v2026.10.4

Added

• A public What's new page at /-/whats-new, linked from the footer
  next to the Plak version.
• plak --version. The CLI stops with an upgrade hint when the server
  speaks a newer major API version; plak logout then still forgets the
  local session.
• The Plak CLI runs on Windows, with the session in Windows Credential
  Manager or else in %APPDATA%\plak\hosts.json.
• A deploy answers with the url where it can be seen and who may see
  it; plak publish ends with that URL and the version, and the publish
  action passes the URL on as an output and in the job summary.
• The publish action can show a preview on its pull request, as a GitHub
  deployment, as a comment with the link and whether it needs a sign-in,
  or both; it skips pull requests opened by bots by default.
• Every night Plak removes the live versions a site no longer keeps: the
  current one and five before it by default (PLAK_LIVE_VERSIONS_KEPT),
  another number per site on the Versions tab, which also shows the
  site's usage. A site no longer gets stuck on its storage quota.
• GET /-/healthz on the admin host replaces the unreachable /healthz:
  ok, degraded or fail (503, no database), naming the failing
  checks, among them a nearly full content volume and, in production, an
  unmounted content root. Low space also logs an ERROR at most once an
  hour, and "Platformbeheer" shows how full the volume is.
• The Deploy tab marks a repository whose IDs were entered by hand "Nog
  niet bevestigd" (not confirmed yet) until its first deploy confirms
  them; the API returns idsConfirmed.

Changed

• The publish action lives at actions/publish and needs no host for
  the DigiGilde instance; the Claude Code skill is plak-publish. A
  workflow changes the path when it moves its pin.
• On ZAD a site may hold 200 MiB across all its versions
  (PLAK_SITE_MAX_BYTES), down from the 500 MiB default, because a ZAD
  volume is capped at 1Gi.
• plak preview-remove reports the removal on stderr, like the CLI's
  other messages for people.
• The API documentation and the OpenAPI schema are in English, and in
  Dutch through a switch on the page, the language on your profile or
  Accept-Language.
• The API-Version header follows the API from release to release: the
  minor goes up when a release adds to it, the patch when it changes it
  otherwise.

Fixed

• The repository form on a site's Deploy tab closes when you switch to
  another site.
• When plak site link finds no repository, or GitHub's anonymous lookup
  limit is used up, the CLI says why gh gave no IDs and what to do.

Security

• A version published from CI shows as its origin the repository its
  signed token names, not the name typed on the site's link. A renamed
  repository's new name replaces the old one on the Deploy tab, logged as
  site_repository_rename.

CLI 2026.10.4

Plugin 2026.10.4

API 1.1.0

Container image

• plak: ghcr.io/digigilde/plak:2026.10.4, digest sha256:e6c2bf86a3ec616acc716d5afadd36880cec464005dc2564953ffe97b2ffe8cf

Verify where it was built: gh attestation verify oci://ghcr.io/digigilde/plak@sha256:e6c2bf86a3ec616acc716d5afadd36880cec464005dc2564953ffe97b2ffe8cf -R DigiGilde/plak
Its SBOM (CycloneDX): the same command with --predicate-type https://cyclonedx.org/bom