2026-04-20-r1

[Zoey2936]

What's Changed since last release

• support voidauth
• remove AUTH_REQUEST_TINYAUTH_DOMAIN env, tinyauth v5.0.7+ is now required
• allow the backend to send all Upgrade headers again, if you have issues with apple clients try to instead disable http2 in your upstreams
• cookies are more strict now, the cookie name has changed because of this
• always send "Origin-Agent-Cluster: ?1" header
• hsts buttons are now better labeled
• CERTBOT_RUN_INTERVAL is now limited to 500 hours
• inbuilt php has been fixed
• the error log written to disk now uses error level info
• rename the advanced tab from a cogwheel symbol to advanced
• show a star if a custom config is set for locations
• dep and doc updates

Image tags:

• docker.io/zoeyvid/npmplus:2026-04-20-r1 (fixed to this release)
• ghcr.io/zoeyvid/npmplus:2026-04-20-r1 (fixed to this release)
• docker.io/zoeyvid/npmplus:latest (latest stable)
• ghcr.io/zoeyvid/npmplus:latest (latest stable)
• docker.io/zoeyvid/npmplus:beta (latest beta/stable)
• ghcr.io/zoeyvid/npmplus:beta (latest beta/stable)

Full Changelog: 2026-04-12-r1...2026-04-20-r1

---

This discussion was created from the release 2026-04-20-r1.

[vincent0952]

After upgrading 2026-04-20-r1, the "Logout" button in the management interface has stopped working. Clicking it does not trigger any action, and the user remains logged in.

Details & Observations

• Version: v2026-04-20-r1
• Network Activity: Upon clicking the "Logout" button, no DELETE /api/tokens request is visible in the browser's Network tab.
• Frontend Behavior: The frontend continues to poll background APIs (such as /api/check and /api/nginx/proxy-host) even after clicking logout, indicating the UI state is not being reset.
• Environment: Tested in Incognito/Private mode, and the issue persists.

Troubleshooting performed

• Cleared browser cache and site data manually: This successfully "logs out" the user by force, but the logout button remains non-functional after logging back in.
• Extensions: I have ruled out browser extensions (including password managers and autofill overlays). The issue occurs even when all extensions are disabled and the browser console is clear of extension-related errors.

[Zoey2936]

Thanks for the report, I will push a fix