Notice of upcoming GovCMS D11 hotfix release 4.6.1
Update - Bulk deployments for GovCMS 4.6.1 are completed for production environments.
Deployments to non-production environments will continue throughout the evening.
Nov 11, 2026 - 22:16 AEDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 11, 2026 - 18:00 AEDT
Update - We will be undergoing scheduled maintenance during this time.
Nov 11, 2026 18:00 - Nov 15, 2026 22:00 AEDT
Scheduled - Advice
We would like to inform you of the upcoming GovCMS Drupal 11 (D11) release and deployment. It addresses a recent security advisory issued by Drupal.org. GovCMS assessed the CRITICAL risk as they applied to D11 distribution, subsequently the security residual risk remained CRITICAL. The D11 distribution will continue to be supported after this update.

Given the limited GitLab and deployment availability over the past week, this deployment will be scheduled after hours to reduce impact of the deployment pipeline business hours.

There is no need for a SaaS deployment block, nor will there be any post deployment actions eg configuration export. PaaS deployments schedules will not be impacted.

Module Updates:
Update drupal/simple_oauth module from 6.1.3 to 6.1.4
- https://www.drupal.org/project/simple_oauth/releases/6.1.4
- https://www.drupal.org/sa-contrib-2026-296

Deployment schedule:
- Deployment to commence from 6PM AEDT Wednesday 11 November 2026 and will be conducted throughout the evening.
- Production branches completed by 11AM AEDT Thursday 12 November 2026
- Non-Production branches completed by 10AM AEDT Friday 13 November 2026

PaaS Actions:
Update your codebase to ensure you are running the latest platform base images and packages, and stay aligned to GovCMS best practice:
- GovCMS distribution (9 November 2026) > https://github.com/govCMS/GovCMS/releases/tag/4.6.1
- GovCMS lagoon (9 November 2026) > https://github.com/govCMS/lagoon/releases/tag/11.4.0.2
- GovCMS scaffold (15 September 2026) > https://github.com/govCMS/scaffold/releases/tag/4.1.0
- GovCMS scaffold-tooling (29 October 2026) > https://github.com/govCMS/scaffold-tooling/releases/tag/6.0.12
Nov 11, 2026 18:00 - Nov 15, 2026 22:00 AEDT

About This Site

GovCMS: Content management and website hosting for the Australian government. Managed by the Department of Finance with service delivery partners Salsa Digital and amazee.io

Uptime over the past 90 days. View historical uptime.
GovCMS Hosting and Infrastructure Operational
Hosting Infrastructure (Amazon EKS) Operational
Akamai CDN cache Operational
AWS Compute (Sydney) Operational
AWS S3 Storage (Sydney) Operational
AWS LoadBalancer (Sydney) Operational
GovCMS E-mail relay (AWS Simple Email Service) Operational
HTTPS Redirect Service Operational
GovCMS Projects Under Maintenance
Individual websites Under Maintenance
GovCMS Sites Dashboard Operational
GovCMS Sites Logging System (OpenSearch) Operational
GovCMS GitLab Operational
Deployment Infrastructure Operational
Lagoon API Operational
Akamai API Operational
Lagoon tasks Operational
GovCMS Service Desk (Freshdesk) Operational
Freshdesk email notifications Operational
Freshdesk search Operational
Freshdesk incoming emails Operational
Freshdesk outgoing emails Operational
Other Operational
Pygmy Operational
Docker Desktop Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Major outage
Partial outage
No downtime recorded on this day.
No data exists for this day.
had a major outage.
had a partial outage.

No incidents or maintenance related to this downtime.

Scheduled Maintenance

Regular Weekly Maintenance - GovCMS Nov 17, 2026 23:00 - Nov 18, 2026 06:00 AEDT

We are conducting regular maintenance on our systems. The maintenance will last for 7 hours.
Posted on Nov 10, 2026 - 07:00 AEDT

Nov 12, 2026

No incidents reported today.

Nov 11, 2026

GovCMS Deployments
Resolved - GovCMS GitLab and Lagoon deployments have been restored.
Please continue to raise service desk tickets regarding any issues with your GovCMS site.
Nov 11, 17:34 AEDT
Investigating - GovCMS GitLab and Lagoon deployments have been momentarily paused. The GovCMS back-end platform reset activities are taking longer than expected.

The GovCMS Service Desk will do its best efforts to address tickets raised as soon as they can, noting they also have the above limitations.

Thank you for your continued patience. We are actively working to restore services as quickly and safely as possible. We will let you know shortly when it’s available again.
Nov 11, 15:44 AEDT
Notice of upcoming GovCMS lagoon update 11.4.0.1
Completed - Deployments to non-production environments has been completed
Nov 11, 10:58 AEDT
Update - Bulk deployments to non-production environments will resume this evening and run throughout the night.
Nov 10, 16:36 AEDT
Update - Bulk deployments to non-production environments has been paused.
Nov 4, 10:52 AEDT
Update - Deployments of Lagoon 11.4.0.1 are complete for production sites and are now commencing on non-prod sites.
The deployment block has been lifted.
Nov 3, 11:13 AEDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 3, 06:00 AEDT
Scheduled - Advice
We would like to inform you the upcoming GovCMS Drupal 11 (D11) lagoon release and deployment. This is a lagoon only deployment. There is no need for a SaaS deployment block, nor will there be any post deployment actions eg configuration export. PaaS deployments schedules are not impacted.

SaaS deployment schedule:
- Deployment to commence from 6:00am AEDT Tuesday 3 November 2026 and will be conducted throughout the daytime.
- Production branches completed by 10:00am AEDT Wednesday 4 November 2026
- Non-Production branches completed by 10:00am AEDT Thursday 5 November 2026

PaaS Actions
Please ensure you address https://www.drupal.org/sa-contrib-2026-286 if required. The SLA for this one is Thursday 5 November 2026.
- If you are using the default scaffold and have scaffold-tooling in composer.json, then run composer update govcms/scaffold-tooling
- If you include stage_file_proxy in composer.json yourself then run composer update drupal/stage_file_proxy
- If you don't use stage file proxy, then don't worry no action required

If you have any concerns, raise a ticket at https://www.govcms.support
Oct 30, 16:47 AEDT
GitLab Password Reset
Resolved - GitLab PATs (Personal Access Tokens) have been reenabled. Apologies for this morning’s disruption.
Nov 11, 10:55 AEDT
Investigating - GovCMS GitLab users will be required to reset their password.
The wording you will see in the email is system generated. Please be assured this was GovCMS that triggered it. All Gitlab passwords need to be updated.

GitLab PATs (Personal Access Tokens) have been disabled. We will let you know shortly when they will be reenabled.
Nov 11, 10:12 AEDT
Regular Weekly Maintenance - GovCMS
Completed - The scheduled maintenance has been completed.
Nov 11, 06:00 AEDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 10, 23:00 AEDT
Scheduled - We are conducting regular maintenance on our systems. The maintenance will last for 7 hours.
Nov 3, 07:00 AEDT

Nov 10, 2026

Investigating issue that may be affecting deployments
Resolved - GovCMS is back up and running.

SSH is now available and deployments are unblocked and working again. This also means that the GovCMS Service Desk will be able to resume addressing the ticket backlog.

That’s a wrap for this issue - Thank you everyone for your patience during this time.
Nov 10, 16:41 AEDT
Update - GovCMS Lagoon Dashboard, including the Lagoon API has been restored. As part of restoring access all existing GitLab Personal Access Tokens (PATs) have been revoked and you’ll need to set up new ones.

SSH remains unavailable so deployments are still blocked.

The GovCMS Service Desk will do its best efforts to address tickets raised as soon as they can, noting they are still working within the limitations.
Nov 10, 10:03 AEDT
Update - We appreciate your continued patience while we thoroughly work through this.

Access to GovCMS GitLab has been restored.

We are currently working through our staged restoration plan for platform availability. At present access to Lagoon Dashboard and deployments are still blocked.

The GovCMS Service Desk will do its best efforts to address tickets raised as soon as they can, noting they are still working within the limitations.
Nov 9, 16:48 AEDT
Update - Thank you for your patience while we continue our investigation. During this time, access to GovCMS GitLab and Lagoon Dashboard remains unavailable.

The GovCMS Service Desk will do its best efforts to address tickets raised as soon as they can, noting they also have the above limitations.

We are currently working through a plan to restore platform availability, but unfortunately at this stage are unable to provide a defined timeline.
Nov 9, 14:01 AEDT
Update - Access to GovCMS GitLab and Lagoon Dashboard has been disabled.
We’re continuing to investigate the activity as a priority. Further updates will be provided as the investigation progresses.
Nov 6, 20:44 AEDT
Update - In addition to our last message, GitLab PATs (Personal Access Tokens) have been disabled.
We'll provide more information about token regeneration soon.
Nov 5, 12:49 AEDT
Update - Due to a variety of issues deployments via GitLab may fail. If you have an urgent release, please raise a critical Service Desk ticket. Service Desk will do all best efforts to help, noting the SSH message below.

Advanced Lagoon tasks are now temporarily disabled.

SSH is still unavailable.
- We’re working on it and anticipate around mid-afternoon it we’ll have it up and running again.
- The GovCMS Service Desk also uses SSH functionality to complete some tasks. These are currently unable to be completed until the SSH component is fully restored.

Projects with OAuth enabled, may still be experiencing deployment issues.

GovCMS continues to investigate the activity as a priority and is closely monitoring the platform. Further updates will be provided as the investigation progresses.
Nov 5, 11:55 AEDT
Update - Advanced Lagoon tasks are now temporarily disabled.

SSH is still unavailable.
- We’re working on it and anticipate around mid afternoon it will be available for PaaS customers.
- SaaS customers are not impacted.
- The GovCMS Service Desk also uses SSH functionality to complete some tasks. These are currently unable to be completed until the SSH component is fully restored

Projects with OAuth enabled, may still be experiencing deployment issues.

GovCMS continues to investigate the activity as a priority and is closely monitoring the platform. Further updates will be provided as the investigation progresses.
Nov 5, 11:00 AEDT
Update - SSH is still unavailable.
- We’re working on it and anticipate around mid afternoon it will be available for PaaS customers.
- SaaS customers are not impacted.
- The GovCMS Service Desk also uses SSH functionality to complete some tasks. These are currently unable to be completed until the SSH component is fully restored

Projects with OAuth enabled, may still be experiencing deployment issues.

GovCMS continues to investigate the activity as a priority and is closely monitoring the platform. Further updates will be provided as the investigation progresses.
Nov 5, 10:22 AEDT
Update - GitLab and project dashboards are now available.

SSH is still unavailable.
- PaaS customers will not be able to SSH into your projects.
- SaaS customers are not impacted.

GovCMS continues to investigate the activity as a priority and is closely monitoring the platform. Further updates will be provided as the investigation progresses.
Nov 4, 15:38 AEDT
Update - GovCMS has identified unusual behaviour on the platform and is taking precautionary steps to ensure the ongoing security and integrity of its services.

As part of these measures, passwords have been reset and OAuth tokens revoked. Some users may therefore be prompted to reset their password or re-authenticate when accessing certain sites.

GovCMS continues to investigate the activity as a priority and is closely monitoring the platform. Further updates will be provided as the investigation progresses.

We appreciate your patience and understanding while these important security measures are undertaken.
Nov 4, 10:50 AEDT
Update - We are continuing to investigate the issue. In the meantime, GitLab remains unavailable. We will let you know when it’s back up and running
Nov 4, 09:20 AEDT
Update - We are continuing to investigate the issue. In the meantime, GitLab remains unavailable. We will let you know when it’s back up and running.
Nov 4, 08:10 AEDT
Update - Investigations are still underway. GitLab has been taken offline for a deeper dive. We will let you know when it’s back up and running.
Nov 3, 22:10 AEDT
Update - Investigations are still underway. GitLab has been taken offline for a deeper dive. We will let you know when it’s back up and running.
Nov 3, 21:38 AEDT
Update - SSH is unavailable.
- PaaS customers will not be able to SSH into your projects.
- SaaS customers are not impacted.

We are continuing to investigate the issue.
Nov 3, 18:49 AEDT
Investigating - We’re currently investigating an infrastructure issue that may be affecting deployments.
Bulk deployments to non-production environments has been paused.
Nov 3, 15:19 AEDT

Nov 9, 2026

Nov 8, 2026

No incidents reported.

Nov 7, 2026

No incidents reported.

Nov 6, 2026

Nov 5, 2026

Nov 4, 2026

Regular Weekly Maintenance - GovCMS
Completed - The scheduled maintenance has been completed.
Nov 4, 06:00 AEDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 3, 23:00 AEDT
Scheduled - We are conducting regular maintenance on our systems. The maintenance will last for 7 hours.
Oct 27, 07:00 AEDT

Nov 3, 2026

Nov 2, 2026

No incidents reported.

Nov 1, 2026

No incidents reported.

Oct 31, 2026

Emergency Maintenance - Addressing CVE-2026-98432
Completed - The scheduled maintenance has been completed.
Oct 31, 06:00 AEDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Oct 30, 23:00 AEDT
Scheduled - We are aware of the recently disclosed Linux kernel vulnerability CVE-2026-98432 and will perform emergency maintenance to apply the updates required.

The work will take place during regular maintenance hours. During the maintenance, your sites may experience minor disruption to service
Oct 30, 15:56 AEDT

Oct 30, 2026

Oct 29, 2026

No incidents reported.

Incident History Powered by Atlassian Statuspage