Changelog

[3.59.0] - 2026-09-21

✨ Features

• users: Let administrators require an emailed code at password sign-in, so a leaked password alone no longer opens the instance (21b3383)
• databases: Accept MySQL 26 and MariaDB 13, and refuse a line we ship no client for (54dfeb6)
• users: Hand the instance to whoever registers first, instead of seeding an admin account with an address no mail can reach (b0a5986)

🐛 Bug Fixes

• docker: Start without the CHOWN capability and ship the OpenSSL the MySQL 26 client needs (2f69fc3)
• docker: Restore console command access to the metadata database (d4e229f)

🔨 Refactoring

• deps: Mark validator as a direct dependency now that the backend imports it (c2faa90)
• docs: Keep the README to current behavior and leave recovery details to the site (971e739)
• settings: Rename the two-factor setting and drop its next-sign-in notice (fdca1d0)
• docs: Archive the email two-factor change and add its spec (3dd1734)
• docs: Archive the MySQL 26 and MariaDB 13 change (61946e8)
• docs: Record which server versions we accept and which clients ship (f284540)
• docs: Archive the seeded admin replacement and add its spec (418b64a)
• agents: Track the communication skill symlink so every worktree loads it (a56b609)
• agents: Add sentence and language rules to the communication skill, since content-level guidance let calques through (f0c903b)
• docs: Plan email two-factor authentication (3e0cd19)
• docs: Plan replacing the seeded admin account with the first signup (b866d81)
• docs: Plan restoring console command access to the metadata database (09c0ccf)
• agents: Keep whole-suite test runs for the end, since agents share the containers (791f242)

🐳 Docker

• Image: databasus/databasus:v3.59.0
• Mirror: ghcr.io/databasus/databasus:v3.59.0
• Platforms: linux/amd64, linux/arm64