v1.1.0

Changelog

• 36cb359 feat: restore --device= on credentials:list, listing what applies
• 448fa22 packaging: survive the upgrade from 1.0.9, and draft the 1.1.0 notes
• 83d79ee docs: the changelog still promised version-skew tolerance that does not exist
• 29387f2 style: pint formatting for the check-docs template guard
• 49b1ded docs: mkdocs has no template engine, and now check-docs knows that
• 2839d87 docs: the package repository is live, so lead with it
• 7aeb391 repo: make the host scripts survive a real SELinux-enforcing Rocky 10 box
• aeefd10 repo: run the host scripts for real, and fix the four things that broke
• d50da74 repo: host setup, the publish trigger, and the client-facing docs
• 4f45f3a repo: build and sign the package repositories, and prove they refuse tampering
• 2cb37c5 docs: tidy the leading whitespace in DESIGN.md and PRODUCT.md
• d276d34 build: stop shipping design records to every operator's vendor tree
• 790d4e8 polish: the plugin settings page and the menu entry
• 636acad polish: the device-page terminal surfaces
• 06b8ac1 polish: rebuild the admin console against LibreNMS's own idiom
• 31976c7 fix: three defects the critique found behind the presentation
• 7081757 docs: record the design contract the views are about to be held to
• 74b18ba docs: record the product truth the UI has to serve
• a86f57e docs: install pages describe the installer that now exists
• 2b1e79d testbox: run the installer against real distros, and fix what that found
• 841ae1d installer: end-to-end setup with reverse-proxy configuration
• e394564 fix: refuse a protocol mismatch before the click, not after it
• 584940d fix: a package upgrade left the gateway stopped and disabled
• b0b82d7 docs: stop promising version-skew tolerance that does not exist
• 1dee55a fix: stop shipping instructions that cannot work, and see the SELinux wall
• 304f0c9 feat: let an operator allow dynamic device groups, deliberately
• 2465fe9 fix: render the device tab inside LibreNMS's page, not as a bare panel
• f2f7e1d fix: run the reconciler in the foreground
• 3d090c5 fix: bound the reconciler's overlap lock to five minutes
• 1b29f70 fix: put the terminal IN the tab, and say when nothing is reaping sessions
• 5253e14 fix: the device tab never received its data
• 15d6aa4 feat: terminal as a device tab, and enable a whole device group
• 4110a53 feat: administer WebTerm from the UI -- credentials, targets, settings, menu
• af03e22 fix(ci): extend the view-string analysis exemption to tests
• 510c941 feat: show linked device names in the console, and pick devices by name
• 7296960 fix: a failed connection attempt no longer costs a concurrency slot
• a13f7a2 fix: group grants and group credentials never matched a UI-created group
• 4970a40 fix: actually schedule the reconciler
• fcc43d1 fix: stop reporting a rejected credential as an unreachable device
• 6c45b69 fix: declare gateway.ui_url in the config file
• 338cf86 fix: the Access tab crashed on __('device')
• 16f14b4 fix(doctor): say when the admin console is unreachable by anyone
• 01724ca fix: only offer the console link to someone who can open it
• 85fa0f6 docs: the dev-tracking steps must not depend on an interactive prompt
• 2b65c4a fix(doctor): show the commit when tracking a branch
• 699b435 feat: make a development build reversible, and detectable when it is not
• ed7fd63 feat: add an admin console for everything except credentials
• f44a54d feat: scope credentials to a device, a device group, or the fleet

Verifying this release

Every artifact is covered by build provenance attestation:

gh attestation verify librenms-webterm-gw_..._linux_amd64.tar.gz --repo adaptivedatanetworks/librenms-webterm

The plugin half is installed separately, through LibreNMS:

./lnms plugin:add adaptivedatanetworks/librenms-webterm

Plugin and gateway version independently and support one protocol version.
There is no skew tolerance today: a mismatch is refused before the terminal
opens. Run ./lnms webterm:doctor after upgrading either.