HIBP v0.7.1

Selected-host bulk patching

• The Hosts table and dashboard now have Patch selected (N) next to Update selected.
• Opens a summary of selected hosts, pending updates, and reboot flags.
• Choose Dry run or Apply updates.
• Runs sequentially with per-host progress, failure isolation, and Stop after current host.
• Dry-run results show updates available or up to date; apply results show patched or the failure exit code.

Sudo password prompt reuse

• During a selected-host patch batch, the first sudo password prompt is reused in browser memory only for the remaining hosts in that batch.
• The password is still never written to SQLCipher, logs, argv, environment variables, or browser storage.
• For no prompts at all, install the restricted NOPASSWD helper with Setup or Update selected.

Fixes

• A dry-run patch check that exits with status 100 (updates available) is now reported as successful instead of failed.

Upgrade notes

• No database migration or helper update is required.
• Existing hosts and settings are unchanged.

SHA256 checksums and the installer are attached to this release.

HIBP v0.7.0

SSH ProxyJump support

• Single-hop SSH ProxyJump is now supported for managed hosts, including manual actions, scheduled checks/applies, collection, helper setup, and Docker operations.
• SSH config import resolves a ProxyJump alias (for example jump) or a direct [user@]host[:port] target into the host form.
• Jump hosts have a separate trusted host key. The first connection test prompts for the jump host fingerprint, then the target fingerprint.
• The Add/Edit host form now exposes optional jump address, port, username, and key path fields.
• Jump key path falls back to the target key for key-auth hosts, or to the manual password for password-auth hosts.
• Multi-hop ProxyJump a,b chains, interactive bastion prompts, and SSH agent forwarding are not supported. Multi-hop entries are shown as unsupported instead of being silently flattened.

SSH config keys

• All configured IdentityFile entries are shown, not just the first.
• Global Host * identity defaults are applied.
• Public *.pub files are filtered from SSH config results and the key browser.

Upgrade notes

• Adds schema migration 010_proxy_jump.sql. The server creates a verified automatic pre-migration backup on first start.
• No helper update is required; jump support is controller-side.
• Existing direct SSH hosts keep working unchanged.

SHA256 checksums and the installer are attached to this release.

HIBP v0.6.9

SSH config key handling

• SSH config import now lists every configured IdentityFile for a host, not just the first one.
• Applies identity files from global Host * blocks as defaults.
• The add-host form shows all configured private-key candidates as selectable choices while keeping the free-form key path field and Browse button.
• Public *.pub files are filtered from both SSH config results and the SSH key browser, since they cannot be used as client keys.

Upgrade notes

• No database migration is required.
• Existing hosts, settings, and encrypted data are unchanged.
• This is a controller-side change; no helper update is needed.

SHA256 checksums and the installer are attached to this release.

HIBP v0.6.8

Host deletion

• Every host row now has a Delete action with a clear confirmation.
• Deletes the host and cascades its facts, metrics, Docker inventory/checks, trusted host key, and run history.
• The audit entry is retained. The helper and sudoers rule on the target are not removed.
• Host action buttons use a balanced 4-column layout so Delete aligns with Patch and Reboot.

Metric history ranges

• The Host System tab now offers 24-hour, 7-day, 10-day, 30-day, and 90-day history windows, defaulting to 30 days.
• History is queried by timestamp instead of a fixed sample count. At the default 5-minute interval, the 30-day view now shows the full retained month.
• The header shows the requested window, sample count, and actual first-to-last timestamps.

Upgrade notes

• No database migration is required.
• Existing hosts, settings, and encrypted data are unchanged.

SHA256 checksums and the installer are attached to this release.

HIBP v0.6.7

Docker Compose update workflow

• The host Containers tab now shows a persisted status for every Compose project: not checked, update available (with the changed services), up to date, updated, or failed. Status survives page reloads.
• Check all projects pulls and compares every Compose project without restarting containers.
• Select one or more projects with the new checkboxes and use Update selected to re-check and recreate only those projects whose image changed.
• Update all Compose projects remains available for a full-host pass.
• Hosts with cached Docker inventory now show a + shortcut that opens the Containers tab directly.

Upgrade notes

• Adds schema migration 009_docker_checks.sql. The server creates a verified automatic pre-migration backup on first start.
• No new privileged helper action is required for Check all projects or Update selected; both use the existing docker-check and docker-apply helper actions.
• The v0.6.6 docker-update-all action still requires Update helpers on targets that have not received the matching helper build.

SHA256 checksums and the installer are attached to this release.

HIBP v0.6.6

Full Changelog: v0.6.5...v0.6.6

HIBP v0.6.5

Full Changelog: v0.6.4...v0.6.5

HIBP v0.6.4

Full Changelog: v0.6.3...v0.6.4

HIBP v0.6.3

Full Changelog: v0.6.2...v0.6.3

HIBP v0.6.2

Full Changelog: v0.6.1...v0.6.2