v0.9.0

Important

Database migrations run automatically when the server starts. Back up your database (or the data/ volume) before upgrading.

📦 Install

docker pull ghcr.io/arkeep-io/arkeep-server:v0.9.0
docker pull ghcr.io/arkeep-io/arkeep-agent:v0.9.0

Images are also published on Docker Hub (arkeepio/arkeep-server, arkeepio/arkeep-agent) for linux/amd64 and linux/arm64. Standalone binaries — server for Linux and macOS, agent for Linux (amd64, arm64, armv7, mips, mipsle), macOS and Windows — are attached below. See the README for Docker Compose and Helm setups.

📝 What's Changed

Changelog

🚀 Features

• feat(gui): bundle Be Vietnam Pro instead of loading it from Google Fonts (9c6e445) by @TheGuit
• feat(server): add ARKEEP_UPDATE_CHECK to disable the GitHub release check (c21d03a) by @TheGuit
• feat: fail jobs still pending after the queue timeout #325 (99d0b41) by @Fcrotti1
• feat: sortable columns in the Agents and Policies lists #320 (dd8b2f8) by @Fcrotti1

🐛 Bug Fixes

• fix(scheduler): compute next_run_at from the cron schedule #321 (2b3b4dd) by @wzd8888
• fix(security): bind each agent to its mTLS client certificate (dedbd34) by @Fcrotti1
• fix(security): enroll agents with a CSR so the private key never leaves the agent (20d1bd8) by @Fcrotti1
• fix(security): require the second factor after OIDC login, the current password to change it, and revoke sessions on logout (092f057) by @Fcrotti1
• fix(security): resolve the client IP behind trusted proxies, bound Argon2 and metrics label cardinality (c67c630) by @Fcrotti1
• fix: combine job list filters and keep WebSocket topics subscribed while connecting (1ffcbc7) by @Fcrotti1
• fix: free destinations held by pending backups of a gone agent, run backups side by side #319 (92f2ef6) by @Fcrotti1
• fix: normalize S3 repo URL, apply S3 region from config, fail fast on unreachable destinations (a62a933) by @Fcrotti1
• fix: stop restores blocking backups, close interrupted child rows, unblock duplicate agent reports (d806598) by @Fcrotti1
• fix: validate destinations and passwords on the server, share token refresh across providers (ab8ee99) by @Fcrotti1

🏗️ Build & CI

• ci(release): credit first-time contributors in release notes (3764833) by @Fcrotti1
• ci: fix gosec scan on Go 1.27.2 (89afe86) by @Fcrotti1

🧹 Maintenance

• chore: upgraded dependencies to latest version (cb197b5) by @Fcrotti1

❤️ New Contributors

Welcome and thanks to the first-time contributors of this release: @TheGuit @wzd8888

🔐 Verify

sha256sum --check --ignore-missing checksums.txt

Full Changelog: v0.8.0...v0.9.0