Tags

v2.5.2

- Added a unified, permission-aware Dashboard bootstrap response that loads dashboard data and pinned resources together, eliminating per-widget request bursts and loading flicker.
- Added live Dashboard and sidebar refreshes for resource health, MFA policy, onboarding progress, pinned resources, and inference access.
- Added a Dashboard attention indicator: blue for informational setup items and yellow when action is required, including certificate expiry, node capacity or health, pinned-resource health, MFA, updates, logging, and inference limits.
- Added a complete Dashboard setup flow for nodes, integrations, users, MFA, inference, and the AI assistant.
- Added an MFA warning and direct setup action when a group requires MFA but the current user has not configured it; affected users are notified immediately.
- Improved Gateway AI and Lite mode with Dashboard and sidebar pins, search, live inference-access updates, and refined desktop and mobile assistant UI.
- Added safe lifecycle management for Gateway-managed certificates: atomic certificate replacement, orphaned certificate cleanup, private-key cleanup, and durable CRL refresh retries.
- Fixed Dashboard bootstrap recovery, authorization checks for pinned resources, and installer error reporting during nginx, Docker, and monitoring daemon enrollment.

v2.5.1

Gateway v2.5.1

- Fixed first-run completion with native HTTPS: Apply stays loading while Gateway restarts, then navigates freshly to sign-in after TLS has settled.
- Hardened setup and installer coverage, including release-script expectations and SQL Explorer loading-state test races.
- Expanded Gateway AI documentation for installation, authentication, Cloudflare, registries, ClickHouse, and troubleshooting.
- Updated installation, node, capability, and database-connector documentation for browser-first setup and private connector bindings.
- Included installer terminal and certificate-guidance refinements introduced since v2.5.0.

v2.5.0-monitoring

Gateway monitoring daemon v2.5.0

v2.5.0-docker

Gateway docker daemon v2.5.0

v2.5.0-nginx

Gateway nginx daemon v2.5.0

v2.5.0

- Added a browser-first first-run setup wizard with one-time setup codes, atomic configuration apply, network settings, authentication configuration, structured logging, and first-administrator creation.
- Added local password and email-code authentication with MFA support, and migrated legacy OIDC and ClickHouse settings into Gateway-managed configuration.
- Added managed database nodes with curated Postgres, Redis, and ClickHouse deployments, encrypted direct access, and CA certificate download.
- Added portable Docker container archives, controlled cross-node migrations, and resource-scoped container permissions.
- Expanded per-user permissions with explicit overrides, effective-access views, auditing, and immediate propagation.
- Added multi-provider inference controls, Claude Code harness support, and per-user GitLab personal-access-token authorization.
- Hardened installers with signed release image verification, local-source test installation, and branded connection output.
- Fixed proxy-host ACL handling so Basic Auth works with IP restrictions, removed unsafe per-vhost TLS policy overrides, and require nginx 1.25.1+ for modern HTTP/2 configuration.

v2.4.22

- Added additive per-user permission overrides with exact resource selection.
- Added separate Group, Additional, and Effective permission views.
- Added permission reset, auditing, and immediate access propagation.
- Added security restrictions for permission delegation.
- Added database migration for per-user permissions.
- Added compact inline badges across the UI.
- Improved the additional-permissions dialog layout.

v2.4.21

- Fixed terminal viewport sizing to prevent characters from being clipped at the right edge.
- Corrected PTY initialization and resize handling for stable line wrapping and cursor positioning.
- Restored the initial shell prompt without requiring the user to press Enter.
- Added UTF-8-safe terminal input for Cyrillic and other non-Latin characters.
- Improved clear handling to fully clear the viewport and terminal scrollback.
- Configured Docker exec sessions with TERM=xterm-256color.
- Isolated Docker container console sessions per authenticated Gateway user.
- Isolated node console sessions per authenticated Gateway user.
- Preserved session reuse for the same user while separating input, output, history, and resize events between users.
- Prevented stale session cleanup from removing newer replacement sessions.

v2.4.5-docker

v2.4.5-monitoring

v2.4.5-nginx

v2.4.20

- Improved Docker image size readability by widening the Size column.
- Fixed the proxy host HTTPS setup flow by allowing an SSL certificate to be selected before SSL is enabled.
- Fixed IPv6 addresses being clipped in the Audit Log. Long addresses are now truncated with an ellipsis, with the full address available on hover.

v2.4.19

- Changed maintenance mode to inject a request guard into the existing Nginx configuration.
- Preserved existing TLS, certificate, listen, ACME, and custom template configuration.
- Fixed vertical alignment of the proxy host back button.
- Removed all health status badges from the Health Check panel header.
- Added regression coverage for maintenance configuration and header alignment.

v2.4.18

- Fixed SSL handshake failures when enabling maintenance mode.
- Preserved deployed TLS certificates for legacy and imported certificate records.
- Added separate HTTP and HTTPS maintenance server configurations.
- Moved maintenance and delete actions into the three-dot menu.
- Added regression tests for TLS maintenance mode and overflow actions.

v2.4.17

- Fix issue with the containers list overflow on the proxy host settings page

v2.4.16

- Improved MCP audit entries with tool names, redacted arguments, authentication context, and client metadata.
- Added audit records for read-only and denied MCP tool calls.
- Prevented duplicate audit entries for MCP-triggered operations.
- Removed successful scheduled connector syncs from the audit log.
- Removed AI context estimates and other read-only checks, previews, validations, and refresh operations from the audit log.
- Added audit noise filtering for system checks, DNS checks, configuration tests, and snapshot refreshes.

v2.4.15

- Added Gateway host validation with a branded 404 page for unknown domains.
- Added maintenance mode for proxy hosts with a branded 503 page.
- Paused health checks while maintenance mode is active.
- Added maintenance mode alerts.
- Added maintenance status to the public status page.
- Added public IP discovery and improved automatic node address selection.
- Updated proxy host UI with maintenance controls and status indicators.
- Added the required database migration.

v2.4.4-docker

v2.4.4-monitoring

v2.4.4-nginx