v1.7.5

Wolf Monitor v1.7.5

v1.7.4

Wolf Monitor v1.7.4

v1.7.3

v1.7.3

v1.7.2

v1.7.2 — HTTP-check per-probe logging (streak/threshold/timing visibi…

v1.7.1

v1.7.1 — HTTP-check flapping fix (fail threshold + retry + per-target…

v1.7.0

New: admin-only HTTP liveness checks.

- Configure target URLs (with per-target interval, min 30s) from
  Settings → HTTP 檢測. Never surfaced on the public dashboard.
- Non-2xx / unreachable fires the existing Telegram/webhook channel via
  lib/notify — no separate token to manage.
- Dedup: notifications fire ONLY on up↔down state transitions. First
  check after a target is added records baseline silently. Sustained-down
  stays silent after the initial alert (no repeat spam).
- HEAD probe with GET fallback for sites that 403/405 HEAD; 8s timeout.
- Per-row "Test" button in the UI probes once and sends a synthetic
  notify so operators can verify the pipeline without bringing a real
  target down (does not touch persisted state).
- Config + state stored encrypted in app_settings.httpChecks
  (SENSITIVE_KEYS — URLs frequently carry auth tokens).

v1.6.9

v1.6.9: widen systemd start-limit so update loops can't wedge the ser…

v1.6.8

Fix the v1.6.7 self-update death loop.

v1.6.7's node binary self-reported the source-hardcoded "1.6.6" (release.yml
never injected the tag via -ldflags), so every node that installed v1.6.7
saw a version mismatch on its next refresh and re-triggered install.sh,
looping ~1 install/second until the master's desiredAgentVersion was cleared.

Fixes:
- release.yml now bakes the tag into main.Version at link time.
- updater cooldown is persisted to /opt/wolf/.last-update-attempt so a
  future version-drift bug can burn install.sh once every 5min at worst.
- Source default bumped to 1.6.8.

Rolling out to v1.6.8 will end the loop for any node still stuck on 1.6.7.

v1.6.7

Security:
- Next.js 15.5.18 -> 16.2.10 (multiple HIGH advisories: middleware/proxy
  bypass, Cache-Components DoS, SSRF via WebSocket upgrade, i18n proxy
  bypass, dynamic route param injection).
- Go 1.26.4 -> 1.26.5 for node probe (GO-2026-5856: ECH privacy leak in
  crypto/tls).

Features:
- Optional Cloudflare Turnstile on the /login form (opt-in via
  NEXT_PUBLIC_TURNSTILE_SITE_KEY + TURNSTILE_SECRET_KEY).
- New nodes get offline notifications enabled by default on first report
  (INSERT ... ON CONFLICT DO NOTHING, so operator edits are preserved).
- ServerDetail RealTime range now shows a fixed 5-minute sliding window,
  polling every 1.5s so the tail actually keeps up with the 5s sample rate.

Migrations:
- middleware.ts -> proxy.ts (Next 16 renamed the file convention).
- next.config.ts drops import.meta.url so Next 16's CJS-compiled config
  loads correctly.

Deps:
- lru-cache 11.5.1 -> 11.5.2, lucide-react 1.22 -> 1.23, tsx -> 4.23,
  @types/node -> 26.1.1.

v1.6.6

v1.6.6: dep bumps (gopsutil, pro-bing, react, pg, lucide-react, postc…