Changelog

[3.61.0] - 2026-10-10

✨ Features

• notifiers: Let a Telegram notifier send through a self-hosted Bot API server or reverse proxy set in its advanced settings, so networks without access to api.telegram.org can still get notifications (cb37d67)
• mongodb: Support MongoDB 9 with Database Tools 100.19.1 from a recorded vendor source, so 9.x servers get backups and restores refuse 9 onto 8 (d9e47e9)
• mongodb: Propose MongoDB 9 support with Database Tools 100.19.1 from a recorded vendor source, so 9.x servers get backups and the lapsed CVE exception goes away (1c2fe16)
• users: Add a --create-user console command that provisions an account with a role, so scripted deployments get an administrator without a browser sign-up and rotate its password with --new-password (47b6e39)
• backups: Remove the next scheduled backup display and its endpoints, since it cluttered every database card and the read-only cron preview could disagree with the scheduler (a32a473)
• backups: Simplify WAL range rows down to the type, a gap status and a from/to window with the segment count, so the list shows what matters for restore instead of archive internals (c05a682)
• tooling: Start the test fixtures and the WAL backup rig with just run, so local development has every database it uses (acda94a)
• backups: Show when the next scheduled backup runs, computed from the rules the scheduler acts on (issue [#807]) (4bb7ffa)
• backups: Collapse consecutive WAL segments into range rows and page backup lists by cursor, so backups past the first 1000 rows stay reachable (062f7f3)
• helm: Add an optional priorityClassName value for the pod (5b2c796)

🐛 Bug Fixes

• tests: Retry test container boots and wait for real SSH and log-cleanup readiness, so transient Mongo exits, bastion handshake resets and lumberjack cleanup lag stop failing the backend CI job (43e0a09)
• backups: Send S3, Azure and Google Drive traffic through the environment proxy and report storage timeouts as failed backups instead of cancelled ones (4c1e2a5)
• workspaces: Link the invitation email to the instance root and send unknown web app addresses there, so invited people reach the sign-up form instead of a blank page (817145f)
• backups: Stop the physical scheduler and cleaner from rebuilding every chain with all its WAL on each tick, so an idle instance no longer burns CPU in proportion to retained WAL (7e7699b)
• tooling: Pass the goose connection through the environment, so just test migrates the worker slots once .env is exported (7c3605c)
• tests: Pull MinIO from the pgsty/minio fork, since quay.io/minio/minio now denies anonymous pulls and breaks the test run (6a74a06)
• healthcheck: Probe physical sources over a plain connection, so a backup holding every WAL sender slot no longer turns the healthcheck red (fbe7718)
• docker: Ship the image without a baked .env, so developer SMTP settings no longer turn an unset security mode into none or log in to relays with test credentials (8167dcd)
• verification: Run restore containers without a CPU limit on hosts lacking CFS quota, so verification works on NAS kernels that reject NanoCPUs (82071fd)
• helm: Quote priorityClassName so numeric names stay strings (3d944cb)

🔨 Refactoring

• tooling: Keep agents off the full backend suite and give them just test-package, so every task closes on local tests that also start on Fedora (e688e78)
• tooling: Move local development to just and mise, with one command to run the app and one to run the backend suite (2b0e5c6)
• openspec: Limit task verification to checks the agent runs itself, leaving the full backend suite and manual runs out of tasks (586e6d7)
• agents: Split the review hook into narrow gates and full OpenSpec reviews, so necessity, architecture and naming get their own reviewer (0a8f512)

🐳 Docker

• Image: databasus/databasus:v3.61.0
• Mirror: ghcr.io/databasus/databasus:v3.61.0
• Platforms: linux/amd64, linux/arm64