[!NOTE] This release adds native Podman support, hostname configuration, and a delay option for new image auto-updates. It also improves performance and hardens Docker operations, projects, backups, and authentication.
Features
- Add native Podman support and align its UI with the existing interface (fd125ecc81692f3bda7c7e5e3eb7772458c7bd23, [#4514]; 7f06db1250ac0bf0dd3a5f338df2be7ebb6c3f90; @kmendell).
- Add hostname configuration (d34c04623f3ea75cde0774715eefa8ebab74f158, [#4391]; @RobLoach).
- Add a delay before automatically updating newly available images (c8fda2bd4459233ad47463618d2d195c76f717d9, [#4459]; @kmendell).
Docker, images, and projects
- Fix interrupted image updates, preserve pulled image digests when tagging, include tagged images in age-based pruning, and count default networks as in use (8928c098a978cb79cc4386707daabb7c2deb2f4f; e68c9081ab86fd30e8568e5e4fdcad3b222319c3, [#4482]; 48539a169acedea1c012a07cb1011107becbffa0, [#4477]; 351fdfffc07df47eeef0ccf8e14d69779b13fb4f, [#4476]; @kmendell).
- Fix project updates to skip locally built services, use grouped pending paths, run bulk updates sequentially, and lock updates per project (a1745df4cd0941184db548bb561a234d5279b1bc, [#4499]; e46ccd526d959cdb094b4d62c83e5ddf21d0f25d, [#4513]; 4c98ef8f3938d43a6d47649bbb5d0415a32fb1a1, [#4524]; c8ab0db42b45c44b295c86c40e32c7d06dd25cc3, [#4520]; @kmendell).
- Improve project workspace browsing with level-by-level traversal and a truncation alert; hide lifecycle actions for archived projects and return the correct status for project detail errors (ecc20dfc46738c5ab9376b3917225455a84d3c8a, [#4479]; 4ebc8433987780626057b80ee819909bb2bd9510, [#4502]; d2b14125858704b7aca85d378250086f9d055010; @kmendell).
- Improve Swarm manager unlocking, duration handling, and stack source and deletion behavior (78a02e10082a20e5c0de62a7391f7acf1100fb85, [#4505]; @jmrplens).
- List networks with bare-address IPAM ranges (6c4196ea3214d93cc8e888e25272ecb26baa1b29, [#4498]; @kmendell).
- Fix container redeploys, exec sessions, and streams (a7812907535f79639abad968763508df60ee157b, [#4488]; @kmendell).
- Pass container IDs when preparing recreate host configuration in the CLI (59b36160137a5498c7ce4a2655a7732bbe5e2929; @kmendell).
Reliability, security, and backups
- Harden authentication and authorization, preserve browser sessions across tabs, and keep a global admin when roles are updated or deleted (0e0a1d1fdd8f694a5f5534def32bf1e2b0ab73ad, [#4492]; 32a0ca34b25402ef8eb36d0ced8fdf4dec953f6b, [#4472]; @kmendell, @jmrplens).
- Make backup restores and recovery-key changes data-safe; skip volume backup pruning when the local repository hasn’t been created, and exclude GitOps scratch clones from system backups (c2d8e8d6cab0b5d33a2c118028b7c437f75c44f7, [#4487]; 1ff65354b874d37372356651f74b83936dace463, [#4448]; 46742508904cf045a0a48d42544f999abf4c4072, [#4519]; @kmendell, @GiulioSavini).
- Recover scheduled runs whose completed result wasn’t recorded, and bound shutdown waits while hardening scheduler lifecycle (01e67e9f787c2c003d0a42d6f9bc96a47c1275c9, [#4458]; 10ee66bbc4d2269eb768e57ad5e4cad11d7571c9, [#4493]; @kmendell).
- Harden edge environment access and health checks; keep pending edge environments pending on heartbeat (edb390d61c7def6bf74fb9c196404fdf2d2a280b, [#4489]; @kmendell; 903a83a3b763a3c5906f3f6f1ae4867244e26482, [#4507]; @jmrplens).
- Improve backend stability and attestation fetches (dac409fc372bb1ddd46ab9a3de9185d0a8bfa6df, [#4491]; @kmendell).
- Return 4xx responses for not-found and conflict errors (efc38c1d8fa5288fc527a44fc7403b37efd078e8, [#4506]; @jmrplens).
- Send prune and update notifications even after context cancellation (a41e677e7b7518b92f83acf24bcdf966033ef221, [#4501]; @kmendell).
UI, templates, and integrations
- Use the opened resource’s environment in tab titles when all environments are enabled; compact table pagination on mobile (a509628d4287d0abcc75ae0856ed4a5bfd17210b, [#4450]; 4d194f183d5ca6d77e217fb8a377a4c8a4db89d1, [#4503]; @DominikZublasing, @kmendell).
- Preserve folder templates and require
templates:createpermission to download them (6f866ff60aa9ba5905031a0f4a7e4c5690b0a165, [#4473]; @jmrplens). - Stream build workspace file downloads (dfda96fef16a3fba848dedfd38b76568fb9f28fe, [#4508]; @jmrplens).
- Apply search and sorting to ignored vulnerabilities (cc64070128b6e7f2f6e128dd1cbf25dc5ab25b04, [#4509]; @jmrplens).
- Keep the create button visible and accept unchanged environment values; update end-to-end tests for editor errors (4d28457c19f2cf77d78da244521b657297994c08; 52b2eedf1c1fd91536061ebde508dcae4f76c092; @kmendell).
- Default password fields to
new-passwordautocomplete (161ac88b978d633db8f2be8f75fe9bed4e705438, [#4485]; @kmendell). - Honor
update-checkinx-arcaneCompose metadata (aa5e3862de266dff4db21b151d38881cb0351eeb, [#4457]; @kmendell). - Remove the
Accept-Encodingheader for GCS compatibility and default Rustic’s S3 signing region tous-east-1(f9052166a72a5cd881bb83c5e35f4b230f985d03, [#4446]; a0edb5bb4b0970c4a1eaeeab3acd725db1c2d344, [#4478]; @mbegerau, @kmendell).
Performance and internal improvements
- Batch queries and cache service hot paths; share stats sampling and dashboard producers, and back off idle job scans (a6b79438f328e8ee3c395d2c634ac3a776ab7770, [#4438]; b31fae3c7543fa8c2ca3d5c24db8317eedc25c16, [#4486]; @kmendell).
- Refactor vulnerability, job, container, environment, network, updater, and image migrations to composite literals; remove dependency-injection nil checks (9d10c2a543556868fa2af92498843c09126ca6b2; d2b4166dfbb66f5e67c0801ceb0725825c7b79c2; 40365984a0b77645418f075026562ef00ad5432b; @kmendell).
- Rework the Docker boundary and image ownership logic (fd742f3ee59451ecfa35198b26017116c439dd6d, [#4484]; @kmendell).
- Inline notification email templates in Go (5b8c14016d11af356bcbeff4e1f6a5830c34a258, [#4517]; @kmendell).
- Update the updater dependency to v0.11.10 (011a81e9c8628ae2913a065643f65560bd3aa60a, [#4512]; @kmendell).
