Cloudron Forum

[1.9.2] Update grav to 1.7.53 Full Changelog [security] Direct web access to the user/accounts, user/config, user/data and user/env folders is now blocked outright in every bundled webserver config, closing a hole where files such as certificates, tokens and databases stored under user/data with an unlisted extension could be downloaded directly. [security] A backup deny-all .htaccess now ships inside user/accounts, user/config and user/data so Apache installs stay protected even when the site root .htaccess has been customised or is out of date. [security] The upgrade postflight now patches an existing stock root .htaccess to add the folder block automatically, so installs that updated from an earlier version are protected without editing the file by hand. [security] URL query image transforms (such as image.jpg?resize=) are now turned off by default and, when enabled, refuse oversized dimensions above a configurable pixel limit, closing an unauthenticated denial of service where huge resize values could exhaust server memory.

[2.9.10] Update formbricks to 5.1.1 Full Changelog fix: restore Manage billing details button for custom and scale plans [ENG-1330] [backport 5.1] by @Dhruwang in #8292 fix(follow-ups): pass explicit locale to getTranslate in worker [backport 5.1] by @Dhruwang in #8293

[1.13.7] Update ollama to 0.30.9 Full Changelog Support for Cohere2Moe architecture Fixed LFM2 parser/render for cases where thinking was not emitted Fixed issue where ollama launch claude and other coding agent or assistant use cases would only output one token Ollama will now return an error if a single message is larger than the current context window Full Changelog: https://github.com/ollama/ollama/compare/v0.30.8...v0.30.9-rc1

[1.5.20] Update mirotalkbro to 1.3.36

[1.35.0] Update whitebophir to 2.9.0 Full Changelog

[1.29.0] Update mattermost to 11.8.0 Full Changelog Mattermost Platform Release 11.8.0 contains multiple new quality of life improvements, including Classification Markings: Channel Banners, Data Spillage: Report, Managed Sidebar Categories, and Mobile Ephemeral Mode: Milestone 1 (Offline Purge).

[3.16.0] Update metabase to 0.62.2.1 Full Changelog

[1.136.0] Update synapse to 1.155.0 Full Changelog

[2.38.0] Update bedrock to 1.26.30.5

[1.44.0] Update koel to 9.9.0 Full Changelog feat: add two-factor authentication for all users by @phanan in #2565, #2566, #2567 fix: equalizer preamp slider customization and initial position by @phanan in #2568 feat: reorder home blocks via overlay modal by @phanan in #2573 feat: cursor pagination for songs, albums, and artists by @phanan in #2574 fix: green drop indicator no longer leaves a gap on the left by @phanan in #2577

[1.53.0] Update chatwoot to 4.15.0 Full Changelog Conversation unread counts, sidebar badges, ordering, and filter support. New Help Center layout, per-locale settings, category icons, and editor improvements. WhatsApp/Twilio calling updates, voice messages, mute controls, and inbox call settings. Contact and company updates, including media view, contact filters, and company selector. Search results page, table resizing, inline images, and improved message rendering. Onboarding improvements for Help Center generation, OAuth redirects, and email provider detection. Security/API fixes for sessions, SafeFetch, webhooks, OAuth, secrets, and dependencies. Reliability fixes for IMAP/SMTP, assignment, widgets, Facebook, Instagram, WhatsApp, and email sync.

[1.17.0] Update docuseal to 3.1.0 Full Changelog Document editor: allows users to add, remove, reorder, rotate, and crop document pages. Convert uploaded photos to scanned pages via the document editor. Redact documents with true redaction via the document editor.