v0.11.0

Important

Database migrations run automatically when the server starts. Back up your database (or the data/ volume) before upgrading — see Upgrading.

📦 Install

docker pull ghcr.io/arkeep-io/arkeep-server:v0.11.0
docker pull ghcr.io/arkeep-io/arkeep-agent:v0.11.0

Kubernetes: helm install arkeep oci://ghcr.io/arkeep-io/charts/arkeep --version 0.11.0 (also oci://registry-1.docker.io/arkeepio/arkeep).

Images are also published on Docker Hub (arkeepio/arkeep-server, arkeepio/arkeep-agent) for linux/amd64 and linux/arm64. Standalone binaries — server for Linux and macOS, agent for Linux (amd64, arm64, armv7, mips, mipsle), macOS and Windows — are attached below. See the installation docs for Docker Compose, binary and Helm setups.

Changelog

🚀 Features

• feat(notification): send job notifications as HTML email (ad756e5) by @airfryer-nugget
• feat(policies): show last run date and recent run history in the list (6eb0ea9) by @TheGuit
• feat: turn email notifications off independently of the webhook (9ec9935) by @Fcrotti1

🐛 Bug Fixes

• fix(auth): stop concurrent token refreshes from signing the user out (df812f5) by @Fcrotti1
• fix(auth): stop login and 2FA brute force from private networks (66c73c8) by @Fcrotti1
• fix(db): store times in UTC whatever the server's time zone (6e41db6) by @Fcrotti1
• fix(notification): skip email deliveries when SMTP is not configured #430 (ea059a4) by @Fcrotti1
• fix(policies): write a policy and its destinations in one transaction (d3e0512) by @Fcrotti1
• fix: exclude docker volumes reached through the host root from in-place restore" (50ea487) by @Fcrotti1
• fix: protect running containers data during in-place restore (8e5cb02) by @Fcrotti1
• fix: report Docker Hub errors when updating repository descriptions (190fa13) by @Fcrotti1
• fix: tolerate SELinux labels when restoring on Linux #424 (43cb2ae) by @Fcrotti1
• fix: translate absolute exclude patterns to the host root inside Docker #441 (90f6a74) by @Fcrotti1

🏗️ Build & CI

• build: bump Go toolchain to 1.27.4 for GO-2026-6859 (89d6c04) by @Fcrotti1
• ci(registry-metadata): read the Docker Hub secrets from the release environment (896c28e) by @Fcrotti1
• ci(release): publish build provenance and keep registry secrets in an environment (d384198) by @Fcrotti1
• ci: exclude the restictest helpers from gosec (ab533f1) by @Fcrotti1
• ci: publish to Docker Hub with one organization access token (74948c0) by @Fcrotti1
• ci: split Docker Hub credentials into two environments (2a1e326) by @Fcrotti1
• ci: validate release tags and keep latest for stable releases (0e6fcf5) by @Fcrotti1

🧹 Maintenance

• chore: publish Artifact Hub repository metadata for the Helm chart (7ff16ed) by @Fcrotti1
• chore: publish Docker Hub pages from the repository (3ada1e6) by @Fcrotti1
• chore: tidy the release notes template (487ad7f) by @Fcrotti1
• chore: updated dependencies to latest version (d18ae43) by @Fcrotti1

🔧 Other Changes

• README.md (1882ef6) by @Fcrotti1

❤️ New Contributors

Welcome and thanks to the first-time contributors of this release: @airfryer-nugget

🔐 Verify

Every archive, both images and the Helm chart carry a build provenance attestation from the release workflow, checked with the GitHub CLI:

sha256sum --check --ignore-missing checksums.txt
gh attestation verify arkeep-server_linux_amd64.tar.gz --repo arkeep-io/arkeep --signer-workflow arkeep-io/arkeep/.github/workflows/release.yml
gh attestation verify oci://ghcr.io/arkeep-io/arkeep-server:v0.11.0 --repo arkeep-io/arkeep --signer-workflow arkeep-io/arkeep/.github/workflows/release.yml

Full Changelog: v0.10.0...v0.11.0