Release 5.109

July 16, 2026

This release continues our focus on improving the performance, usability and security of the Vasto platform.

We've expanded the Vasto API with new endpoints to support fully custom enrolment experiences, refined timetable switching, and continued our ongoing security hardening across administrative endpoints.

Alongside these improvements are a number of fixes to reporting, examinations, CRICOS/ELICOS attendance tracking, Xero integration and Student Portal functionality.

Improvements

• Added ability to hide calendar from student dash, browser caching remembers which tab is selected too.
• Reworked more timetable switching issues.
  • Switch finalisation now happens on the “switch complete” page.
  • Confirmation emails are sent out whenever a switch is complete.
• Updated mobile styling for timetable switching in the Student Portal.
• Added the ability to grab a “download” link from “My uploaded files” that includes the original file name.

• Expanded the Vasto API so you can power public course, bundle, and session listings directly from your own website or app.

  New endpoints

  • Bundles (GET /v1/bundles)
    • List your course bundles with pricing, tax, and contents (the courses/units inside, in order), plus the bookable session IDs and a ready-to-use enrolment link template for each.
    • Filter the timetable to a single bundle with GET /v1/timetable?bundle_id=….
  • Departments, Categories & Brands (GET /v1/departments, /v1/categories, /v1/brands)
    • The reference lists you need to build filter dropdowns and show friendly names against your timetable results.
    • Categories include their parent department_id for cascading filters.
  • Vouchers (GET /v1/vouchers and GET /v1/vouchers/validate)
    • List your voucher/coupon codes (with scope, expiry, usage limits and redemption counts), and validate a code against a course session or a bundle to get the discounted price back.

  Enhancements to existing endpoints

  • Timetable (GET /v1/timetable)
    • New bundle_id filter returns only the sessions within a bundle.
    • New state_id filter.
    • New voucher parameter.
    • New sessions_training_ends field.
  • Bundles (GET /v1/bundles)
    • Also accepts the voucher parameter.
  • Venues (GET /v1/venues)
    • New address, country, latitude, longitude and map_image_url fields.
    • City, state and postcode are now filled in from the venue's address record.

  Notes

  • All endpoints are read-only, scoped to your subscriber account, paginated, and require a Bearer token with the read ability.
  • Fully documented in the API reference and interactive Swagger UI at /api/documentation.
  • Backwards compatible; this release only adds new endpoints, fields, and optional parameters. No existing fields or behaviour have changed.
• Added ability to bulk check for LLN results and invite users to LLN exams from timetable students pages.
• Fixed conflicting issues between AusPost and Google addresses validation.
• Re-engineered our custom/scheduled report functionality to reduce downtime due to large datasets.

Bug Fixes

• CRICOS/ELICOS attendance tracking, fixes
  • Attendance percentages now count only sessions from the student's commencement date onward and only sessions that have actually finished, so the per-student tracker and the CRICOS/ELICOS Workbench always show the same figure.
  • Corrected rounding on the percentage calculation (previously off for students with large scheduled hours).
• Improved the search to match better when full names are entered. Added a quick search dropdown that shows the closes 5 students to allow a user to navigate to a student without having to go to the search page.
• Fixed an issue where some timetable switch invoices were not syncing to Xero.
• Fixed an issue where files could be uploaded against the wrong entity.
• All future online exam activity types will now inherit the passing grade directly from the exams passing grade. This can be overwritten by editing the activity and altering the passing grade.