Skip to content

v0.4.1 - server identity, security hardening, reliability

Choose a tag to compare

View all tags
@Suraj-Tiwari Suraj-Tiwari released this 20 Aug 14:35
· 220 commits to main since this release
v0.4.1
62f48ba

The stable cut of the 0.4.1-beta.1…beta.3 line, tested on the live host since 2026-08-02. Supersedes v0.4.0.

Highlights

  • Server identity (#99). Configurable server.name across web, ctl, and alert titles; host inventory (CPU/RAM/disks/OS/uptime) on a new web Host page, serverwatch-ctl host, and core.API.HostInfo; local + opt-in public IP; CPU/mem alerts name the top process and container. (#100, #101, #102, #103)
  • Security hardening. Fail-closed control socket (#96) and web user store (#105), bounded Telegram enrollment PIN brute force (#93), DOM XSS sink removed (#94), rate-limited ceremony begins (#95), opt-in outbound SSRF guard (#97), documented plugin-copy trust assumption (#98).
  • Reliability. Web dashboard no longer freezes on a desynced socket client (#105); daemon restarts no longer recorded as host downtime (#116); fail-visible collection with per-collector health and alerts (#110); Swarm services keyed by service, not task (#118); storage maintenance no longer stalls history reads (#113).
  • Operability. Build-time version stamps with mismatch detection (#107); series-cardinality guardrail in doctor (#112); setup UX fixes (#106); container logs in the drawer; paginated downtime list.

Full detail: CHANGELOG.

Binaries are stripped (-s -w -trimpath) and stamped v0.4.1; verify downloads against checksums.txt (sha256sum -c).

Assets 18
Loading