Arcane Files

[!IMPORTANT] This updated patches/removes the attack surface for GHSA-gjqq-6r35-w3r8. Credit to @DenizParlak for reporting this vulnerability.

Backend - New features

• allow sensitive env variables to be read from _FILE (#1423 by @kmendell)
• add JSON parsing and structured log display functionality (#1463 by @FusionStreak)
• use shoutrrr for notifications (apprise deprecated) (#1424 by @kmendell)
• bulk actions for containers and projects (#1466 by @kmendell)
• auto-prune/prune scheduler job (#1467 by @kmendell)
• project status filter selector (#1484 by @kmendell)

Backend - Bug fixes

• add option for ssh host key verification and known hosts (#1443 by @kmendell)
• network overview not reload with new data(c6bbbc7 by @kmendell)
• git sync interval incorrect (#1446 by @kmendell)
• oidc insecure tls not working for self signed CA (#1448 by @kmendell)
• remove updater lifecycle hooks (#1468 by @kmendell)
• margin not being applied on resource pages(dc10a3c by @kmendell)
• unable to save env in git synced project (#1471 by @kmendell)
• invalid api input for container creation (#1483 by @kmendell)

Dependencies

• bump @shikijs/monaco from 3.20.0 to 3.21.0 (#1432 by @dependabot[bot])
• bump @react-email/components from 1.0.3 to 1.0.4 (#1431 by @dependabot[bot])
• bump golang.org/x/term from 0.38.0 to 0.39.0 in /cli (#1425 by @dependabot[bot])
• bump golang.org/x/text from 0.32.0 to 0.33.0 in /backend (#1426 by @dependabot[bot])
• bump golang.org/x/mod from 0.31.0 to 0.32.0 in /backend (#1429 by @dependabot[bot])
• bump github.com/goccy/go-yaml from 1.19.1 to 1.19.2 in /backend (#1428 by @dependabot[bot])
• bump @sveltejs/kit from 2.49.3 to 2.49.4 (#1479 by @dependabot[bot])
• bump golang.org/x/net from 0.48.0 to 0.49.0 in /backend (#1475 by @dependabot[bot])
• bump svelte from 5.46.1 to 5.46.3 (#1478 by @dependabot[bot])
• upgrade pnpm to 10.28.0(9804c5c by @kmendell)

Other

• consolidate and cleanup backend utils (#1419 by @kmendell)
• remove enabled field from git syncs (#1457 by @kmendell)
• only run deadcode wf on org branches(aac9ba3 by @kmendell)
• update environment page to use settings form util (#1469 by @kmendell)

Full Changelog: https://github.com/getarcaneapp/arcane/compare/v1.12.2...v1.13.0