Tags

v2.6.0

- Added production-ready Secure Links for Docker-backed proxy hosts, routing traffic through a multiplexed mTLS HTTP/2 relay without exposing Docker ports.
- Added automatic migration of legacy Docker container aliases to Secure Links while preserving direct hosts, custom templates, template variables, cache, rate limits, headers, and URL rewrites.
- Added adaptive relay admission with route-level fair sharing, reserved capacity for database traffic, hard pressure cutoffs, and configurable runtime parameters.
- Added Relay and per-host Link Runtime monitoring with persisted snapshots, background and live refresh, traffic, reliability, latency, throttling, error, and resource-pressure metrics.
- Added Gateway-managed TLS distribution with atomic versioned certificate deployment, inventory, legacy certificate migration, replica cleanup, and rollback-safe nginx reloads.
- Added configurable per-IP request, burst, and concurrent connection limits to proxy templates, with defaults of 1000 requests/sec and burst 3000.
- Added AI Workspace onboarding and interface selection, improved Assistant UX, operational alerts, and hardened AI runtime authorization.
- Added shared GPU discovery and NVIDIA, AMD, and Intel GPU assignment support for Docker workloads.
- Added SIEM audit export delivery, coordinated graceful shutdown, resilient restart and update screens, and expanded resource monitoring.
- Improved managed database relay transport, Docker port mappings with explicit bind address and protocol, Redis 6 compatibility, sandbox recovery, and resource admission.
- Hardened Gateway updates and migrations, nginx configuration validation, MFA and WebSocket boundaries, Docker archive and exec handling, webhook authentication, secret handling, audit logging, and ClickHouse credential isolation.
- Fixed relay first-start identity races, restart notification propagation, stale dashboard relay alerts, and custom legacy template compatibility during Secure Link migration.

v2.6.0-monitoring

- Added physical GPU discovery and GPU inventory reporting to monitoring health snapshots.

v2.6.0-docker

- Added Secure Link connector endpoints for Docker containers using relay grants and persistent multiplexed HTTP/2 lanes.
- Replaced legacy database tunnel handling with the generic relay transport and priority-aware database admission.
- Added GPU inventory and explicit NVIDIA, AMD, and Intel device assignments, including NVIDIA runtime readiness checks.
- Added explicit host address, port, and protocol configuration for published container ports.
- Improved Redis 6 and ClickHouse compatibility, managed database lifecycle, and daemon migration recovery.
- Hardened container archive import and export, managed labels, secret environment persistence, session recovery, and relay grant validation.

v2.6.0-nginx

- Added Secure Link proxying over persistent multiplexed HTTP/2 relay lanes with mTLS identity forwarding and immutable relay grants.
- Added automatic migration and reconciliation of legacy Docker alias upstreams.
- Added route-level traffic telemetry including active streams, stream rate, bidirectional traffic, HTTP responses, upstream latency, and last activity.
- Added atomic Gateway-managed TLS bundle deployment, versioned certificate replicas, certificate inventory, legacy export, cleanup, and rollback-safe reloads.
- Improved tunnel lifecycle, retry and keepalive handling, stale session cleanup, bounded pooled reads, log tailing, and daemon upgrade recovery.
- Hardened relay grant validation, nginx configuration ownership, certificate identifiers, and failure fallback behavior.

v2.5.2

- Added a unified, permission-aware Dashboard bootstrap response that loads dashboard data and pinned resources together, eliminating per-widget request bursts and loading flicker.
- Added live Dashboard and sidebar refreshes for resource health, MFA policy, onboarding progress, pinned resources, and inference access.
- Added a Dashboard attention indicator: blue for informational setup items and yellow when action is required, including certificate expiry, node capacity or health, pinned-resource health, MFA, updates, logging, and inference limits.
- Added a complete Dashboard setup flow for nodes, integrations, users, MFA, inference, and the AI assistant.
- Added an MFA warning and direct setup action when a group requires MFA but the current user has not configured it; affected users are notified immediately.
- Improved Gateway AI and Lite mode with Dashboard and sidebar pins, search, live inference-access updates, and refined desktop and mobile assistant UI.
- Added safe lifecycle management for Gateway-managed certificates: atomic certificate replacement, orphaned certificate cleanup, private-key cleanup, and durable CRL refresh retries.
- Fixed Dashboard bootstrap recovery, authorization checks for pinned resources, and installer error reporting during nginx, Docker, and monitoring daemon enrollment.

v2.5.1

Gateway v2.5.1

- Fixed first-run completion with native HTTPS: Apply stays loading while Gateway restarts, then navigates freshly to sign-in after TLS has settled.
- Hardened setup and installer coverage, including release-script expectations and SQL Explorer loading-state test races.
- Expanded Gateway AI documentation for installation, authentication, Cloudflare, registries, ClickHouse, and troubleshooting.
- Updated installation, node, capability, and database-connector documentation for browser-first setup and private connector bindings.
- Included installer terminal and certificate-guidance refinements introduced since v2.5.0.

v2.5.0-monitoring

Gateway monitoring daemon v2.5.0

v2.5.0-docker

Gateway docker daemon v2.5.0

v2.5.0-nginx

Gateway nginx daemon v2.5.0

v2.5.0

- Added a browser-first first-run setup wizard with one-time setup codes, atomic configuration apply, network settings, authentication configuration, structured logging, and first-administrator creation.
- Added local password and email-code authentication with MFA support, and migrated legacy OIDC and ClickHouse settings into Gateway-managed configuration.
- Added managed database nodes with curated Postgres, Redis, and ClickHouse deployments, encrypted direct access, and CA certificate download.
- Added portable Docker container archives, controlled cross-node migrations, and resource-scoped container permissions.
- Expanded per-user permissions with explicit overrides, effective-access views, auditing, and immediate propagation.
- Added multi-provider inference controls, Claude Code harness support, and per-user GitLab personal-access-token authorization.
- Hardened installers with signed release image verification, local-source test installation, and branded connection output.
- Fixed proxy-host ACL handling so Basic Auth works with IP restrictions, removed unsafe per-vhost TLS policy overrides, and require nginx 1.25.1+ for modern HTTP/2 configuration.

v2.4.22

- Added additive per-user permission overrides with exact resource selection.
- Added separate Group, Additional, and Effective permission views.
- Added permission reset, auditing, and immediate access propagation.
- Added security restrictions for permission delegation.
- Added database migration for per-user permissions.
- Added compact inline badges across the UI.
- Improved the additional-permissions dialog layout.

v2.4.21

- Fixed terminal viewport sizing to prevent characters from being clipped at the right edge.
- Corrected PTY initialization and resize handling for stable line wrapping and cursor positioning.
- Restored the initial shell prompt without requiring the user to press Enter.
- Added UTF-8-safe terminal input for Cyrillic and other non-Latin characters.
- Improved clear handling to fully clear the viewport and terminal scrollback.
- Configured Docker exec sessions with TERM=xterm-256color.
- Isolated Docker container console sessions per authenticated Gateway user.
- Isolated node console sessions per authenticated Gateway user.
- Preserved session reuse for the same user while separating input, output, history, and resize events between users.
- Prevented stale session cleanup from removing newer replacement sessions.

v2.4.5-docker

v2.4.5-monitoring

v2.4.5-nginx

v2.4.20

- Improved Docker image size readability by widening the Size column.
- Fixed the proxy host HTTPS setup flow by allowing an SSL certificate to be selected before SSL is enabled.
- Fixed IPv6 addresses being clipped in the Audit Log. Long addresses are now truncated with an ellipsis, with the full address available on hover.

v2.4.19

- Changed maintenance mode to inject a request guard into the existing Nginx configuration.
- Preserved existing TLS, certificate, listen, ACME, and custom template configuration.
- Fixed vertical alignment of the proxy host back button.
- Removed all health status badges from the Health Check panel header.
- Added regression coverage for maintenance configuration and header alignment.

v2.4.18

- Fixed SSL handshake failures when enabling maintenance mode.
- Preserved deployed TLS certificates for legacy and imported certificate records.
- Added separate HTTP and HTTPS maintenance server configurations.
- Moved maintenance and delete actions into the three-dot menu.
- Added regression tests for TLS maintenance mode and overflow actions.

v2.4.17

- Fix issue with the containers list overflow on the proxy host settings page

v2.4.16

- Improved MCP audit entries with tool names, redacted arguments, authentication context, and client metadata.
- Added audit records for read-only and denied MCP tool calls.
- Prevented duplicate audit entries for MCP-triggered operations.
- Removed successful scheduled connector syncs from the audit log.
- Removed AI context estimates and other read-only checks, previews, validations, and refresh operations from the audit log.
- Added audit noise filtering for system checks, DNS checks, configuration tests, and snapshot refreshes.