Tags

v2.4.15

- Added Gateway host validation with a branded 404 page for unknown domains.
- Added maintenance mode for proxy hosts with a branded 503 page.
- Paused health checks while maintenance mode is active.
- Added maintenance mode alerts.
- Added maintenance status to the public status page.
- Added public IP discovery and improved automatic node address selection.
- Updated proxy host UI with maintenance controls and status indicators.
- Added the required database migration.

v2.4.4-docker

v2.4.4-monitoring

v2.4.4-nginx

v2.4.14

- Added human-readable URLs for named resources.
- Added resilient Redis-backed snapshots for Docker resources.
- Kept Docker resources visible as unavailable when a node goes offline.
- Prevented slow or disconnected Docker nodes from blocking other inventory reads.
- Added Docker container and deployment targets for proxy hosts.
- Added automatic node address and container port selection for proxy upstreams.
- Improved offline node navigation and monitoring behavior.
- Added local IP address reporting for nodes.
- Improved Docker deployment selectors and image entry.
- Refined proxy host, domain, and SSL certificate dialogs.
- Improved handling of proxied domains and certificate actions.
- Limited Docker log and exec workloads to improve daemon stability.
- Hardened AI connector SSL and sandbox operations.

v2.4.3-docker

v2.4.3-monitoring

v2.4.3-nginx

v2.4.13

- Fixed GitLab repository archive download for self-hosted GitLab by avoiding the fetch/406 path and using Node HTTP(S) buffer downloads.
- Restored Drizzle migration metadata for 0053-0055, including missing snapshots and journal entry.
- Added migration metadata checks so SQL, journal, and snapshots cannot drift silently again.
- Fixed local Cloudflare connector sync failure caused by the missing SSL auto-renew migration metadata.
- Added AI chat confirmation before returning to an older message, warning that later history will be deleted.
- Aligned confirm dialog body text styling with the rest of the app dialogs.

v2.4.12

- Added Cloudflare DNS-01 certificate auto-renew controls.
- Fixed AI chat state around answered questions, progress comments, thinking state, and tool grouping.
- Fixed GitLab connector capability refresh after token/permission changes.
- Fixed GitLab repository archive cloning on self-hosted GitLab.
- GitLab project registry/settings updates now auto-sync connector metadata and refresh related UI stores.

v2.4.11

- Added Cloudflare-assisted DNS-01 SSL renewal.

v2.4.10

- Fixed connector modal scrolling behavior.
- Added Cloudflare-assisted DNS-01 certificate renewal.
- Improved Cloudflare token validation and required-scope hints.
- Added safer DNS-01 renewal recovery so failed/pending renewals do not get stuck forever.
- Improved multi-tab Gateway update reload behavior.
- Added periodic frontend version checks after Gateway updates.
- Added collapsible GitLab-provided Docker registry list.

v2.4.9

- GitLab connector can now update its saved PAT directly from edit mode.
- GitLab connector updates now validate token/settings before saving, avoiding partial broken saves.
- GitLab and Cloudflare connectors auto-sync right after creation.
- GitLab registry sync now handles per-project registry access failures without failing the whole connector sync.
- Previously discovered GitLab registries are marked inaccessible when current sync can no longer verify them.
- Added AI tools for GitLab connector sync, adding connector projects, and project registry settings.
- GitLab project settings tool now fails closed on invalid registry access values.
- Cloudflare and GitLab connector modals now use the shared dialog scroll behavior, fixing dead scroll over modal content.

v2.4.8

- Added GitLab integrations: system connectors, project allowlists, registry discovery, and AI tools for GitLab projects, files, CI, variables, webhooks, registries, and sandbox cloning.
- Added Cloudflare-managed domains: Cloudflare connector, DNS zone sync, automatic A/AAAA record creation/adoption, conflict handling, and new Domains flow backed by Cloudflare.
- Added Gateway endpoint settings for public IPs and gRPC public/local enrollment targets, including safe gRPC cert refresh.
- Hardened Docker logs handling to avoid daemon hangs on huge logs: bounded log reads, command timeout, oversized frame protection, and session cancellation.
- Improved AI chat/tool flow: compaction, tool grouping, commentary/progress comments, tool-round handling, and safer retrieval output storage.
- Hardened security around node console scopes and sandbox artifact path access.
- Unified notification template variables/context.
- Fixed MCP tool discovery/session handling.
- Added/updated tests around integrations, domains, gRPC identity, AI tools, Docker logs, and sandbox behavior.

v2.4.2-docker

v2.4.1-docker

- "top" command execution fix

v2.4.7

- Fixed Docker container process monitoring by falling back when detailed top args are unsupported.
- Hardened authenticated API docs and OpenAPI access.
- Hardened nginx log streaming ownership checks.
- Added audit logging for AI prompt configuration changes.
- Removed obsolete session secret configuration.
- Improved OAuth consent UI: taller form, compact warning blocks, searchable scopes.
- Fixed API token/MCP programmatic scope handling for node file scopes.
- Improved Logging UI and removed duplicate “End of log history” border.
- Updated dependencies and bumped @wiolett/gateway-logger to 1.1.3.

v2.4.6

- Locked/ended AI conversations are now enforced server-side before accepting new user turns.
- Direct conversation.send_message calls into locked conversations return 409 and do not create a user message or start a run.
- Frontend preserves locked conversation state across reloads and blocks the composer correctly.
- Tool-only/status messages no longer reorder above the latest user message.
- Empty local status messages are hidden from the visible chat.

v2.4.5

- Fixed AI full-access mode showing the approval block for normal auto-approved running tools.
- Approval composer replacement now only appears for real approval-required tool calls.
- Restored approval block styling: gray background, yellow border, white text, ghost Reject, yellow Approve.
- Added a regression test for auto-approved running tool calls.

v2.4.4

- Added foundation file migrations during signed Gateway self-updates.
- Gateway updates can now patch host .env and docker-compose.yml safely, with backups, compose validation, and rollback.
- Added managed sandbox workspace mount support for existing installs and new installs.
- Fixed AI sandbox workspace permissions so processes can create/read artifacts reliably.
- Improved sandbox process lifecycle cleanup and kill handling.
- Updated AI sandbox/tool guidance to reduce invalid artifact paths and stuck jobs.
- Refined approval UI behavior for tool calls.