v0.8.0

Known regressions and required upgrade steps

Use the v0.8.0 host updater when upgrading from v0.7.x. This release includes the coordinated organization-variable storage migration (0048). Older in-app updaters cannot cross that boundary. The host updater backs up the database/configuration and actual service environment, stops and drains the canonical panel and worker, migrates separately, and starts the new roles only after success. Stop any custom or non-Swarm panel/worker processes yourself first. Preserve the matching encryption-key chain and authentication secret.

Previously queued deployments have no immutable environment snapshot: review and deploy them again. Image rollback alone does not reverse the database transition. To return to older binaries, restore the pre-upgrade database into an empty replacement database and restore its matching config/key assets first. No other regressions are known from the completed release checks. Recovery copies retain the documented limits for placement, compatibility and unsanitized data.

Detailed upgrade and rollback notes

What changed

• Restored the original panel and public website design. Added the reviewed refinements: projects before analytics, readable mobile setup instructions, 44px mobile header targets, and accessible resource sliders with stable keyboard focus.
• Reviewed configuration releases: save drafts, inspect redacted changes and source layers, then deploy selected applications or Compose stacks. Newly queued environment/build-argument inputs are encrypted and immutable.
• Incident investigation with filters, older pages, scoped evidence and recovery progress. Recovery remains open until an operator verifies it.
• Retained private PostgreSQL recovery copies with fresh credentials, archive/catalog checks and explicit target-only deletion. Source databases and stored dumps are preserved.
• Deployment claim/convergence fixes, literal environment preservation, runtime-log pagination and recovery-copy placement/deletion safeguards.

Security

Both Next.js apps resolve to 16.4.3, fixing GHSA-2464-fhr4-w9xw, GHSA-673q-mjm6-r5xr and GHSA-p3m5-59mp-jv5r / CVE-2026-94482. High/critical dependency and image gates remain enforced.

Migrations

Includes 0047–0051: template-source support; encrypted organization variables, deployment snapshots and recovery-copy tracking; original placement/volume identity and stricter retention/deletion safeguards. Migration 0048 is the coordinated upgrade boundary described above; downgrades do not reverse it.

Update from your server

curl -fsSL https://github.com/bablilayoub/nixploy/releases/download/v0.8.0/update.sh | sudo bash

Signed images: ghcr.io/bablilayoub/nixploy:v0.8.0 and :latest, for linux/amd64 and linux/arm64. Release assets include version-pinned install.sh, update.sh, uninstall.sh and SHA256SUMS. Script checksum and image-signature verification.