuesday 26th June, 2026

Summary

Publisher-focused release: role-based content type permissions, wider home page link options, governed website references in contact details, and a sitemap fix.

Features

• Publisher role can now be configured with per-content-type permissions.
• Home page Link List can now reference any routable content type.
• 'Website' contact type now takes an internal content reference instead of a free-text URL.
• 'Website' contact links open in the same tab by default.
• 'Highlighted child content' cards render correctly without an image.

Defects

• Services now map correctly to sitemap.xml — nested service pages get the /our-services/ prefix.

Security and Maintenance

• Per-content-type permission checks added across all Internet document types; delete remains unavailable to Publishers.
• Free-text website URLs removed from Contact details, preventing arbitrary outbound links.

Release Date

Tuesday 16th June, 2026

Summary

First maintenance and enhancement release following the initial production launch. Focuses on publisher experience in the CMS — particularly image validation, which was blocking authors — along with a set of front-end presentation defects, corrected site metadata and redirect behaviour, and remediation of two dependency CVEs.

Features

Site identity and footer:

• Queensland Government crest now used as the browser tab favicon, with a matching Apple touch icon. (INTP-631)
• Footer copyright notice now updates its year automatically. (INTP-859)

Navigation:

• Emergency button in the resource bar now resolves through the standard link reference, so it correctly directs users to the Emergency Departments page. (INTP-867)

Publisher — images:

• Height validation removed from the "insert image" function in the Rich Text editor, so tall images can be uploaded without error. (INTP-869)
• Card image validation aligned with the dimensions cards are actually displayed at. (INTP-871)
• Image requirement removed from "Highlighted child content" cards, so cards can be published without an image. (INTP-875)

Front-end presentation:

• Rich Text blocks no longer render unwanted white space around their content. (INTP-870)
• Improved image quality of cards on display. (INTP-872)

Content blocks:

• Google Calendar embeds are now a supported media type, allowing the Piano Calendar to be embedded in the Music Programs page. (INTP-891)

Defects

• ATSI main menu truncated on iPad Mini landscape — navigation items now wrap rather than being cut off at that viewport. (INTP-800)
• Bullet list styling — corrected list rendering in Rich Text content. (INTP-826)
• Events widget shown when empty — the widget is now hidden when there are no matching upcoming events, and the alternating section backgrounds around it remain correct. (INTP-830)
• Validation error on Service Group — a Service Group referenced from a Content Block Link List no longer raises a spurious validation error. (INTP-858)
• About us metadata not displaying — metadata is now generated for the About us page. Documents flagged to be excluded from search are also now correctly excluded from Algolia results. (INTP-886)
• Form issues affecting sender email, reCAPTCHA and auto-replies — the mail send path was corrected and the Compliments and Complaints form now returns the full Consumer Feedback Service acknowledgement text on successful submission. (INTP-889)
• Newly added legacy URLs not redirecting after publishing — the legacy redirect lookup is no longer cached, so a redirect works as soon as it is published. A stale negative result previously produced a permanent 404 that could not be cleared without a full cache purge. The lookup query itself was also corrected. (INTP-890)
• Tall image upload still triggering height validation — the minimum-dimension preview constraint has been removed from Rich Text images entirely. (INTP-895)
• Footer copyright notice — updated to "© Gold Coast Hospital and Health Service {year}" to match the specified content requirement. (INTP-896)
• Emergency Departments breadcrumb hierarchy — breadcrumbs now include the "Our Services" parent section. (INTP-897)
• Highlighted child content card still requiring an image — the underlying schema validation has been removed to match the acceptance criteria. (INTP-898)
• Table component only displaying the first 15 rows — dynamic tables now size their page length to the number of published rows, so all rows are displayed. (INTP-905)
• Embedded Google Map opening a blocked page — the map iframe now permits its links to open outside the sandbox, so clicking through reaches Google Maps normally instead of a blocked page. (INTP-936)

Security and Maintenance

• CVE remediation — nodemailer raised from 8.0.5 to 9.0.1, and tmp from 0.2.6 to 0.2.7, applied as dependency overrides across the repository.
• Roles and permissions — access control introduced across all Internet document types in the CMS, with a dedicated Publisher structure and per-document access checks. The delete/bin action was removed for Publisher accounts.
• Email delivery — the outbound SMTP send path was updated, with the matching application setting defined in infrastructure as code rather than set by hand.
• Embed security headers — the content security policy and iframe sandbox settings were extended to permit Google Calendar embeds and Google Maps click-through, without broadening what else can be framed.
• Sitemap generation — corrected so the generated sitemap reflects all published content types.
• Test coverage — automated coverage added for webhook idempotency-key processing and the cache updater.

Release Date

Tuesday 16th June, 2026

Summary

Initial production release of the application.

Features

Standardised Header:

• Resource bar with health.qld.gov.au link, Emergency link and Contact us link.
• Dismissible global alert banner, with multiple alert types and per‑tab dismissal that lapses after 24 hours.
• Queensland Government and Gold Coast Health branding, linked to home.
• Global search input.
• Main application navigation menu with drop‑down sub‑menus, driven from the CMS.
• Alternate navigation menus for nominated sections of the site.
• Dedicated mobile menu drawer and mobile search toggle.

Standardised Footer:

• Contact us block with site contact details for phone, fax, email, address and website.
• Queensland Government links.
• Follow us / social channel links.
• Acknowledgement of Country.
• Delivering for Queensland and Queensland Government branding, with copyright notice.
• Bottom banner featuring Magnet® Recognition and Walking together in kindness.

Home page:

• Rotating carousel of promoted content, with pause on hover and manual navigation.
• Hospitals and health centres quick-access bar.
• Audience link widgets for "I'm a patient", "I'm a health professional" and "I want to get involved".
• Our stories news widget.
• Stay in touch newsletter widget.

Global search results page:

• Filterable by content type, with live result counts per type.
• Sortable results.
• Server-side paginated, with result counts shown above and below the results.
• Search again from within the results page.
• Dedicated no-results and service-unavailable states.

Landing pages:

• Search within the landing page content.
• Filter landing page content.
• Server-side paginated.
• Specific pages for the following content types:
  • Hospitals & health centres.
  • Our services, filterable by service group.
  • News.
  • Events.
  • Research projects.
  • Research publications.
  • Research grants.
• Research projects and publications presented as sortable, filterable tables, with separate column sets for mobile and desktop.

Templates:

• Custom rendered UI dependent on the content type.
• Informative sub-headers with breadcrumbs, summary text, banner imagery and category pills.
• Alerts able to be displayed against any page.
• Sidebar navigation built from the page hierarchy, plus on-page navigation to move between sections of a page.
• Specific templates for the following content types:
  • Pages.
  • Service profiles.
  • Facility profiles.
  • Professional profiles.
  • News articles.
  • Events.
  • Research projects.
  • Research publications.
• Facility profiles include contact details, visiting hours, plan your visit with an embedded map, top services and for patients sections.
• Events include registration links and a save to calendar option.
• News articles include key points, hero imagery and categories.
• Pages include a "Last updated" indicator and a "Back to top" action.
• Acknowledgement of Country displayed on Aboriginal and Torres Strait Islander service pages.

Content blocks available to authors:

• Accordions.
• Alerts.
• Card lists and promotional panels.
• Contact us blocks.
• Embedded media, including YouTube and Vimeo.
• Image blocks, galleries and inline thumbnails.
• Highlighted child content.
• Link lists and our services lists.
• Locations blocks and information blocks.
• Dynamic tables.
• Quotes.
• News category feeds.
• Professional profiles.

Online forms:

• Compliments, complaints and suggestions form.
• Aboriginal and Torres Strait Islander service enquiry form.
• Field-level validation with guided error messages.
• reCAPTCHA protection on submission.
• Automated acknowledgement email to the submitter and notification to the responsible team.

Online document viewer for PDF and Microsoft documents:

• Download option from within the viewer.
• Fallback download prompt where in-browser preview isn't supported.
• Handling for expired documents, with a prompt to search for current content.

Search engine optimisation:

• Per-page meta titles, descriptions, Open Graph and Twitter card data, with author-controlled overrides.
• Canonical URLs, and per-page indexing controls.
• Automatically generated XML sitemap covering all published content types.
• robots.txt, excluding internal routes from indexing.
• Permanent redirects from legacy website URLs, and from non-canonical paths to a page's true URL.

Content management:

• Sanity CMS with the authoring Studio embedded in the site.
• Draft mode preview of unpublished content.
• Publishing a change refreshes only the affected pages, so updates appear without a redeployment.