Cloudron Forum

[2.95.0] Update tt-rss to 333d735

[1.29.1] Update evcc to 0.313.1 Full Changelog Cardata: delete obsolete streaming containers (#32376) 0.313 backport: Sessions UI: fix grouped chart layout and legend styling (#32383)

[1.30.1] Update Trilium to 0.104.1 Full Changelog Migration fails if the hidden notes were protected. Desktop sync behind multi-cookie reverse proxies fails. Claude Code integration not working on Windows if installed via npm. Spellcheck seems to automatically reactivate whenever Trilium is restarted. Turning off smooth scrolling in options does not work Sync fails if the reverse proxy contains its own cookies Disabled TOTP from previous versions becomes active again Auto-formatting for extended to-do list states OCR now supports EPUB format. Desktop: Added an option to disable GPU acceleration

[1.54.2] Update chatwoot to 4.16.2 Full Changelog Captain FAQ suggestion review API and interface. WhatsApp health monitoring, BSUID messaging, and clearer outbound call errors. Intercom import retry and reliability improvements. Super Admin account suspension metadata. Conversation label search in the right-click menu. Email template, agent invitation limit, and connected agent bot owner fixes. Security hardening for conversation participants, account limits, and email limits. Calls page, tooltip, and onboarding test improvements. Numerous bug fixes and enhancements.

[2.16.1] Update discourse to 2026.7.1 Full Changelog

[1.26.1] Fix documentation link

[1.14.18] Update AdGuardHome to 0.107.78 Full Changelog See also the v0.107.79 GitHub milestone.

[1.83.4] Update vault to 2.0.3 Full Changelog auth/radius: Added case_insensitive_names toggle to prevent username collisions and enable case-insensitive user handling. core/acl: Fix LIST ACL bypass where a trailing-slash request could skip a more-specific deny rule. core: Use constant-time recovery token comparison core/acl: LIST requests with a trailing slash now correctly respect more-specific deny policies. Previously, a deny on path "kv/*" { deny } could be bypassed for LIST kv/private/ if a broader allow path "kv/*" also existed. Policies relying on the previous (incorrect) behavior may now be denied. core: Vault will now redirect non-canonicalized paths (containing /./, /../, or //) to a cleaned path, instead of rejecting these requests AI Agent Support (Beta/Enterprise): Adds beta support for first-class AI agents. Adds an Agent Registry to register agents, and adds support for using Vault as an OAuth resource server for registered agent entities. When configured, allows OAuth 2.0 JWTs to be used to directly authorize requests to Vault, without needing a Vault token. core/rotationMgr: Fix storage routing for local mounts in namespaces to prevent metadata replication and ensure GDPR compliance. secrets/pki: Fix PKI certificate issuance not_after time to respect max TTL. secrets/transit: Add managed key support to Transit rewrap endpoint. storage/raft: reject performance_multiplier values less than or equal to zero

[1.10.14] Update grav to 2.0.14 Full Changelog Removed old JQuery 2.1.4. However 2.2.4 and 3.7.1 remain for legacy support [security] An administrator with account-management rights can no longer grant themselves super-admin access by saving it into a user group's permissions, a protection the account form already had (GHSA-xhfv-7758-r9hx). [security] The content security scan no longer reports a page as clean when it was unable to examine it, closing two ways a page editor could hide a script from it: a single invalid character anywhere in the content, and padding a tag out to several thousand characters (GHSA-q2j8-x8hf-63ch).

[1.59.0] Update matomo to 5.12.0 Full Changelog The methods setIgnoreCampaignAttributionForSources and getIgnoreCampaignAttributionForSources have been added to the JavaScript tracker. They allow setting/getting sources whose campaign values in the current URL should be ignored for attribution. Matching campaign parameters are still kept in the tracked URL/request. Record::setAggregatedRecordTransform() lets a blob record register a callback that is applied to its aggregated table during non-day archiving, after the day blobs are aggregated together and before the table is truncated and stored. Use it together with Record::setBlobColumnAggregationOps() (marking a column 'skip') to recompute columns that cannot be summed across child periods for example a table-relative ratio, index or score so they can also be used as the sort column for truncation. It applies on both the standard blob path and the built-from-flat path (Record::setBuiltFromFlatRecord()), where the flat base record and the hierarchy rebuilt from it are each transformed on their own table. A matching optional $postAggregationTransform parameter was added to ArchiveProcessor::aggregateDataTableRecords(). The reporting menu can now be split into several top-level sections (in addition to the default "Analytics" menu). A category declares which section(s) it belongs to via Category::setGroups() (and the protected $groups property); API.getReportPagesMetadata now exposes a groups field per category. Each non-default group automatically gets a top-menu entry that opens the regular reporting single-page-app filtered to that group (the active section is carried in the URL hash), so reports stay within the same SPA and quick search. The first such section, "AI Insights", surfaces the existing AI Assistants reports. datatable_archiving_maximum_rows_actions_flat caps the number of rows used when flat-archiving page/title Actions reports before the hierarchy is rebuilt (set to 0 to keep the legacy hierarchical-only Actions archiving). See Record::setAggregatedRecordTransform() above. datatable_archiving_maximum_rows_ai_chatbot_content caps the number of content URLs (pages/documents) listed in the AI Chatbots Content Requests reports. datatable_archiving_maximum_rows_ai_chatbot_favoured_pages caps the number of page URLs listed in the Human-Favoured / AI-Favoured Pages reports. live_ai_chatbots_maximum_rows caps the number of AI chatbots listed in the real-time AI Chatbots reports. live_ai_chatbots_top_page_urls_maximum_rows caps the number of page URLs listed in the real-time AI Chatbots top page URL reports.

[1.18.5] Update mastodon to 4.6.4 Full Changelog Fix incorrect permission enforcement (GHSA-7jvv-fhmg-wpfw, GHSA-hx34-2pfw-2qfj) Fix SSRF protection bypass via IPv4-compatible IPv6 addresses (GHSA-vwhj-3g83-v276) Change autosuggestions to include second word in web UI (#39622 and #39696 by @Gargron and @zunda) Fix being unable to vote in polls without an expiration date (#39949 by @ClearlyClaire) Fix "Hide media with a warning" filters not being applied correctly (#39946 by @ClearlyClaire) Fix performance of user-focused queries in admin dashboard (#39929 by @ClearlyClaire) Fix Web Push subscription deletion endpoint incorrectly expecting anti-CSRF tokens (#39918 by @ClearlyClaire) Fix ActivityPub::Activity::Create trying to re-create known statuses when author changes (#39916 by @ClearlyClaire) Fix swapped order of "accept/reject" actions in follow requests (#39862 by @diondiondion) Fix followed tags not being properly cleaned up when an account is deleted (#39824 by @shleeable)

[3.15.3] Update WordPress to 7.0.2 Full Changelog

[1.21.5] switch to uv install missing aiohasupervisor