Cloudron Forum

[0.5.0] Update microbin to 2.1.4 Full Changelog Patch #326, change env defaults, bump to 2.1.4 by @szabodanika in #327 Change content handling to use byte buffer instead of parsing chunks directly by @ybalbert in #299 derive version from binary by @nastyagrifon in #306 Add missing public_path to some Location redirects by @farfalleflickan in #307 fix vertical layout on smartphones by @underoll in #308 Add multi-attachment support by @szabodanika in #309 improve logging with real ip by @Sofyan-SU in #311 Fix threading issue by deferring lock acquisition during file uploads by @szabodanika in #313 Support default privacy setting by @szabodanika in #314 Add MICROBIN_MAX_EXPIRY arg by @szabodanika in #321

[1.16.0] Update seaweedfs to 4.39 Full Changelog async, buffered writes in VolumeEcShardsCopy (#10237) fix orphan purge against the rust volume server (#10289) keep tier-uploaded volume reporting to master after volume.tier.upload (#10259) require JWT authorization on TUS upload endpoints (#10249) fail over routed object writes when the owner filer is unreachable (#10251) keep listing when empty directories fill the listing window (#10280) verify SigV4 against each plausible reverse-proxy host (#10284) surface OIDC groups and roles into the STS session request context for resource-policy ABAC (#10263) re-assign to a live volume when a write can't land (#10239) merge filer service annotations to avoid duplicate keys in Helm (#10293)

[0.18.0] Update rustfs to 1.0.0-beta.8 Full Changelog feat(table-catalog): add object-backed catalog store by @marshawcoco in #3206 feat(scanner): add partial scan resume hints by @marshawcoco in #3207 perf(erasure): remove UUID from clone + increase encode inflight budget by @overtrue in #3212 fix(signer): address post-merge review comments by @overtrue in #3216 fix(server): normalize empty request content length by @GatewayJ in #3215 fix(bucket-encryption): populate default KMS key for SSE-KMS without key ID by @overtrue in #3225 fix(replication): normalize local site endpoint port by @cxymds in #3249 fix: return 503 on lock contention instead of 500 by @overtrue in #3274 feat(rio): rio_v2 is compatible with minio for storing data. by @reatang in #3115 feat(kms): migrate KMS handlers to dedicated actions by @overtrue in #3298

[1.3.2] Update docmost to 0.95.0

[1.7.0] Update keycloak to 26.7.0 Full Changelog #49427 [CVE-2026-9796] Admin role rename TOCTOU bypasses checkAdminRoles realm-wide escalation from manage-clients admin/rbac #49430 [CVE-2026-9689] HTTP Parameter Pollution in OIDC redirect URI allows response parameter duplication oidc #49432 [CVE-2026-9798] CIBA authentication flow bypasses brute-force account lockout oidc #49766 [CVE-2026-11986] FGAP v1 allows unassigning any role admin/fine-grained-permissions #44013 Deprecate the Twitter IDP implementation due to old twitter4j library identity-brokering #48104 Remove support for token-exchange-external-internal:v2 token-exchange/federated #49270 Remove the batching option for the persistent sessions #46543 Step-up authentication for SAML - supported authentication #35650 Compatibility profiles #20128 Add support for reencrypt OpenShift Routes to the Operator operator

[1.21.2] Fix permission issue with monolith

[1.27.0] Update evcc to 0.311.0 Full Changelog EEBus: add heating brands (BC) (#31344) EEBus: error on missing productionNominalMax (BC) (#31483) Add AMTRON Professional Twincharge with infotext for modbus port 502/503 (#31361) Add BKW feed-in tariff (#31424) Add IBC Solar HomeOne hybrid inverter (#31425) Vehicle: add wakeupdisabled feature to suppress wake-up calls (#31461) EntsoE: fix dropped price series and UTC request offset (#31396) Sessy: fix sensor scaling (#31436) Versicharge: fix power reading (#31359) (#31363) fix: swap charging/discharging label on battery status card (#31405)

[1.24.0] Update documenso to 2.14.0 Full Changelog fix: improve team member removal ux by @dguyen in #3001 fix: only send S3 checksums when required to support S3-compatible storage by @yashs33244 in #2984 fix: render unicode characters in typed signatures by @AbdelrhmanAbdelhamed in #2728 fix: signing request email renders blank when organisation/team branding is enabled by @NandiniDhanrale in #2968 feat: add custom brand colours to emails by @Mythie in #3005 feat: allow additional envelope duplicate settings by @dguyen in #3008 feat: add API endpoint to reject documents on behalf of recipients by @Mythie in #3007 feat: cap automated reminders before resend by @Mythie in #3016 feat: add API endpoints for downloading certificate and audit log PDFs by @Mythie in #3025 fix: resolve permission issues by @dguyen in #3029

[1.3.0] Update base image to 5.0.0