Cloudron Forum

[1.0.0] Update mail to 1.0.0 marking the first stable release Add collected address lists to suggest email addresses of previous conversations when composing Fix app state when the user does not have access to any mailboxes

[1.1.0] Update docker-registry to 1.1.0

[0.8.8] Update infisical to v0.165.12 Full Changelog feat(pam): restore Oracle Database account support by @carlosmonastyrski in #8035 fix(cert-management): fix dupe member issue by @lb-vn in #8147 fix: oracle cli version by @carlosmonastyrski in #8152 fix: point MFA and Google SSO enforcement upgrade gates at the Advanced plan by @Thiago-AS in #8156 fix(project-roles): unblock duplicating the built-in Admin role by @claude in #8157 feat: add PostHog trial events for cloud billing trials by @0xArshdeep in #8145 fix(identity-gcp-auth): enforce GCE project and zone restrictions by @victorvhs017 in #8148 feat: support AWS US ISO and ISOB regions for external KMS by @Thiago-AS in #8170 feat(pki): certificate audit log details by @bernie-g in #8117 fix: enforce privilege boundary on auth method changes on legacy system by @Thiago-AS in #8061

[2.0.0] Update planka to 2.2.1 Full Changelog IMPORTANT: OIDC/SSO has been removed from PLANKA Community. After updating, all SSO-based users are deactivated, because they no longer have a password login. If your only admin account is SSO-based, you will be locked out. Create a new admin user first (via script or environment variables) before updating: https://docs.planka.cloud/docs/configuration/admin-user The Cloudron package has removed OIDC integration as part of this major update

[1.4.0] Update calendar to 1.4.0 Use the new app bridge API

[1.1.0] Update bugsink to 2.6.0 Full Changelog Users can now create personal API tokens that follow their current permissions, optionally limited to one project. Each token has an explicit set of capabilities, such as reading issues, triaging them or uploading debug files. Superusers can also create service tokens for integrations that should operate independently of a user account. These limits are enforced in both the canonical and Sentry-compatible APIs, and endpoint requirements are included in the OpenAPI documentation. See #216. Existing tokens keep their full installation-wide access after upgrading. Tokens can be revoked from the token list. Issue and event searches can now filter by request URL, for example url:"https://example.org/checkout". URLs are stored as tags for newly ingested events, with query strings and fragments removed so equivalent pages share a value. See #269. Alerts can now be sent to Google Chat spaces using incoming webhooks. See #326. Show newest events first in an issue's event list, including filtered results, see #485. Show friendly issue IDs in project issue lists, see #509. Parse quoted search terms consistently, including colons in values and escaped quotes, see #501.

[1.3.0] Update contacts to 1.3.0 Use new cloudron app passwords route for carddav Fix contact avatar edit Fix browser history bugs

[1.18.0] Update twenty to 2.41.0 Full Changelog Let every application admin manage a workspace-shared connection (#25773) by @abdulrahmancodes feat(server): validate workflow versions through exceptions, malformed at write and non-activable on activate or validate (#24964) by @charlesBochet feat(messaging): let apps own message channels (#25903) by @FelixMalfait feat(messaging): let apps ingest messages into their channels (#25905) by @FelixMalfait feat(messaging): resolve identity for non-email participants (#25906) by @FelixMalfait fix(server): backfill workflow rich text record fields (2.41 upgrade command) (#24965) by @charlesBochet fix(currency): prevent dropping decimal separator and multiplying amount on 0-decimal fields (#25870) (#25904) by @Dewin fix(billing): restore the credit-package match on an interval switch (#25919) by @FelixMalfait fix(record-form): render rich text fields with the BlockNote editor (#25920) by @thomtrp fix(messaging): enforce CRLF line endings on raw outbound messages and surface IMAP append error responseText (#26011) (#26017) by @Dewin

[1.1.6] Update glpi to 11.0.9 Full Changelog System requirements now check that the security key files (glpicrypt.key, oauth.pem and oauth.pub) can be read, or created when missing. Fixed searching values with multiple concurrent spaces. Fixed import of exported forms containing a condition on an item dropdown with no item selected. Duplicate spaces in some SQL queries, including values, (usually ones that used subqueries) no longer removed.

[1.19.4] Update dawarich to 1.14.5 Full Changelog Video Studio can select exact start and end times for map ranges. Video Studio adds a Fog of War mode with adjustable overlay colour and opacity, independent route and marker visibility, and preview buttons for visualization modes and output formats. Family members can consent to sharing location history recorded before they started sharing. The import edit page can change or clear an import's source. Visit detection no longer sends a notification for every new suggested visit. Poster Studio waits for the map to load the selected date range and disables the studio switch while loading. Yearly digests for cloud-Lite users read seasonality and country time spent from the same data window as monthly distances and toponyms. The per-email API login brute-force throttle now counts application/json request bodies, so password grinding against POST /api/v1/auth/login is bounded per account even when an attacker rotates source IPs. API sign-in ignores leading and trailing spaces in the email address. Manual OIDC configuration falls back to the default port when OIDC_PORT is blank, non-numeric or out of range.