v1.3.0

New features

• SSH transport for store-and-forward — full git push/git fetch over SSH with agent forwarding, upstream host-key pinning (with opt-in TOFU), and routing across multiple SSH-configured providers. See SSH transport. (#379, #432, #451, #430, #431)
• Outbound proxy support — route upstream traffic through a corporate outbound proxy with Basic or Kerberos auth. See Outbound proxy. (#427)
• Content-pattern scanning (WARN-only) — detect structured PII/national-ID/financial identifiers (IBANs, credit cards, crypto wallets, national IDs) in diffs and commit messages using built-in pattern bundles. See Content-pattern scanning. (#446)
• Binary blob detection — flag binary content in pushed commits by MIME signature, not file extension. See Binary blob detection. (#426)
• MySQL / MariaDB backend support — new database backend options alongside Postgres/H2/Mongo. See Database backends. (#423)
• Standalone server Docker image + Helm chart — fogwall-server now ships its own image and a minimal Helm chart for Kubernetes deployment. (#421, #439, #441)
• Permission groups — group-based permission assignment instead of per-user only. See Groups. (#406, #101)
• WARN as a first-class step status — validation steps can now warn without blocking a push, surfaced distinctly in the dashboard and client output. (#440)
• Configurable open-access mode — allow IdP-authenticated users through when role mappings aren't enforced, instead of denying by default. See Role mappings. (#419)
• Policy links on attestation questions — attach a reference URL to each attestation prompt. See Attestations. (#403)
• Double-underscore env var convention — environment variable overrides can now target hyphenated config keys and provider names. See Hyphenated keys and provider names. (#402)
• Rule/permission test endpoints — admin dry-run endpoints to check how a URL rule or permission would evaluate before deploying it. (#416)
• Optional order in access rules, defaulting to YAML array position. (#418)
• Third-party license notices bundled into Docker images and a dashboard Legal page. (#424)
• Dashboard UX: hyperlinked repo/commit references in push list and push detail. (#420)

Bug fixes & security

• Fail-closed validation + SSH upstream host-key verification — validation hooks now fail closed on internal error instead of allowing the push through, and SSH forwarding verifies the upstream host key. (#448)
• Secret-scan findings are now redacted from stored diffs before persistence, not just at display time. (#437)
• Reliably cancel PENDING pushes on client disconnect or gateway error over SSH. (#430)
• Merge config-sourced user data on SSH fingerprint lookup; fixed a 403 on SSH key removal. (#431)
• Pause heartbeat messages during approval wait; hide review-related grants when require-review-permission is false. (#405)

Maintenance

• Removed a redundant provider-path check and collapsed the filter hierarchy. (#438)
• Dispatch request handling to bounded virtual threads for improved concurrency. (#453)
• CI: cover fogwall-server in the weekly scan and manual retag workflows; publish/release the standalone server image. (#439, #441)
• Dependency bumps: Java (java-dependencies group, org.cyclonedx.bom), GitHub Actions (github-actions, codeql-actions groups), and frontend npm packages. (#408, #409, #411, #412, #433, #434, #435, #436, #449)
• Docs: troubleshooting guide for large push failures behind reverse proxies; final pre-release doc/config/deployment cleanup. (#417, #443, #445)

Full Changelog: v1.2.1...v1.3.0