Skip to content

V1.3.4.5

Choose a tag to compare

View all tags
@SpiritFramework SpiritFramework released this 17 Oct 15:18
· 52 commits to main since this release
V1.3.4.5
bdbf722

Spirit Panel V1.3.4.5

Fleet UX polish, faster server shell, and Support chat aligned with billing conversations.

Security

  • Dependency advisories cleared (pnpm audit clean): nodemailer → 10.1.x, fastify → 5.12.7, @fastify/multipart → 10.1.4; overrides for @fastify/busboy, fast-uri, http-cache-semantics, and source-map-js.
  • Session-only for profile/2FA/PAT/SSH key changes; email change requires current password.
  • Application API keys require explicit permission scopes (no silent full-access default).
  • Admin node detail no longer returns daemonTokenId / daemon secrets.
  • Database hosts never return stored passwords; host create/update/delete require full admin.
  • Plugin catalog mutations require full admin.
  • Local backup download path jail hardened (UUID-only segments, no symlink follow).
  • Discord ticket webhooks re-validated at send time; email headings HTML-escaped.
  • Network guard rejects IPv4-mapped IPv6 loopback/link-local; player-count queries block metadata/loopback hosts while still allowing RFC1918 game allocations.

Performance

  • My Servers list API selects only list fields; admin users list no longer loads password hashes.
  • Polling skips overlapping My Servers / Alerts refreshes; useAsyncData refetch always fetches fresh.
  • Console WebSocket reconnect uses exponential backoff (capped at 30s); client shell routes have an error boundary.
  • Server shell loads eagerly; tab chunks suspend only in content; idle/hover prefetch; soft revalidate; analytics/ping/player-count polling pauses while the tab is hidden.

Added

  • Dev seed: Demo FiveM Server (FiveM nest/egg + marketplace access).
  • Ticket staff alerts (ticket_opened / ticket_user_reply) with deep links and live toasts.
  • Delete alerts from the inbox (one or clear all).
  • Installer progress UX (spirit.sh 2.0.7).
  • FeatherWings join-data for 1.4+ configure, plus remote health/config endpoints.

Fixed

  • Clearer console "Node unreachable" notice.
  • Admin Subdomains no longer 500s (server_domains migration).
  • Admin server Manage Startup for full panel admins when Admin server support is enabled.
  • Console auto-scroll stays on by default.
  • My Servers no longer duplicates Online/Offline/Installing/Total filters.

Changed

  • Alerts, Support inbox, and Support ticket chat polished to fleet/manage chrome (and billing-style chat).
  • FiveM Marketplace rebuilt onto the Plugins manage shell.
  • Server Analytics, Plugins, and Activity manage tabs polished.
  • Admin dashboard / System activity / Locations / Nodes / Subdomains fleet chrome.
  • My Servers redesign; Alerts always on (presets/rule CRUD removed).
  • Sidebar: removed PWA "Install app"; quieter Spirit-Panel attribution linking to Discord.

Removed

  • Unused profile security sidebar, alert presets/rule CRUD UI+API, orphaned helpers.
  • Local Redis dump.rdb ignored from git.

Upgrade: spirit.sh update (or spirit.sh update --ref V1.3.4.5). Run pnpm db:deploy if you have pending migrations (e.g. server_domains).

Assets 2
Loading