Cloudron Forum

[2.9.5] Update mirotalksfu to 2.4.40

[3.24.3] Update metabase to 0.63.16.6

[4.194.1] Update ghost-cli to 1.32.3 Full Changelog Fix CLI to handle archives with + without package/ prefix (#2313) - Austin Burdine

[1.22.31] Update invoiceninja to 5.13.37 Full Changelog Fixes for Forte service fee. Updates for client portal client switcher * autosizing + scrollbar Fixes for vendor upload validation Fixes for contact password reset validation Set expiry for password reset tokens Updated logic for refund form request Fixes for tax summary report Updates for login permissions / token filtering Fixes for payment dates on client portal list Add Daily Task Digest notification

[4.40.1] Image rebuilt to fix permissions

[1.142.0] Update synapse to 1.160.0 Full Changelog

[4.168.0] Update wekan to 11.53 Full Changelog Remove incomplete sanitizer test doubles. Thanks to GitHub CodeQL and xet7. Enforce Amiga-safe filenames on every read. Thanks to xet7. Stop creating SCRAM-SHA-1 credentials. Thanks to GitHub CodeQL and xet7. Secure and resume import/export operations. Thanks to xet7. Validate XLSX sheet colors before CSS serialization. Thanks to rbbjinioeq and xet7. Add verified recovery and low-load integrity audits. Thanks to xet7. A file WeKan refuses to serve is no longer served by Meteor-Files instead. Thanks to xet7. The universal change history is built, and Ctrl+Z reads it instead of positions alone. Thanks to xet7. Every card group is recorded, and History is one table opened from every menu. Thanks to xet7. Copying a list copies its cards, into a new list. Thanks to xet7.

[2.13.0] Update cal.com to 6.2.0 Full Changelog fix: show invite link settings modal when clicking edit invite link in team members view by @​anikdhabal in #​27917 fix: exclude test files from CODEOWNERS foundation approval by @​hariombalhara in #​27919 fix(app-store): preserve existing enabled state during seed by @​devanshu0x in #​27918 fix: use randomString() for booking uid in slots e2e tests to avoid unique constraint flake by @​alishaz-polymath in #​27916 fix: use random booking UIDs api/v2 slots e2e tests to prevent test flakiness due to DB unique constraint by @​romitg2 in #​27902 fix: add e2e-spec pattern to CODEOWNERS test file exclusions by @​anikdhabal in #​27926 fix: default icon size to 16px in createIcon wrapper and fix download button alignment by @​eunjae-lee in #​27924 fix: resolve signup watchlist review issues and auto-unlock on SIGNUP entry removal by @​alishaz-polymath in #​27923 fix: display phone numbers and localized timezone in BookingDetailsSheet by @​eunjae-lee in #​27909 feat: enable onboarding-v3 globally and update e2e tests by @​sean-brydon in #​27922

[1.59.9] Update LimeSurvey to 7.0.13+260903 Full Changelog

[1.16.31] Update freescout to 1.8.239 Full Changelog Removed black outline when clicking on links in Chrome. Disabled support of legacy attachment URLs with MD5 tokens (GHSA-89ww-mfww-5vr6) Fixed linking messages into conversations in Outlook (#4922) Take into account IPv6 transition addresses in Helper::sanitizeRemoteUrl() (GHSA-v5xm-qw3f-qm98) Fixed preserving CSS custom properties during minification (#5611) Fixed emails sometimes being sent as raw MIME source when sending via mail() function (#5615)

[5.3.0] Update minio to RELEASE.2025-10-15T17-29-55Z Full Changelog A CVE was reported Privilege Escalation via Session Policy Bypass in Service Accounts and STS and fixed in this release, fix: remove unnecessary replication checks by @0xMALVEE in #21569 LDAP TLS handshake fails with StartTLS and tls_skip_verify=off by @mosesdd in #21582 fix: incorrect poolID when after decommission adding pools by @jiuker in #21590 fix: after saveRebalanceStats cancel will be empty by @jiuker in #21597 Use new gofumpt by @klauspost in #21613 fix: timeN function return final closure not be called by @drivebyer in #21615 fix: allow trailing slash in AWS S3 POST policies by @cduzer in #21612 fix: check sub-policy properly when present by @donatello in #21642

[1.119.1] Update gitlab-foss to 19.3.1 Full Changelog Provision inherited foundational flows without user elevation (commit) Gate tracked ref filter on advanced vulnerability management (commit) Fix Compliance Framework Cross-Namespace Assignment on self-managed instances (commit) (merge request) Reject overflow username length in SCIM and OAuth sign-in (commit) (merge request) Prevent Sidekiq exhaustion via unbounded import jobs (commit) (merge request) Ignore Claude project settings in Claude agent (commit) (merge request) Check :update_approvers before resetting MR approval rules (commit) (merge request) Prevent policy job needs from resolving to untrusted jobs (commit) (merge request) Enforce protected environment check on terminal websocket auth (commit) (merge request)

[3.7.0] Update Rocket.Chat to 8.8.0 Full Changelog Adds classification banners to ABAC-managed rooms: admins can describe US-Government-style classification markings (levels, special access programs, releasability, colors) in a new JSON setting, and matching rooms display a colored classification banner above the room header for all members. Accepts a role name in the when.hasOneRole and when.hasAllRoles filters of an app action button Changes the default apps-engine runtime backend from deno to node. The previous behavior can be restored by setting the environment variable APPS_ENGINE_RUNTIME_BACKEND='deno' Adds support for SAML authentication in the mobile and desktop apps via the system browser. Deprecates LDAP and SAML authentication on workspaces without a Premium plan. Both keep working as they are today, but the admin settings now warn that version 9.0.0 will require a license including the ldap-enterprise or saml-enterprise module, and a warning is logged when an unlicensed workspace authenticates a user through either of them. Replaces the "Drafts in sidebar" feature preview with an always-on draft indicator. Thread-composer drafts are also persisted per thread and indicated in the thread list Adds status visibility, letting users hide their presence and status message from specific people they choose. Blocked people see that user as offline, indistinguishable from genuinely offline, and the block can be lifted at any time changes apply live, without a reload. Fixed app action buttons never matching a role scoped to Subscriptions owner, moderator, leader, or a custom one. The room was not being passed as the scope of the role check, so a button filtered by one of those roles stayed hidden even for a user who held it in the room. Fixed business hours closing for one minute a day when configured as 00:00-23:59. Work hours are set at minute granularity, but the finish time was treated as exclusive, so consecutive daily windows never met and the service dropped to closed for the whole 23:59 minute agents could not become available and the Livechat widget rendered the offline form. A work hour now stays open until the end of its finish minute. Fixes the composer popups (mentions, slash commands and emojis) staying open after programmatic changes to the composer text, such as canceling the edition of a message that contains a mention.

[1.101.0] Update immich to 3.1.0 Full Changelog feat(cli): Add --visibility flag to immich CLI upload subcommand by @yuxincs in #29614 feat(mobile): custom date range for map by @YarosMallorca in #26205 feat(web): Keep show more open on duplicates by @MontejoJorge in #29734 fix(server/workflow): add trigger for external libraries AssetCreate by @cratoo in #29597 feat(web): add wake lock when uploading assets by @diogotcorreia in #29820 feat(web): undo archive from toast by @YarosMallorca in #27061 feat: workflow filter assets by upload path by @benbeckford in #30000 feat(web): add maintenance link to command palette by @yamishi13 in #30016 fix: re-evaluate OIDC role claim on every login and support array values by @ImperatorRuscal in #29991 feat: password invalidate sessions by @jrasm91 in #30125

[2.38.10] Update bedrock to 1.26.45.1

[1.31.1] Update mattermost to 11.10.1 Full Changelog Mattermost Platform Release 11.10.1 contains various bug fixes.

[3.5.2] Update open-webui to 0.11.3 Full Changelog Accessibility mode reaches the menus. Accessibility mode now marks the menu entry you are pointing at and the model already chosen with a stronger background, across the dropdown menus, their submenus, and the model picker together with its filter and compare controls, so those cues carry the contrast the accessibility guidelines ask for in both themes. Commit, Commit General improvements. Various improvements were implemented across the application to enhance performance, stability, and security. Translation updates. Translations for Indonesian were enhanced and expanded. Chat branches stay connected after reloads. A reply saved under an earlier message now stays listed under that message, so branch arrows, exports, reloads, and later edits keep the whole conversation in view, and chats already saved with that link missing are repaired when opened. #29299 Upgrades fail clearly instead of starting half updated. A failed database upgrade now stops at the migration error that caused it, instead of starting anyway and reporting a missing table or column such as 'chat.timer_at' later, which is the upgrade failure seen after moving from 0.11.0, 0.11.1, or 0.11.2. #29280 Custom interface fonts reach more of the app. The font chosen in interface settings now applies to dropdowns and other interface text that previously fell back to the standard font. Commit Disconnect OAuth only where there is OAuth. The disconnect control on a tool server reached over MCP now appears only where that server signs in through OAuth and an account is connected, rather than on servers that use no sign-in at all. #29296