Tags

v2.7.14-docker

- Resolve managed database connector aliases through container hosts entries
- Avoid Docker embedded DNS failures in Secure runsc workloads
- Refresh generated connector host mappings on every container recreation

v2.7.13-docker

- Reselect the primary network after removed networks are filtered
- Prefer the active managed database network over the default bridge
- Keep Docker embedded DNS available after binding recreation

v2.7.12-docker

- Skip removed Docker networks when recreating containers
- Stop propagating stale managed database binding network entries
- Preserve only networks that still exist on the Docker node

v2.7.11-docker

- Drop stale Docker network and endpoint IDs during container recreation
- Preserve configured aliases while resolving recreated networks by name
- Restore managed database containers after binding network replacement

v2.7.10

- Restore managed database links after container recreation by preserving Docker DNS-capable networks
- Hide Gateway-managed database credentials from the Secrets interface and migrate existing bindings
- Refresh Gateway and Relay update availability automatically after Gateway restart

v2.7.10-docker

- Preserve a user-defined primary network when recreating multi-network containers
- Keep Docker embedded DNS available for managed database connector aliases

v2.7.9

- Enable MCP by default on new installations and simplify MCP authorization scopes
- Fix Docker environment, network, managed database, and background refresh workflows
- Decouple Database and Secure Link Connector artifacts from Gateway releases

v2.7.9-docker

- Allow the managed database tunnel bind only for the internal connector container
- Keep the connector tunnel mount read-only and reject broader bind access

v2.7.9-relay

- Bundle digest-pinned Database and Secure Link Connector images with Relay releases
- Apply connector image defaults inside the Relay maintenance lifecycle without recreating running database connectors
- Require Gateway v2.7.9 before offering this Relay update

v2.7.6-relay

- Bundle Secure Link Connector builds and signed image metadata with Relay releases
- Apply the pinned connector image while Relay maintenance is active
- Reconcile managed connector containers on Docker target nodes before leaving the maintenance window

v2.7.6

- Decouple Secure Link Connector updates from Gateway releases so Gateway upgrades preserve running connector sessions
- Add trusted Relay manifests that carry the digest-pinned Secure Link Connector image
- Apply connector changes only inside the explicit Relay maintenance window

v2.7.5

- Add an optional secondary public address to Nginx node settings with detected and custom address selection
- Accept domains that resolve to the primary address, secondary address, or both configured ingress addresses
- Preserve valid multi-address Cloudflare records during DNS checks, migrations, and reconciliation

v2.7.4

- Fix fresh installations when the target directory exists without a Gateway environment file
- Remove the legacy Gateway public IP field from setup, Settings, API responses, and certificate configuration
- Keep existing installations compatible by ignoring the retired persisted field and deriving ingress and enrollment addresses from their dedicated settings

v2.7.3

- Add a lightweight standalone login page with server-injected authentication methods while preserving the existing interface and animations
- Preserve requested destinations across password, OIDC, MFA, and callback flows and keep sign-in loading active until Gateway opens
- Make Settings tabs and Docker container lists wait for initial data before animating to prevent partial-content flashes and layout jumps
- Make Dashboard and sidebar attention actions reliably scroll to System Updates and Housekeeping after their content is ready without URL hash flicker
- Improve sidebar collapse animation, update indicator styling, ingress ordering, and folder action alignment
- Fix Docker and shared resource drag-and-drop into Ungrouped and deduplicate concurrent container and folder loading
- Standardize clickable domain, certificate, and forward-target badges and rebalance route and container table columns
- Correct Community license plan and icon resolution and show Pending registration until registration is explicitly confirmed

v2.7.2

- Fix Cloudflare API token rotation so replacement tokens are applied before connector revalidation
- Prevent Cloudflare authentication errors from terminating the active Gateway session
- Stabilize Domain Info loading and refine its DNS check action and layout
- Add an explicit Custom address option for node service addresses

v2.7.1

- Add Community installation registration and paid license activation during initial Gateway setup
- Introduce Personal, Business, and Enterprise license plans with server-provided entitlements
- Encrypt installation credentials and support explicit paid-license deactivation
- Improve license heartbeat, offline grace, activation errors, status display, and activation modal layout
- Allow custom publicly routable IP addresses for Nginx nodes
- Use the shared Gateway status screen while Relay is updating
- Stabilize Domain Info loading and improve domain badges and DNS controls
- Improve node, route, and administration interface consistency

v2.7.0-relay

- Preserve HTTP/2 ALPN across dynamic TLS certificate selection to prevent intermittent gRPC connection failures
- Publish Relay through an independent signed release and update channel without coupling Relay restarts to Gateway updates

v2.7.0

- Add Default and Secure Docker runtime profiles with gVisor isolation, hardened container defaults, compatibility preflight, guided installation, and persistent setup progress
- Introduce Gateway-managed Docker volumes, preserve compatible legacy mounts, provide safe migration actions, and prevent destructive volume conflicts
- Improve Docker container, deployment, node, runtime, GPU, responsive layout, action priority, and navigation attention states
- Add independent Gateway and Relay update controls with compatibility gating, explicit restart warnings, and persisted server-side update state
- Recover Secure Links after workload restarts
- Add folder- and resource-scoped RBAC while preserving nested resource placement
- Add protected user impersonation with explicit administrative boundaries
- Complete AI Workspace scenarios, skills, connector setup, runtime recovery, and configured external-research guidance
- Add multi-node domain routing through selected Nginx ingress nodes and stabilize DNS, TLS, integration, and database workflows
- Make global search use cached resource snapshots instead of synchronous daemon requests and keep Ask AI available with a guided setup fallback
- Harden release upgrades, legacy compatibility, managed-resource migrations, and update-state handling

v2.7.0-docker

v2.6.12

- Stabilize daemon self-updates by separating command acceptance from completion and preserving update state across expected restart disconnects
- Preserve the AI Workspace Thinking indicator and completed progress comments when stale runtime snapshots arrive after `send_comment`
- Keep unmatched free-text values in shared comboboxes instead of clearing them
- Refresh proxy-host domain suggestions on open and order recently created domains first
- Reuse preloaded folder and node data while keeping domain and proxy-host creation dialogs visually stable during refreshes
- Limit Cloudflare DNS conflicts to A, AAAA, and CNAME records while preserving MX and TXT records
- Truncate long DNS conflict badges within the preview layout
- Replace the maintenance-page `ERROR 503` label with `TEMPORARILY UNAVAILABLE`