Cloudron Forum

[1.39.0] Update uv to 0.12.0

[1.83.0] Update verdaccio to 6.10.0 Full Changelog Expose the optional legacy authentication cache for Verdaccio 6.x through server.legacyAuthCache. This feature is intended for performance-sensitive installations that still use legacy bearer tokens. When enabled, Verdaccio caches successful legacy token authentication results for a short period of time, so repeated requests using the same token do not need to run password verification through the authentication plugin every time. Concurrent requests for the same legacy token can also share the same in-flight authentication result. The cache is disabled by default, so existing installations keep their current authentication behavior unless they explicitly opt in. Basic authentication is not cached. If the cache is enabled, changed or revoked credentials may remain valid until the cached entry expires. See #6147 and the original 8.x backport in #6143.

[2.7.1] Update cloudflared to 2026.8.2

[5.8.7] add libsmbclient-php

[2.14.0] Update prometheus to 3.14.0 Full Changelog API: Deprecate the stats query parameter of /api/v1/query and /api/v1/query_range for values other than true and all. Other values still enable basic statistics but now return a deprecation warning; they will be rejected in the next major release. #19124 Discovery/Hetzner: Drop the __meta_hetzner_datacenter label for hcloud targets, following its removal from the Hetzner Cloud API. #19269 PromQL: Enable duration expressions by default. The promql-duration-expr feature flag is now a no-op. #19033 Discovery: Add Oracle Cloud Infrastructure compute service discovery (oci_sd_configs). #18919 PromQL: Add experimental start_timestamp(instant-vector) function returning the start timestamp of each sample in the given vector. Requires the use-start-timestamps feature flag. #19089 BUGFIX] Alerting: Fix 100% CPU usage on shutdown that could delay graceful shutdown and trigger timeout-based kills. #17859 TSDB: Fix silent data loss and potential crash loop when stale_series_compaction_threshold is used in the config file. #19016 TSDB: Fix potential data loss on restart when out-of-order ingestion is enabled and blocks are compacted. #19016 TSDB: Fix out-of-order queries blocking compaction for hours, causing memory usage to grow. #19013 Scrape: Fix scrape manager spinning at 100% CPU on shutdown. #19149

[1.40.1] Update gitea to 1.27.2 Full Changelog Fix: update collaborator access mode and httpsign (#38894, #38862) (#38895) Refactor: external render (#38885) (#38898) Fix(actions): resolve pull_request_target reusable workflows at the base commit (#38886) (#38897) Refactor: markup render (#38864) (#38869) Fix(auth): set WebAuthn user verification per request (#38805) (#38810) enhance: add missing npm package metadata properties (#38826) (#38831) fix(actions): keep github.event.inputs as strings for workflow_dispatch (#38899) (#38908) fix(lfs): accept successful transfer responses (#38866) (#38875) fix(storage): fix Azure Blob dump failing with file does not exist (#38814) (#38828) fix(migrations): use all configured GitHub tokens (#38841) (#38846)

[2.107.0] Update searxng to b2da6b9

[1.46.1] Update koel to 9.11.1 Full Changelog fix: return the whole library for a blank Subsonic search query by @phanan in #2622 fix: refresh the avatar preview after updating the profile by @phanan in #2629 fix: keep the current avatar when it isn't part of a profile update by @phanan in #2630 fix: show the avatar cropper full-screen by @phanan in #2632 fix: build the same Gravatar URL on the client and the server by @phanan in #2631 feat: tag logs with the request and user they came from by @phanan in #2637 fix: missing entries in search results by @phanan in #2639 fix: harden URL validation and the SSO callback by @phanan in #2642

[2.16.0] Update cubby to 2.17.0 Add file activity log Add file drop feature Enable collaboration in office documents Various recents and favorites fixes Update dependencies

[2.46.3] Update Lychee to 7.7.4 Full Changelog Improve feedback on mail notification command by @ildyria in #4625 Fix wrong frame detection by @ildyria in #4624 Add failsafe on wrong version style from advisories by @ildyria in #4630 Fix sneaky guest users by @ildyria in #4629 Add query string integration for the search by @ildyria in #4628 Add support for multi track in albums by @ildyria in #4637 Add missing check on face displays by @ildyria in #4631 Version 7.7.4 by @ildyria in #4639

[1.48.0] Update weblate to 2026.8.1 Full Changelog Project and component APIs now expose all user-configurable settings, including access control and translation-memory settings. See Weblate's REST API. Added the metrics command for retrieving server metrics locally in JSON, CSV, or OpenMetrics format. Task progress now requires authentication and works for aggregate automatic translation operations. Component creation through the REST API now returns the background task URL in the response when creation work is queued. Large language model machine translation services no longer fail when the optional persona and style settings are absent from the stored configuration, as happens when the service is installed through the REST API. import_json now preserves the component source language for newly imported components from JSON exports. Repository actions now require permission on every component sharing the affected repository, including linked components in other projects. Legal document confirmation now explicitly covers the linked privacy policy. See Legal module. Add-on change history now retains only explicitly public configuration values and marks changed credential fields as redacted. Translator work reports with metrics can now be displayed and downloaded as HTML.

[1.22.2] Update snipe-it to 8.7.2 Full Changelog API+UI: Use observers to prevent double logging on restores by @snipe in #19500 Custom Consumables Report: Fixed #15586 - Added custom consumables report by @snipe in #19502 Backup/Restore: Fixed #19506 and #19506 - MariaDB executable/path change by @snipe in #19507 LDAP Wizard: Fixed #19519 - better handle mTLS by @snipe in #19523 Restore SSL database keys within tests by @marcusmoore in #19522 Asset Checkin Notification: [FD-55583] Fix Null location bug by @Godmartinz in #19520 Fixed --force not skipping the PHP version prompt in ldap:troubleshoot by @kratos0718 in #19514 Improve Boost settings by @marcusmoore in #19508 Importer: Small UI improvements, send welcome email if user created by @snipe in #19525 Added #10606: support shift-click checkbox range selection by @DanielDavis05 in #19509