What's Changed

Security & Fixes

• Fixed sporadic SSH "permission denied" errors during key rotation (#8990, fixes #7724)
• Fixed deployment failures when build server is enabled during restart operations (#9045, fixes #9013)
• Fixed breadcrumb queries causing out-of-memory crashes (#9048, fixes #9009)
• Fixed GitHub App webhook endpoint defaulting to IPv4 instead of instance domain (#8948)
• Fixed Hoppscotch service failing to start due to database health check (#8949)
• Fixed Docker Compose not respecting preserveRepository for project directory (#8956, fixes #8953)
• Fixed backup error when S3 storage is missing or deleted (#9038, fixes #9035)
• Fixed Stripe subscription error handling and resilience (#9030)
• Fixed Heyform template configuration (#8747)
• Fixed API resource UUID extraction from route parameters
• Fixed Docker cleanup stale container warning on cloud instances
• Fixed Compose file-not-found error now includes git branch info

New Services & Templates

• Added LibreSpeed service for self-hosted speed testing (#8626)
• Added imgcompress service for offline image processing (#8763)
• Updated Databasus to v3.16.2 (#8586)
• Updated n8n with Postgres and Worker to v2.10.4 (#8807)
• Updated SeaweedFS images to v4.13 (#8738)
• Fixed Castopod service port from 8000 to 8080 (#8817)

Improvements

• Added per-volume control of PR suffix in preview deployments (#9006, fixes #7802, fixes #7343)
• Added auto-population of FQDN from docker_compose_domains for compose previews (#8963, fixes #8958)
• Added force deletion option for servers with existing resources (#8962)
• Added auto-fetch of server metadata after validation (#8964)
• Added container label escape control to services API (#8955, fixes #8954)
• Added database environment variable management API endpoints
• Added storage management API endpoints for applications and backup schedules
• Added support for comments in bulk environment variable API endpoints
• Added placeholder hints for magic environment variables
• Added next billing date and billing interval display for subscriptions
• Added cache-based deduplication for delayed cron execution
• Simplified environment variable settings by removing buildtime/runtime options

What's Changed (Github)

• fix(git): GitHub App webhook endpoint defaults to IPv4 instead of the instance domain by @ShadowArcanist in #8948
• feat(service): update n8n-with-postgres-and-worker to 2.10.4 by @michachan in #8807
• Change Castopod service port from 8000 to 8080 by @SeriousM in #8817
• fix(service): hoppscotch fails to start due to db unhealthy by @ShadowArcanist in #8949
• fix(api): allow is_container_label_escape_enabled in service operations by @andrasbacsai in #8955
• fix(docker-compose): respect preserveRepository when injecting --project-directory by @andrasbacsai in #8956
• feat(server): allow force deletion of servers with resources by @andrasbacsai in #8962
• feat(compose-preview): populate fqdn from docker_compose_domains by @andrasbacsai in #8963
• feat(server): auto-fetch server metadata after validation by @andrasbacsai in #8964
• feat(templates): Add imgcompress service, for offline image processing by @ariqpradipa in #8763
• fix(template): fix heyform template by @iMuFeng in #8747
• chore(service): Update SeaweedFS images to version 4.13 by @FabioHAraujo in #8738
• feat(service): Add librespeed by @diogo24m in #8626
• feat(service): update databasus to v3.16.2 by @Luzefiru in #8586
• fix(preview): enable per-volume control of PR suffix in preview deployments by @andrasbacsai in #9006
• fix: prevent sporadic SSH permission denied on key rotation by @pannous in #8990
• fix(stripe): add error handling and resilience to subscription operations by @andrasbacsai in #9030
• fix(backup): throw explicit error when S3 storage missing or deleted by @andrasbacsai in #9038
• perf(breadcrumb): optimize queries and simplify navigation to fix OOM by @andrasbacsai in #9048
• fix(deployment): disable build server during restart operations by @andrasbacsai in #9045
• v4.0.0-beta.469 by @andrasbacsai in #9007

New Contributors

• @michachan made their first contribution in #8807
• @SeriousM made their first contribution in #8817
• @FabioHAraujo made their first contribution in #8738
• @pannous made their first contribution in #8990

Full Changelog: v4.0.0-beta.468...v4.0.0-beta.469

What's Changed

Security & Fixes

• Fixed SSH connection retry failures during deployments (#8927, fixes #8926)
• Fixed deployment type selection when using GitHub/GitLab Apps (#8934, fixes #8917)
• Fixed deployment authorization endpoint returning incorrect 404 errors (#8931, fixes #8925)
• Fixed shared variables not resolving in Docker Compose environments (#8930, fixes #8918)
• Fixed SSH keys not being used for git submodule and LFS operations (#8933, fixes #8895)
• Added support for scoped npm packages in file path validation (#8928, fixes #8924)

Improvements

• Added log filtering capability based on log level in deployment logs (#8784)

What's Changed (Github)

• fix(ssh): remove undefined trackSshRetryEvent() method call by @andrasbacsai in #8927
• fix(validation): support scoped packages in file path validation by @andrasbacsai in #8928
• fix(parsers): resolve shared variables in compose environment by @andrasbacsai in #8930
• fix(api): cast teamId to int in deployment authorization check by @andrasbacsai in #8931
• fix(git-import): ensure ssh key is used for fetch, submodule, and lfs operations by @andrasbacsai in #8933
• feat(ui): add log filter based on log level by @ShadowArcanist in #8784
• fix(application): clarify deployment type precedence logic by @andrasbacsai in #8934
• v4.0.0-beta.468 by @andrasbacsai in #8929

Full Changelog: v4.0.0-beta.467...v4.0.0-beta.468

What's Changed

Security & Fixes

• Fixed command injection vulnerability in health check commands (#8898)
• Added path validation to prevent command injection in file locations
• Fixed environment variables being overwritten when changing service domains (#8915, fixes #8912)
• Fixed Nixpacks deployment failures when application has no domain set (#8902, fixes #6830)
• Fixed resource deletion failing silently in the danger zone (#8909, fixes #8836)
• Fixed scheduled task input fields losing focus while editing (#8654, fixes #8647)
• Added docker_cleanup parameter to API stop endpoints (#8899, fixes #7758)

Improvements

• Added GitLab source integration with SSH deploy keys and HTTP basic auth (#8910, fixes #5295)
• Added database-backed proxy config storage with automatic recovery and versioned backups (#8905, fixes #7178)
• Added server metadata collection and display

What's Changed

• fix(security): sanitize newlines in health check commands to prevent RCE by @andrasbacsai in #8898
• fix: prevent scheduled task input fields from losing focus by @sharkcreep87 in #8654
• fix(api): add docker_cleanup parameter to stop endpoints by @andrasbacsai in #8899
• fix(deployment): filter null and empty environment variables from nixpacks plan by @andrasbacsai in #8902
• feat(proxy): add database-backed config storage with disk backups by @andrasbacsai in #8905
• fix(livewire): add error handling and selectedActions to delete methods by @andrasbacsai in #8909
• feat(git-sources): add GitLab integration and URL encode credentials by @andrasbacsai in #8910
• fix(parsers): use firstOrCreate instead of updateOrCreate for environment variables by @andrasbacsai in #8915
• v4.0.0-beta.467 by @andrasbacsai in #8911

New Contributors

• @sharkcreep87 made their first contribution in #8654

Full Changelog: v4.0.0-beta.466...v4.0.0-beta.467

What's Changed

Security & Fixes

• Prevent command injection via base64-encoding log drain environment variables
• Prevent command injection via git reference validation
• Add sentinel token validation to prevent command injection
• Require write permission for API validation endpoints
• Prevent false container exits on failed docker queries (#8860)
• Track last_online_at and reset database restart state
• Preserve user-saved environment variables on Docker Compose redeploy (#8894)
• Fix build-time environment variables breaking Next.js (#8890)
• Prevent command injection in developer view shared variables (#8889)
• Make confirmation modal close after dispatching Livewire actions (#8892)
• Respect keep for rollback setting for Nixpacks build images (#8859)

Dependencies

• Bump rollup from 4.57.1 to 4.59.0 (#8691)
• Bump league/commonmark from 2.8.0 to 2.8.1 (#8793)

What's Changed

• fix(docker-cleanup): respect keep for rollback setting for Nixpacks build images by @andrasbacsai in #8859
• fix(docker): prevent false container exits on failed docker queries by @andrasbacsai in #8860
• build(deps): bump rollup from 4.57.1 to 4.59.0 by @dependabot[bot] in #8691
• build(deps): bump league/commonmark from 2.8.0 to 2.8.1 by @dependabot[bot] in #8793
• fix: prevent command injection and fix developer view shared variables error by @andrasbacsai in #8889
• fix: Build-time environment variables break Next.js by @andrasbacsai in #8890
• fix(modal): make confirmation modal close after dispatching Livewire actions by @andrasbacsai in #8892
• fix(parser): preserve user-saved env vars on Docker Compose redeploy by @andrasbacsai in #8894
• v4.0.0-beta.466 by @andrasbacsai in #8893

Full Changelog: v4.0.0-beta.465...v4.0.0-beta.466

What's Changed

Security & Fixes

• Fixed WebSocket connection and host authorization issues in terminal (#8862, fixes #8856)
• Fixed environment variable parser capturing trailing braces in bash-style defaults (#8855, fixes #8851)
• Fixed confirmation modal staying open after database import/restore (#8697, fixes #8689)
• Fixed nginx.conf mounting error in development mode (#8662)
• Fixed docker-compose deployment with custom start commands and preserveRepository setting (#8848, fixes #8417)
• Fixed preview deployment page visibility for deploy key applications (#8579)

Improvements

• Added configurable timeout for public database TCP proxy connections (#8673, fixes #7743)

What's Changed

• fix: enable preview deployment page for deploy key applications by @mauritsderuiter95 in #8579
• fix(docker-compose): respect preserveRepository setting when executing start command by @andrasbacsai in #8848
• fix(proxy): mounting error for nginx.conf in dev by @Cinzya in #8662
• feat: add configurable proxy timeout for public database TCP proxy by @brendanlim in #8673
• fix(database): close confirmation modal after database import/restore by @devrim-1283 in #8697
• fix(env-parser): capture clean variable names without trailing braces in bash-style defaults by @andrasbacsai in #8855
• fix(terminal): resolve WebSocket connection and host authorization issues by @andrasbacsai in #8862
• v4.0.0-beta.465 by @andrasbacsai in #8853

New Contributors

• @mauritsderuiter95 made their first contribution in #8579
• @brendanlim made their first contribution in #8673
• @devrim-1283 made their first contribution in #8697

Full Changelog: v4.0.0-beta.464...v4.0.0-beta.465

What's Changed

Security & Fixes

• Fixed SSH command injection vulnerability (#8748)
• Resolved 419 session errors with Cloudflare Tunnels and domain-based access (#8749, fixes #5404)
• Fixed SSH directory permission issues during upgrades (#8635, resolves #6621)
• Added SSH directory permission auto-fix for new installations (#8635)
• Prevented command injection in certificate handling via base64 encoding (#8617)
• Hardened Docker command execution with centralized escaping (#8615)
• Prevented command injection in health check commands (#8611)
• Fixed cross-tenant IDOR vulnerability in resource cloning (#8613)
• Added IPv6 CIDR support for API access IP allowlist (#8750, fixes #8729)
• Fixed proxy initialization with IPv6 networks on Docker 25+ (#8703, fixes #8649)
• Fixed CSRF redirect loop during 2FA authentication (#8596)
• Corrected API permission requirements for POST endpoints (#8600)
• Added team authorization checks to domains_by_server API (#8616)
• Fixed Cloudreve service data persistence across restarts (#8740)
• Fixed Ente Photos join link configuration (#8727)
• Fixed application rollback to use correct commit SHA (#8576)
• Fixed deployment detection for BuildKit and secrets (#8565)
• Resolved team lookup for service relationships (#8559, fix #8431)
• Added webhook notification status validation (#8557, fix #8448)
• Fixed deploy key handling when private_key_id is zero (#8563, fixes #8562)
• Fixed Redis/KeyDB config permissions with custom configurations (#8561, fix #8539)
• Fixed password field UI flash before Alpine.js initialization (#8599, closes #8592)
• Fixed GlitchTip webdashboard loading issue (#8249)
• Fixed Grist service template configuration (#8384)
• Fixed API documentation schema references (#8239, closes #8229)

New Services & Templates

• Added Pydio Cells service (#8323)
• Added Sure service (#8157)
• Added Spacebot service with custom logo support (#8427)
• Updated N8N templates to 2.10.2 (#8679)
• Upgraded Beszel and Beszel Agent to v0.18 (#8513)
• Disabled Plane service in template suite (#8580)
• Disabled Pterodactyl Panel and Wings from service templates (#8512)
• Disabled Minio Community Edition from service templates (#8686)
• Disabled Maybe service in template suite (#8167)

Features & Improvements

• Added refund and cancellation management for subscriptions (#8637)
• Added comment field support to environment variables (#7269, fix #7239)
• Added command-based health check support for services (#8612)
• Added scheduled job monitoring dashboard (#8433)
• Added scheduled tasks CRUD API with authentication and validation (#8428)
• Made Horizon max time configurable (#8560, fix #8435)
• Fixed Soketi host binding for IPv6 support (#8619, closes #8584)
• Fixed scheduler self-healing for stale Redis locks with UI detection (#8618, fixes #8327)
• Fixed Traefik service label handling for force HTTPS (#8550)
• Improved security by hardening deployment paths and deploy abilities (#8549)
• Fixed queue timeout handling in Horizon gracefully (#8360)
• Fixed missing status variable in Hetzner status checks (#8359)
• Fixed container filtering in push server job (#8361)
• Improved proxy error handling on port allocation failure (#8362)
• Enhanced SSH error tracking with proper Sentry scoping (#8363)

UI & Developer Experience

• Added container labels header to UI (#8752)
• Improved project heading navigation spacing (#8564)
• Fixed datalist border color and added repository selection watcher (#8240)
• Fixed Docker Compose force HTTPS preference behavior (#8424)
• Migrated test suite to SQLite in-memory with Pest browser testing (#8364)

Changes

• feat(database): add official postgres 18 and pgvector 18 support -> You could always change the database image and volume mount path manually and achieve unofficial support that is why this was not added faster
• feat(ui): add postgres 16 to the UI
• feat(ui): improve global search with uuid and pr support
• feat(installer): add tencentos as a supported os
• feat(service): upgrade checkmate to v3 with all the necessary changes
• feat(service): upgrade listmonk to v6 with all the necessary changes
• feat(service): upgrade formbricks to v4 with all the necessary changes
• feat(service): update pterodactyl version
• fix(backup): postgres restore arithmetic syntax error
• fix(validation): add @, / and & support to names and descriptions
• fix(api): infinite loop with github app with many repos
• fix(parser): replace dashes and dots in auto generated envs
• fix(labels): make sure name is slugified
• fix(ui): make tooltips a bit wider
• fix(ui): modal issues
  • tooltips can not extend outside the modal causing a scrollbar to appear
  • modals are to wide
  • remove unused minWidth and maxWidth props
• fix(ui): horizontal overflow on application and service headings
• fix(validation): enforce url validation for instance domain
• fix(service): autobase database is not persisted correctly
• fix(service): supabase studio settings redirect loop
• fix(service): disable supabase kong response buffering and increase timeouts which fixes large file downloads
• fix(service): reactive-resume template
  • pinned to v4.3.7 instead of latest (solution provided by #8045 author)
  • added healthchecks for reactive resume and chrome service
• fix(service): allowed hosts and image version problems with strapi
  • automatically generate vite.config.js with the strapi FQDN
• fix(service): bluesky pds invite code doesn't generate
• fix(service): bugsink login fails due to cors
• fix(service): forgejo login failure
• fix(service): rocketchat fails to start due to database version incompatibility
• fix(service): kimai fails to start due to the healthcheck ip not being in the trusted hosts
• fix(service): activepieces postgres 18 volume mount
• fix(service): users unable to create their first ente account without SMTP
• fix(service): seaweedfs logo
• fix(service): soju svg
• chore(service): use major version for openpanel
• build: upgrade postgres client to fix build error
• refactor(services): improve some service slogans
• docs(api): improve compose app endpoint deprecation description

New Services

• added openclaw template
• added langflow template
• added bento-pdf
• added alexandrie template
• added goatcounter template
• added satisfactory game server
• added back soketi-app-manager

Issues

• fixes: #7976
• fixes: #7987
• fixes: #4577
• fixes: #5055
• fixes: #6236
• fixes: #5699
• fixes: #7941
• fixes: #8014
• fixes: #8026
• fixes: #8015
• fixes: #8045
• fixes: #8028
• fixes: #7818
• fixes: #6670
• fixes: #5443
• fixes: #6150
• fixes: #8097
• fixes: #7279
• fixes: #8092
• fixes: #8103
• fixes: #6856
• fixes: #8035

What's Changed (by Github)

• fix(service): update seaweedfs logo by @yipfram in #7971
• fix(service): autobase database is not persisted correctly by @aschulz90 in #7978
• feat(service): upgrade checkmate to v3 by @ShadowArcanist in #7995
• fix(backup): postgres restore arithmetic syntax error by @Raphael-Afonso in #7997
• feat(service): update pterodactyl version by @majcek210 in #7981
• fix(service): users unable to create their first ente account without SMTP by @StromFLIX in #7986
• fix(ui): horizontal overflow on application and service headings by @Mailootje in #7970
• fix(service): supabase studio settings redirect loop by @codewithtyler in #7828
• fix(service): disable kong response buffering and increase timeouts by @Vadko in #7864
• fix(service): rocketchat fails to start due to database version incompatibility by @HeapReaper in #7999
• feat(service): add langflow template by @viktoravelino in #8006
• fix(service): elasticsearch-with-kibana not generating account token by @ShadowArcanist in #8067
• chore(service): use major version for openpanel by @lindesvard in #8053
• feat(service): add alexandrie template by @Smaug6739 in #8021
• fix(service): kimai fails to start by @ysbrandB in #8027
• feat(service): upgrade formbricks to v4 by @ShadowArcanist in #8022
• feat(service): add goatcounter template by @maxibenner in #8029
• fix(service): reactive-resume template by @ShadowArcanist in #8048
• fix(api): infinite loop with github app with many repos by @BanovMiroslav in #8052
• fix(env): skip escaping for valid JSON in environment variables by @andrasbacsai in #8080
• fix(validation): enforce url validation for instance domain by @ShadowArcanist in #8078
• feat(service): add satisfactory game server by @Terule in #8056
• fix(service): bluesky pds invite code doesn't generate by @Cinzya in #8081
• fix(service): bugsink login fails due to cors by @Cinzya in #8083
• fix(service): strapi doesn't start by @Cinzya in #8084
• feat(service): disable mautic by @ShadowArcanist in #8088
• feat(service): add bento-pdf by @RxDx in #8095
• fix(service): activepieces postgres 18 volume mount by @Elandlord in #8098
• feat(database): add official postgres 18 and pgvector 18 support by @peaklabs-dev in #8143
• fix(service): forgejo login failure by @ShadowArcanist in #8145
• feat(ui): improve global search with uuid and pr support by @albertorizzi in #7901
• fix: stop database proxy when is_public changes to false by @andrasbacsai in #8138
• v4.0.0-beta.463 by @peaklabs-dev in #7998

New Contributors

• @aschulz90 made their first contribution in #7978
• @Raphael-Afonso made their first contribution in #7997
• @StromFLIX made their first contribution in #7986
• @Mailootje made their first contribution in #7970
• @codewithtyler made their first contribution in #7828
• @HeapReaper made their first contribution in #7999
• @viktoravelino made their first contribution in #8006
• @Smaug6739 made their first contribution in #8021
• @ysbrandB made their first contribution in #8027
• @maxibenner made their first contribution in #8029
• @BanovMiroslav made their first contribution in #8052
• @Terule made their first contribution in #8056
• @RxDx made their first contribution in #8095
• @Elandlord made their first contribution in #8098

Full Changelog: v4.0.0-beta.462...v4.0.0-beta.463

Changes

• feat(service): add service database restore/import support
• feat(api): add url update support to services api
• feat(api): add more allowed fields to application api endpoints
  • added dockerfile_location as it is needed for Dockerfile deployments to work properly
  • added is_spa which can be used together with is_static
  • added is_auto_deploy_enabled and is_force_https_enabled
• feat(api): allow to escape special characters in labels
• feat(api): add tag filtering on the applications list endpoint
• feat(api): improve docker_compose_domains with conflict checking and force_domain_override support
• feat(notifications): add mattermost notifications (an open source slack alternative)
• feat: add application logs link to preview deployments PR comment
• feat(magic): add LOWERCASEUSER as magic variable which are sometimes required e.g. as docker registry username
• feat(ui): show server name on resource card
• feat(ui): improve sidebar menu items styling
• feat(install): add postmarketos to the supported distributions
• feat(ui): make git repository dropdown searchable
• feat(service): upgrade n8n template to v2 with all the necessary changes
• feat(service): upgrade trigger.dev template to v4 with all the necessary changes
• feat(service): upgrade uptime kuma to version 2 with all the necessary changes
• feat(service): upgrade docker registry template to v3 with all the necessary changes
• feat(service): upgrade postgresus to databasus
• feat(service): improve matrix templates by adding postgres and improving naming
• feat(service): add healthchecks to evolution-api service
• feat(services): update authentik
• feat: allow more characters specifically Unicode alpha-numeric characters contained in \p{L}, \p{M}, \p{N} when validating while still not allowing any unsafe characters
• feat(lang): add missing chinese translation keys
• feat(lang): update portuguese language keys
• feat(ui): add port mapping format to helper and fix typo
• perf: optimize destinationsByServer query
• fix(env): environment variable sorting not working
• fix(git): trigger deployments when watch paths is empty and not just when they are null
• fix(backup): database restores with custom db name with backup all databases not working
• fix(logdrain): use deployment server and not build server settings
• fix(service): twenty template and enable it again
• fix(docker): use dynamic OS ID for ubuntu based OSs to use the correct Docker repository URL
• fix: instance public ips initialization validation
• fix: cast docker version to int for proper comparison
• fix: making the db public does not instant save the port
• fix(log): preserve leading whitespace in logs
• fix(logs): remove hardcoded 2000 line limit
• fix(api): remove incorrect uuid format from cuid2 parameters in openapi spec
• fix(api): applications post and patch endpoints
  • remove docker_compose_raw from post and patch endpoints, as the compose file is sourced from git and should not be manually settable via the api
  • improve the documentation for docker_compose_domains (URLs)
  • enhanced array validation for docker_compose_domains by validating each array field and verifying which fields are allowed
  • set a custom array validation error message, as the default message is not really clear
  • show an error if the user attempts to set domains when the build pack is dockercompose
  • validate that the domains in docker_compose_domains are proper URLs and include a valid scheme (http or https)
• fix(api): include docker_compose_domains in domain conflict check via Application::ownedByCurrentTeamAPI
• fix(api): is_static and connect_to_docker_network fields where not updating on some endpoints
• fix(api): if domains field is empty clear the fqdn column which allows to remove all URLs from the domains field
• fix(api): check for domain conflicts within the current request
• fix(api): deprecate application create compose endpoint as it is an unstable duplicate of the services endpoint
• fix(api): one click service name and description cannot be set during creation
• fix(api): create service endpoint validation and docs
  • if service type and docker_compose_raw is filled show an error
  • if service type is not valid show an error with all valid service types
  • remove enum from service type docs as it always gets outdated
• fix(api): encoding checks for compose files, nginx configurations, dockerfiles, database configs and labels
  • switch from ASCII to UTF-8 to allow special characters, emojis and more
• fix(api): remove environments from projects API endpoint docs
• fix(api): docs for bulk env update response
• fix: APP_NAME env in development
  • using a different APP_NAME for development might seem like a good idea but it is annoying and causes issues when debugging, especially with Redis as it is used as the key prefix
• fix(preview): docker compose preview URLs
• fix: 404 on /settings for root user on cloud instance
• fix(ui): empty network destinations when cloning a resource
• fix(ui): instance public ips ui validation
• fix(ui): images inside coolify changelog
• fix(ui): domain input whitespace trimming in instance settings
• fix(ui): change password visibility eye icon based on state
• fix(ui): hide Already registered? button from the /register page when there are 0 users as clicking on it would just redirect you back to /register
• fix(ui): improve volume mount warning for compose applications
• fix(service): remove start command from unleash template
• fix(service): add instagram envs to postiz template
• fix(service): budibase worker envs
• fix(service): correct POSTGRES_HOST in freshrss
• fix(service): use fqdn for server host in sequin template
• fix(service): wireguard easy host to use fqdn
• fix(service): signoz metrics env
• chore(deps): update composer and node dependencies
• chore(docker): add healthchecks to dev services
• chore(service): update weblate service
• chore(service): update rybbit service
• chore(service): improve mosquitto template
• refactor(service): remove unused envs from hoppscotch
• refactor(api): remove old stale domains update code from services endpoints
• refactor(api): update application create endpoints docs to specify that Dockerfile and Docker Image deployment type are without git
• refactor(api): application urls (domains) validation
  • rename fqdn to urls as that is what it actually is
  • improve URL validation to allow urls without a TLD
  • improve error messages to make it clear that URLs are needed
  • improve code by combining some actions
• docs(api): improve domains API docs
• docs(api): make docker_compose_raw description more clear

Security Fixes

• fix(env): only cat .env file in development to not expose all ENVs in deployment logs
• fix(env): only show final nixpacks plan variables section in development to not expose all ENVs in deployment logs

New Services

• added seaweedfs template
• added uptime kuma v2 with mariadb and mysql
• added autobase template
• added sftpgo template
• added esphome template
• added linkding and linkding plus template
• added open archiver template
• added cloudreve template
• added booklore template
• added sessy template
• added chibisafe template
• added mage-ai template
• added TrailBase template
• added calibre web automated with downloader template
• added silverbullet template
• added nocobase template
• added hatchet template
• added redmine template
• added glpi template

Issues

• fixed: #7853
• fixed: #7043
• fixed: #7857
• fixed: #7065
• fixed: #6885
• fixed: #7355
• fixed: #7721
• fixed: #7080
• fixed: #7308
• fixed: #7862
• fixed: #6888
• fixed: #6610
• fixed: #7117
• fixed: #7102
• fixed: #7772
• fixed: #7755
• fixed: #7438
• fixed: #7924
• fixed: #6938
• fixed: #4843
• fixed: #4616
• fixed: #6823
• fixed: #6915
• fixed: #6462
• fixed: #7702
• fixed: #5831
• fixed: #4917
• fixed: #5648
• fixed: #6503
• fixed: #7235
• fixed: #7019
• fixed: #7885
• fixed #6044
• fixed #4394

What's Changed (Github)

• fix(workflow): add 'labeled' event type for issues to trigger Claude by @andrasbacsai in #7830
• fix(workflow): enhance label matching for Claude trigger in issues by @andrasbacsai in #7831
• fix(workflow): update prompt for Claude to provide default instructions on issue labeling by @andrasbacsai in #7832
• fix(workflow): update prompt for Claude to include 'ultrathink' for issue analysis by @andrasbacsai in #7833
• fix(workflow): update Claude action to use claude_args for model configuration by @andrasbacsai in #7834
• fix(workflow): update permissions for Claude to write access by @andrasbacsai in #7835
• fix(workflow): remove 'labeled' event from issue triggers and clean up permissions by @andrasbacsai in #7836
• claude fix test by @andrasbacsai in #7825
• feat(logs): Add loading indicator to download all logs buttons by @andrasbacsai in #7847
• Fix: Trim whitespace from domain input in instance settings by @andrasbacsai in #7837
• fix: prevent metric charts from freezing on page navigation by @andrasbacsai in #7848
• fix(settings): fix 404 on /settings for root user on cloud by @andrasbacsai in #7785
• feat: add Sessy as one-click service by @andrasbacsai in #7851
• feat: add ServiceDatabase restore/import support by @murataslan1 in #7540
• feat(template): mage-ai by @nktnet1 in #7705
• Update Rybbit service images to v2.2.3 by @goldflag in #7778
• feat(templates): update Postgresus to Databasus and bump Docker Image by @Luzefiru in #7799
• fix(templates): use FQDN instead of URL for Weblate site domain by @Vadko in #7827
• chore: update contributors guide by @ShadowArcanist in #7807
• fix: use original_server for log drain config in generate_compose_file by @OZCAP in #7619
• perf(server): optimize destinationsByServer query by @luojiyin1987 in #7854
• fix(docs): remove incorrect uuid format in openapi spec by @muhammedaksam in #7419
• feat(lang): add missing chinese translation keys by @Puxhkar in #7477
• feat(services): update authentik by @Datenschmutz in #7380
• chore(docker): add healthchecks to dev services by @luojiyin1987 in #7856
• feat(ui): show server name on resource card by @ShadowArcanist in #7417
• fix: add datetime cast to finished_at column by @muhammedaksam in #7418
• fix(service): correct POSTGRES_HOST in freshrss by @murataslan1 in #7759
• feat(lang): update portuguese language keys by @felipeyousoro in #7020
• chore(service): upgrade uptime kuma to version 2 by @piscis in #7258
• fix(ui): change password visibility eye icon based on state by @murataslan1 in #7729
• feat(magic): add LOWERCASEUSER as magic variable by @webworkerJoshua in #6942
• feat(install): add postmarketos to the supported distributions by @manoedinata in #6909
• feat(ui): make git repository dropdown searchable by @favourch in #7064
• fix(service): remove command from unleash template by @himanshu-ntml in #7379
• feat(service): add healthchecks to evolution-api service by @desarrollonextpro in #6607
• fix(ui): images inside coolify changelog by @YaRissi in #7357
• update n8n with postgres to the latest stable version 2.0.x with all necessary changes by @mrj0b in #7703
• fix(deployment): use mainServer consistently instead of redundant original_server by @andrasbacsai in #7872
• feat(service): improve n8n and update n8n worker to v2 by @peaklabs-dev in #7874
• fix: make PgBouncer prepared statement disabling configurable by @andrasbacsai in #7876
• feat: improve validation patterns by @peaklabs-dev in #7875
• feat(service): add trailbase template by @imjlk in #6934
• feat(service): upgrade docker registry template by @YaRissi in #7034
• feat(service): add esphome template by @nicanordlc in #6532
• feat(service): add hatchet template by @imnotdev25 in #6711
• refactor(service): remove unused envs from hoppscotch by @GauthierPLM in #6513
• feat(service): add sftpgo template by @vincentbaeten in #6415
• fix(service): add instagram envs to postiz template by @jonas-klesen in #6424
• feat(service): add cloudreve template by @hassankhan2608 in #6774
• feat(service): add silverbullet template by @StellarRounin in #6425
• fix(service): use fqdn for server host in sequin template by @GauthierPLM in #6528
• fix(service): wireguard easy host to use fqdn by @nicanordlc in #7354
• chore(service): improve mosquitto template by @diogo24m in #6227
• fix(log): preserve leading whitespace in logs by @alwoodm in #7879
• fix: instance public ips initialization validation by @murataslan1 in #7762
• fix: cast docker version to int for proper comparison by @murataslan1 in #7760
• fix(docs): api docs for bulk env update response by @YaRissi in #7714
• fix: db public port instant save and simplify if condition by @peaklabs-dev in #7883
• fix(ui): empty network destinations when cloning a resource by @alexzvn in #7309
• feat(service): add nocobase template by @sarthaksavvy in #7347
• feat(api): allow to escape special characters in labels by @dan5py in #7886
• fix(env): custom environment variable sorting by @peaklabs-dev in #7887
• fix: GitLab webhook validation by @andrasbacsai in #7899
• feat(service): upgrade trigger template to v4 by @VictorCano in #7808
• feat(service): add redmine template by @vincentbaeten in #6429
• feat(service): add autobase template by @vitabaks in #6299
• fix(service): twenty template by @yanniksuess in #6996
• feat(service): add uptime kuma with mariadb template by @piscis in #7256
• feat(service): add calibre web automated with downloader template by @StellarRounin in #6419
• feat(service): improve matrix templates by @4www in #7560
• feat(service): add booklore template by @dgloukhman in #7838
• fix(docker): use dynamic OS ID for Docker repository URL by @andrasbacsai in #7907
• docs: remove git worktree symlink instructions from CLAUDE.md by @andrasbacsai in #7908
• feat(service): add seaweedfs template by @Christopher2K in #7617
• feat: add application logs link to preview deployments PR comment by @hendricius in #7906
• feat(api): add tag filtering on the applications list endpoint by @YassineBenh in #7360
• fix(service): signoz metrics env by @ShadowArcanist in #7927
• feat(service): update autobase to version 2.5 by @vitabaks in #7923
• fix(ui): hide already registered button when there are 0 users by @dominic-schmid in #7918
• fix(api): create service endpoint validation and docs by @peaklabs-dev in #7916
• fix(api): applications create and patch endpoints by @peaklabs-dev in #7917
• feat(service): add chibisafe template by @nktnet1 in #5808
• feat(ui): improve sidebar menu items styling by @dominic-schmid in #7928
• feat(template): add open archiver template by @wayneshn in #6593
• feat(service): add linkding template by @jeromegamez in #6651
• docs: add transcript lol link and logo to readme by @pkpio in #7331
• fix(api): encoding checks by @peaklabs-dev in #7944
• fix(ui): improve volume mount warning for compose applications by @ShadowArcanist in #7947
• feat(service): add glip template by @howardshand in #7937
• feat(templates): add Sessy docker compose template by @andrasbacsai in #7951
• feat(api): add url update support to services api by @peaklabs-dev in #7929
• fix(preview): docker compose preview URLs by @peaklabs-dev in #7959
• fix(api): application endpoint issues part 2 by @peaklabs-dev in #7948
• feat(notifications): add mattermost notifications by @peaklabs-dev in #7963
• v4.0.0-beta.461 by @andrasbacsai in #7849

New Contributors

• @goldflag made their first contribution in #7778
• @Luzefiru made their first contribution in #7799
• @Vadko made their first contribution in #7827
• @OZCAP made their first contribution in #7619
• @luojiyin1987 made their first contribution in #7854
• @Puxhkar made their first contribution in #7477
• @felipeyousoro made their first contribution in #7020
• @webworkerJoshua made their first contribution in #6942
• @himanshu-ntml made their first contribution in #7379
• @desarrollonextpro made their first contribution in #6607
• @mrj0b made their first contribution in #7703
• @imjlk made their first contribution in #6934
• @imnotdev25 made their first contribution in #6711
• @vincentbaeten made their first contribution in #6415
• @hassankhan2608 made their first contribution in #6774
• @alwoodm made their first contribution in #7879
• @sarthaksavvy made their first contribution in #7347
• @VictorCano made their first contribution in #7808
• @vitabaks made their first contribution in #6299
• @yanniksuess made their first contribution in #6996
• @4www made their first contribution in #7560
• @dgloukhman made their first contribution in #7838
• @Christopher2K made their first contribution in #7617
• @hendricius made their first contribution in #7906
• @YassineBenh made their first contribution in #7360
• @dominic-schmid made their first contribution in #7918
• @wayneshn made their first contribution in #6593
• @jeromegamez made their first contribution in #6651
• @pkpio made their first contribution in #7331

Full Changelog: v4.0.0-beta.460...v4.0.0-beta.461

Optimize queries, views with caches and prevent N+1 queries.

tldr: some views are faster

What's Changed

Fixes

• Fix back navigation in global search resource selection (#7798, fixes #7739)
• Fix restart count not resetting when manually stopping resources (#7784)
• Fix Traefik proxy UI refresh timing issue after version update (#7783, fixes #7732)
• Fix build pack UI reactivity when switching between build packs (#7780)
• Fix upgrade modal loading indicators visibility in light mode (#7770)
• Fix broken hyperlinks to Sentinel page on metrics pages (#7752)
• Fix terminal sudo access for non-root users to access Docker socket
• Fix Keydb and Redis configuration using base64 encoding instead of temp files
• Fix 30-day metrics interval page freeze with data downsampling (#7787)

Improvements

• Add SPA navigation helper for smoother page transitions
• Refactor application general settings view for improved maintainability

What's Changed (Github)

• fix(ui): broken hyperlink to sentinel page on server and application metrics page by @ShadowArcanist in #7752
• fix(ui): improve upgrade modal loading indicators visibility in light mode by @andrasbacsai in #7770
• fix(ui): make build pack UI reactivity work properly by @andrasbacsai in #7780
• fix(proxy): defer UI refresh until Traefik version check completes by @andrasbacsai in #7783
• fix(restart): reset restart count when resource is manually stopped by @andrasbacsai in #7784
• fix: back navigation in global search resource selection by @andrasbacsai in #7798
• fix(metrics): prevent 30-day interval page freeze with LTTB downsampling by @andrasbacsai in #7787
• "Claude PR Assistant workflow" by @andrasbacsai in #7824
• v4.0.0-beta.460 by @andrasbacsai in #7768

Full Changelog: v4.0.0-beta.459...v4.0.0-beta.460

26.1 Release Candidate 3 (known as 26.1-rc-3 in the launcher) is the third and final release candidate for Java Edition 26.1, released on March 23, 2026. Full changelog: https://minecraft.wiki/Java_Edition_26.1-rc-3

New uNmINeD development snapshot is available for download!

Changes:

• (Minecraft) Reworked datapack and mod handling
• (Minecraft) Textures now can be used with Bedrock worlds (experimental)
• (Minecraft) Colors for custom/modded blocks now can be calculated automatically from textures
• (CLI) Textures now can be used with the CLI

Automatic colors for custom blocks

uNmINeD now can read biome and block metadata from datapacks/mods and behavior/resource packs, and it calculates map colors for custom blocks automatically by averaging their textures instead of displaying them as pink.

Textured rendering

By default, uNmINeD displays each block as a square filled with a single color. When textured rendering is enabled, it still does not render blocks in 3D, instead it fills the squares with an image (the in-game texture of a block) rather than a solid color.

Textured rendering can be enabled on the render settings side panel (the tab with a cog wheel icon). It works for zoom-in levels 4:1 or higher. It works well with cube-like blocks, but fences, walls and other blocks with a complex 3D model look off. Upcoming releases will be able to render fences and walls correctly, and images to be used for complex blocks will be customizable.

Usage with Java Edition

Using textures or datapacks/mods with Java Edition worlds requires a Minecraft client JAR file. If you have Minecraft installed, uNmINeD will automatically find your client JAR file, otherwise you have to copy it from another machine, and select it in uNmINeD’s app settings.

Usage with Bedrock Edition

Using textures or behavior packs with Bedrock Edition worlds requires a vanilla resource pack. You can download it from Mojang: https://github.com/Mojang/bedrock-samples/releases. Find your version (or use the latest), click on Assets, and download the full package named bedrock-samples-xxxxx-full.zip (or the source code zip package, either one is good), then select the downloaded file in uNmINeD’s app settings.

CLI usage

Use --java-client-jar=/path/to/1.21.11.jar to select your Minecraft client JAR.

Use --bedrock-vanilla-pack=/path/to/bedrock-samples-v1.26.0.2-full.zip to select your vanilla resource pack.

Use --textures=true for textured rendering (effective at zoom-in levels 4:1 or higher).

Selecting a client JAR or a vanilla resource pack is required for all datapack related functions, including automatic color calculation for custom blocks and textured rendering.

Screenshots

Oh The Biomes We’ve Gone:

Biomes O’Plenty:

Regions Unexplored:

Terralith:

Wilder Wild:

No changelog found.

26.1 Release Candidate 1 (known as 26.1-rc-1 in the launcher) is the first release candidate for Java Edition 26.1, released on March 19, 2026. This is the first release candidate released in 2026 and the first release candidate to be released with only an unobfuscated build. Full changelog: https://minecraft.wiki/Java_Edition_26.1-rc-1

26.1 Pre-Release 3 (known as 26.1-pre-3 in the launcher) is the third and final pre-release for Java Edition 26.1, released on March 17, 2026. Full changelog: https://minecraft.wiki/Java_Edition_26.1-pre-3

26.1 Pre-Release 2 (known as 26.1-pre-2 in the launcher) is the second pre-release for Java Edition 26.1, released on March 13, 2026. Full changelog: https://minecraft.wiki/Java_Edition_26.1-pre-2

There is a new PHP release in town!

💾

💾

💾

There is a new PHP release in town!

💾

💾

💾

As of February 2026, the PostgreSQL Community Association (PGCA), the official non-profit organization chartered by the PostgreSQL Core Team in 2011 to protect the Postgres brand assets, has updated its sponsorship levels and sponsorship prospectus.

Updated PGCA sponsorship levels

The PGCA Board would not be able to protect the PostgreSQL trademarks and brand assets without the generous financial support we receive from corporations, small businesses, and individual donors. We are deeply grateful for that support.

After reviewing sponsorship models used by other open source foundations, and in light of the increasing costs required to protect the PostgreSQL brand assets, we have increased the top two sponsorship levels: Benefactor and Patron, effective February 1, 2026. All other sponsorship levels remain unchanged. As always, we welcome and value donations at all levels, in any amount.

Significant update to the PGCA non-profit website

We’ve also made a significant update to the PGCA website, to modernize it and bring it forward to the present. We hope the new site makes it easier to understand the PGCA’s non-profit mission, learn how to use PostgreSQL trademarks appropriately, and donate, whether as a one-time or monthly contribution.

The updated PGCA website is at the same URL as before: www.postgres.ca.

Updated sponsorship levels and the sponsorship prospectus can be found on the Sponsors page at www.postgres.ca/sponsors/.

Postfix stable release 3.11.1

[A hyperlinked version of this announcement will be available at https://www.postfix.org/announcements/postfix-3.11.1.html]

Postfix stable release 3.11.1 is available.

• Bugfix (defect introduced: 20260219): alias_maps errors when default_database_type was not set in main.cf. Fix by Michael Tokarev.

• Bugfix (defect introduced: Postfix 3.0): buffer over-read when Postfix is configured with an enhanced status code not followed by other text. For example, "5.7.2" without text after the three-number code, in an access(5) table, header or body checks, or with "$rbl_code $rbl_text" in rbl_reply_maps or default_rbl_reply. These are all uncommon configurations. Problem reported by Kamil Frankowicz.

• Bugfix (defect introduced: Postfix 3.3): null pointer in nbdb_reindexd(8) because the "service_name" value was not propagated. Report by Michael Tokarev.

• During Postfix start-up, avoid a spurious error message from nbdb_reindexd(8), when non_bdb_migration_level disables automatic re-indexing.

You can find the Postfix source code at the mirrors listed at https://www.postfix.org/.

2026-03-10

nginx-1.29.6 mainline version has been released, featuring sticky sessions support for upstreams.

26.1 Pre-Release 1 (known as 26.1-pre-1 in the launcher) is the first pre-release for Java Edition 26.1, released on March 10, 2026, which updates the panorama and makes technical changes. This is the first pre-release released in 2026, and the first pre-release to be released with only an unobfuscated build. Full changelog: https://minecraft.wiki/Java_Edition_26.1-pre-1

26.1 Snapshot 11 (known as 26.1-snapshot-11 in the launcher) is the eleventh and final snapshot for Java Edition 26.1, released on March 3, 2026. Full changelog: https://minecraft.wiki/Java_Edition_26.1-snapshot-11

Postfix stable release 3.11.0

[A hyperlinked version of this announcement will be available at https://www.postfix.org/announcements/postfix-3.11.0.html]

Postfix stable release 3.11.0 is available. Postfix 3.7 - 3.10 were updated a few weeks ago; after that, Postfix 3.7 will no longer be updated.

The main changes are below. See the RELEASE_NOTES file for further details.

Berkeley DB migration:

• Some (Linux) distributions are removing support for BerkeleyDB databases (In Postfix, this means we lose support for the hash: and btree: lookup tables). See NON_BERKELEYDB_README for manual and partially automatic migration from btree: to lmdb:, and from hash: to lmdb: or cdb:.

• The loss of BerkeleyDB affects Mailman versions that want to execute commands like "postmap hash:/path/to/file" when a mailing list is added or removed. Postfix provides a way to redirect such commands to a supported database type.

• You don't have to wait until BerkeleyDB support is removed. It can make sense to migrate while BerkeleyDB support is still available (mainly, less downtime).

Changes in TLS support:

• Default TLS security. The Postfix SMTP client smtp_tls_security_level default value is "may" if Postfix was built with TLS support, and the compatibility_level is 3.11 or higher.

• Support for the RFC 8689 "REQUIRETLS" verb in ESMTP. This requires that every SMTP (and LMTP) server in the forward path is strongly authenticated with DANE, STS, or equivalent, and that every server announces REQUIRETLS support.

  See REQUIRETLS_README for suggestions to carefully enforce REQUIRETLS without causing massive mail delivery problems.

• Logging the TLS security level. This shows the desired and actual TLS security level enforcement status and, if a message requests REQUIRETLS, the REQUIRETLS policy enforcement status. For a list of examples see smtp_log_tls_feature_status

• Workaround for an interface mismatch between the Postfix SMTP client and MTA-STS policy plugins. This introduces a new parameter smtp_tls_enforce_sts_mx_patterns (default: "yes"). The MTA-STS plugin configuration needs to enable TLSRPT support, so that it forwards STS policy attributes to Postfix. Both postfix-tlspol and postfix-mta-sts-resolver have been updated accordingly.

  With this, the Postfix SMTP client will connect to an MX host only if its name matches any STS policy MX host pattern, and will match a server certificate against the MX hostname. Otherwise, the old behavior stays in effect: connect to any MX host listed in DNS, and match a server certificate against any STS policy MX host pattern.

• Post-quantum cryptography support. With OpenSSL 3.5 and later, change the tls_eecdh_auto_curves default value to avoid problems with network infrastructure that mishandles TLS hello messages larger than one (Ethernet) TCP segment. This problem is more generally known as "protocol ossification".

Miscellaneous changes:

• Deprecation of obsolete parameters. Postfix programs log a warning that these parameters will be removed. See DEPRECATION_README for a list of deprecated parameters.

• JSON output support with "postconf -j|-jM|-jF|-jP", "postalias -jq|-js", "postmap -jq|-js", and "postmulti -jl". No support is planned for JSON input support.

• Milter support: improved Milter error handling for messages that arrive over a long-lived SMTP connection, by changing the default milter_default_action from "tempfail" to the new "shutdown" action (i.e. disconnect the remote SMTP client). This was already back-ported to earlier stable releases.

There are more changes; see RELEASE_NOTES for those.

You can find the Postfix source code at the mirrors listed at https://www.postfix.org/.

Download de Windows-versie voor 5 clients.

VIENNA, Austria – March 04, 2026 – Enterprise software developer Proxmox Server Solutions (henceforth "Proxmox"), today announced that NAKIVO is offering native, agentless backup support for Proxmox Virtual Environment (VE) and is now officially a Proxmox solution provider. This strategic partnership provides a seamless, enterprise-grade data protection path for organizations transitioning to open-source infrastructure.

NAKIVO Backup & Replication is a comprehensive data protection solution that provides backup, instant recovery, ransomware protection and disaster recovery for a wide range of physical, virtual, cloud, SaaS and hybrid environments via a single web-based interface. This all-in-one approach helps organizations centrally manage protection tasks, maintain visibility across platforms and quickly recover workloads during outages or ransomware incidents.

Short Quote NAKIVO:

“Our integration with Proxmox VE is a direct response to the community’s need for a reliable, enterprise-grade data protection solution that matches the flexibility of their hypervisor. Our focus, as always, remains on delivering a reliable backup solution that streamlines data protection and helps achieve robust cyber resilience and rapid recovery for all environments,” Bruce Talley, CEO of NAKIVO.

Short Quote Proxmox:

“Our goal is to provide a virtualization platform that is both powerful and inherently open,” said Tim Marx, COO of Proxmox. “By fostering native integrations with leaders like NAKIVO, we give our customers the flexibility to choose the best-in-class tools they need to secure their data. This collaboration reinforces Proxmox VE as a mature, enterprise-grade ecosystem that is ready for the most demanding environments.”

Availability

The NAKIVO Backup & Replication integration is available immediately for all Proxmox VE users. For more information, please visit https://www.nakivo.com/proxmox-backup/

###

About NAKIVO
NAKIVO is a US-based software vendor dedicated to delivering a reliable backup, ransomware protection and disaster recovery solution for virtual, physical, cloud, SaaS and mixed environments. Over 16,000 customers in 191 countries trust NAKIVO with protecting their data, including major companies like Coca-Cola, Honda, Siemens and Cisco. Learn more: https://www.nakivo.com

About Proxmox Server Solutions
Proxmox provides powerful and user-friendly open-source server software. Enterprises of all sizes and industries use the Proxmox solutions to deploy efficient and simplified IT infrastructures, minimize total cost of ownership, and avoid vendor lock-in. Proxmox also offers commercial support, training services, and an extensive partner ecosystem to ensure business continuity for its customers. Proxmox Server Solutions GmbH was established in 2005 and is headquartered in Vienna, Austria. Learn more: https://www.proxmox.com

Contact: Daniela Häsler, Proxmox Server Solutions GmbH, marketing@proxmox.com

2026-03-03

njs-0.9.6 version has been released, featuring optional chaining, nullish coalescing assignment (??=), and logical assignment operators (||= and &&=).

The PostgreSQL Global Development Group has released an update to all supported versions of PostgreSQL, including 18.3, 17.9, 16.13, 15.17, and 14.22. This is an out-of-cycle release that fixes several regressions reported after the last update release.

For the full list of changes, please review the release notes.

Bug Fixes and Improvements

This update fixes several bugs that were reported since the previous release. The issues listed below affect PostgreSQL 18. Some of these issues may also affect other supported versions of PostgreSQL.

• Fix issue where a standby would halt and return an error "could not access status of transaction".
• Fix error where the substring() function would raise an error "invalid byte sequence for encoding" on non-ASCII text values if the source of that value is a database column. This was due to a change introduced for the fix to CVE-2026-2006.
• Fix for the strict_word_similarity function in pg_trgm that could lead to incorrect output or crashes. This was due to an oversight in the fix for CVE-2026-2007.
• Fix function volatility for json_strip_nulls() and jsonb_strip_nulls() to be immutable, like previous releases, allowing for them to be used in indexes. If you previously upgraded to PostgreSQL 18.0 through 18.2, see the additional steps in the "Updating" section.
• Fix for NOT NULL tests in LATERAL UNION ALL subquery that could lead to wrong query output.
• Avoid NOT NULL constraints from generating name conflicts with user-written constraints.
• Fix pg_stat_get_backend_wait_event() and pg_stat_get_backend_wait_event_type() to report values for auxiliary processes, similar to pg_stat_activity.
• Fix casting a composite-type variable to a domain type when returning its value from a PL/pgSQL function.
• Fix the hstore binary input function to avoid crashes on input with duplicate keys.

Updating

All PostgreSQL update releases are cumulative. As with other minor releases, users are not required to dump and reload their database or use pg_upgrade in order to apply this update release; you may simply shutdown PostgreSQL and update its binaries.

If you previously upgraded to PostgreSQL 18.0, 18.1 or 18.2, you need to execute the following SQL as a PostgreSQL superuser in all of your databases to make the json_strip_nulls() and jsonb_strip_nulls() functions immutable:

UPDATE pg_catalog.pg_proc SET provolatile = 'i' WHERE oid IN ('3261','3262');

You should also execute this command in the template0 and template1 databases so future databases you create in your PostgreSQL cluster have the correct function volatility setting. Please see the documentation on template databases for more information.

Users who have skipped one or more update releases may need to run additional post-update steps; please see the release notes from earlier versions for details.

For more details, please see the release notes.

Links

• Download
• Release Notes
• Security
• Versioning Policy
• Submit a Bug
• Donate

If you have corrections or suggestions for this release announcement, please send them to the pgsql-www@lists.postgresql.org public mailing list.

Download de Windows-versie voor 5 clients.

The Asterisk Development Team would like to announce
the release of Certified asterisk-22.8-cert1.

The release artifacts are available for immediate download at
https://github.com/asterisk/asterisk/releases/tag/certified-22.8-cert1
and
https://downloads.asterisk.org/pub/telephony/certified-asterisk

Repository: https://github.com/asterisk/asterisk
Tag: certified-22.8-cert1

This release resolves issues reported by the community
and would have not been possible without your participation.

Thank You!

Change Log for Release asterisk-certified-22.8-cert1

Links:

• Full ChangeLog
• GitHub Diff
• Tarball
• Downloads

Summary:

• Commits: 853
• Commit Authors: 110
• Issues Resolved: 590
• Security Advisories Resolved: 13