v0.3.0
[0.3.0] - 2026-05-06
Bug Fixes
- Properly set default address updated_at value for devices (was 1970) (
6b60ee4) - Show owner name not id on device provisioning invite creation (
6bc3236) - On device delete ensure addresses are disabled and API keys removed (
e7614c7)
Features
- Add device ownership with per-user scoping
- Add Policy Cache Auditing: Allows reviewing active IPs by User. Source of truth is same one as the authorization endpoint used by the proxy
- Allow simulating a request to check which response the proxy would see. Added to Policy Cache page (the one added by the feature above)
- Add device provisioning page: Allows creating a device registration code for use by the heartbeat-client application.
- Remove non-admin user login. Allow only admin user login. Simplify flows accordingly and ask for password on user -> admin promotion (
5d7d577)- Only bootstrapped admin (the admin account created on first initialization with superadmin role) can create/promote/demote/delete users (
bd78411)
- Only bootstrapped admin (the admin account created on first initialization with superadmin role) can create/promote/demote/delete users (
- Add per user host based authorization: Allows restricting users to only specific hosts either individually and/or via host groups.
Miscellaneous
- Devices List - Visual improvements
- AccessLog - The user can now copy the headers shown on the item details side panel
- Dashboard - Hide country map section when no geo data is available (
12182b9) - Navbar - Add GitHub docs and feedback links (
53230db) - Requests Traffic charts - Add toggle buttons for Allowed/Denied lines on traffic chart (
1557e41) - AccessLog | AddressLog - Make device name clickable (
67802a6) - Devices - Make device api-key optional. Do not create it by default. (
70dbd63) - Device Settings Tab - Split the rules into a separate Rules tab (
bce29cb)
Under the Hood
- Split openapi.yaml into smaller files to reduce size and context needed for changes. Bundle it into a single file using redocly before sending it to backend or frontend (
708d78a) - Auto-merge dependabot. Pending enable automerge at github repo level, needs public repo. (
8bf0a31) - DB - Remove unneeded created_at and id columns for access_log_contributors to reduce size since a lot of records will be there usually (
88bd113) - DB - Allow multiple open connections on SQLite DB so that slow queries don't block quick ones. WAL mode already enabled. (
8ed847e)
Docker image: ghcr.io/diegoguidaf/pulseweaver:v0.3.0
docker pull ghcr.io/diegoguidaf/pulseweaver:v0.3.0