v1.20.3

Summary

• SFTP backups can now authenticate with an uploaded SSH private key and no password. VolumeVault securely copies the key into the temporary Offen backup container, including when Docker is reached over TCP, and removes it after the run.
• Interrupted helper cleanup is now reconciled before stopped application containers are restarted, preventing credentials from being left behind or applications from restarting while a backup helper may still be active.

Upgrade Notes

• This release includes a database migration that tracks pending backup-container cleanup. The migration runs through the normal VolumeVault startup process.
• Existing SFTP destinations and encrypted credentials are preserved.
• Rebuild and restart the VolumeVault container after upgrading.

Verification

• Local verification before release included php artisan changelog:validate v1.20.3 --release --no-interaction.
• Local verification before release included php artisan test --compact (621 tests, 2,225 assertions).
• Local verification before release included npm test (1 test).
• Local verification before release included npm run build.
• Local verification before release included vendor/bin/pint --dirty --format agent.