Releases · coollabsio/coolify

Release list

v4.2.0 Pre-release

Pre-release

andrasbacsai released this 21 Jul 16:08

v4.2.0

b53ae42

⚠️ Breaking Change

Team members with the Member role now have read-only access. They can continue to view team resources and configuration, but can no longer create, update, delete, deploy, start, stop, or otherwise modify resources. Review your team roles before upgrading and promote users who still require write access.
State-changing API endpoints now require POST. Legacy GET requests return 405 Method Not Allowed. Update API clients and deploy webhooks that use these endpoints:

/enable
/disable
/deploy
/servers/{uuid}/validate
/applications/{uuid}/start
/applications/{uuid}/restart
/applications/{uuid}/stop
/databases/{uuid}/start
/databases/{uuid}/restart
/databases/{uuid}/stop
/services/{uuid}/start
/services/{uuid}/restart
/services/{uuid}/stop
/services/{uuid}/applications/{app_uuid}/start
/services/{uuid}/applications/{app_uuid}/restart
/services/{uuid}/applications/{app_uuid}/stop

Features

Added scheduled persistent-volume and application-storage backups, including retention controls, manual execution, and API schedule deletion. (#10946, fixes #7701)
Added API endpoints for database, service, and container logs, including optional timestamps. (#6293)
Added API endpoints to move applications, databases, and services between authorized environments. (#8968)
Added a configurable Docker registry URL. (#9017)
Added API management for service applications and service databases, including lifecycle actions and logs. (#9249)
Added tag management and tag assignment during application, database, and service creation. (#9275)
Added Hetzner firewall, internal network, and backup options during server creation. (#9646, fixes #9619)
Added preview deployment settings to application API endpoints. (#10188)
Added REST API endpoints for listing, creating, inspecting, and deleting destinations. (#10405)
Added Vultr cloud server provisioning and power controls. (#10533)
Added an Inngest one-click service template. (#10612)
Added a per-team toggle for the MCP server. (#10771)
Added internal endpoint controls with protected DNS resolution for webhooks. (#10835)
Added DigitalOcean Droplet provisioning. (#10871)
Added scheduled ClickHouse backups and cloud administration commands.
Added dedicated server, cloud credential, cloud-init, and private-key management flows.
Added application settings to application API responses.

Fixes

Enforced authorization policies consistently across the API and Livewire, restricted sensitive operations to admins, and protected secrets from team members. (#8628)
Populated Docker Compose domains correctly for applications created through the API. (#9300, fixes #9211)
Hid sensitive API fields by default while allowing privileged tokens with sensitive-read access to retrieve them. (#9893)
Prevented force=false deployment requests from incorrectly forcing cache-busting rebuilds. (#9909)
Ensured closed pull-request previews were cleaned up even when status updates failed. (#10180, fixes #9495)
Preserved full public Git repository URLs for non-GitHub hosts. (#10274)
Allowed the source-commit build setting through the application API. (#10551, fixes #10280)
Limited Grafana-specific service fields to Grafana images. (#10562, fixes #10556)
Corrected GitHub Enterprise App installation paths. (#10576, fixes #10573)
Corrected GitHub API URL derivation while preserving custom API URLs. (#10610)
Corrected Convex origin variables and exposed its HTTP Actions port. (#10646, fixes #7232, #7989)
Validated invitation magic-link tokens while preserving database-session login flows. (#10651, fixes #10633)
Accepted underscores in HTTP(S) domain hostnames used by the API. (#10663, fixes #10597)
Interpolated Railpack build-time environment variables correctly. (#10768, fixes #10736)
Validated environment-variable keys before saving them. (#10773)
Preserved deployment-key command metadata without exposing private-key commands in logs. (#10795)
Hardened database backup imports and file handling. (#10796)
Aligned resource-creation permissions across the application. (#10799)
Improved team resource route handling. (#10829)
Improved storage mount-path handling. (#10831)
Improved S3 storage selection, validation, and error handling. (#10832)
Strengthened outbound URL validation. (#10833)
Corrected additional release regressions and compatibility issues. (#10834, fixes #9204)
Improved application URL validation and preserved case-sensitive paths. (#10836)
Avoided invalid service preview environment-variable lookups. (#10837, fixes #10830)
Isolated Railpack Buildx commands from Docker client environment settings. (#10840, fixes #10769)
Preserved file-volume state during service parsing. (#10843, fixes #10525)
Removed Ray debugging hooks from production runtime paths. (#10847, fixes #6407)
Preserved intentionally empty service environment-variable values. (#10850, fixes #10827)
Honored skip flags when synchronizing pull-request preview deployments. (#10873, fixes #10870)
Clarified and enforced build-server hosting restrictions. (#10961, fixes #10898)
Hardened Vultr provisioning cleanup, cloud-provider retries, Gmail identity normalization, and cloud server status handling.
Fixed application configuration-change detection after settings updates.
Fixed backup storage defaults and required valid S3 selections.

Improvements

Added responsive resource navigation, mobile lifecycle actions, and consistent status badges.
Improved private-key creation and prevented deletion of keys still used by servers.
Improved cloud server provisioning by retaining instances awaiting public IP assignment and separating provider checks from SSH checks.
Updated EspoCRM configuration for version 10 compatibility. (#10848)
Updated the Alexandrie service template to version 8.10.0. (#10864)
Updated the Gitea Runner template. (#10566)
Improved contributor documentation and issue templates. (#8577)
Updated Laravel, Vite, Symfony, Guzzle, phpseclib, WebAuthn, and NGINX dependencies. (#10665, #10680, #10683, #10710, #10711, #10738, #10739, #10901)

Breaking Changes

Required POST for state-changing API operations such as start, stop, restart, deploy, enable, disable, and server validation; equivalent GET requests now return 405 Method Not Allowed.

Related issue references:

(#10872, fixes #5293, #6407, #6488, #6518, #6881, #7232, #7989, #8104, #9204, #9211, #9495, #9619, #9860, #9943, #10280, #10525, #10556, #10573, #10597, #10632, #10633, #10692, #10732, #10736, #10769, #10827, #10830, #10870)

Assets 2

v4.1.2 Latest

Latest

andrasbacsai released this 04 Jun 07:54

v4.1.2

e7dff30

What's Changed

Security & Fixes

Fixed private submodule authentication during deployments (#8900, fixes #2731)
Fixed deploy keys overwriting server root SSH keys (#10440, fixes #10203)
Improved fork pull request safety for preview deployments (#10457, fixes #10342)
Hardened API token team checks (#10505)
Improved image, branch, proxy, and deployment input validation (#10501, #10502, #10503, #10504)
Fixed generated Compose environment variables breaking preview deployments (#10186, fixes #7552)
Fixed registry image tags being pushed for preview deployments (#10185, fixes #7616)
Fixed Git repository imports for large repositories (#10528, fixes #5251)
Fixed GitLab SSH webhook matching with custom ports (#10479, fixes #10450)
Fixed log copying on non-HTTPS instances (#8942)
Fixed unsafe HTML showing in the log viewer (#10346, fixes #10345)
Fixed deployment and container log timestamps to use the server timezone (#10165, fixes #8003)
Fixed in-progress form edits being wiped by live updates (#10321, fixes #6062, #6354, #9695)
Fixed skipped service database backup links (#10527, fixes #10526)
Fixed S3 backup storage validation before scheduling (#10389)
Fixed current team deletion errors (#10353, fixes #10351)
Fixed self-hosted server cleanup preserving server IPs (#10480, fixes #10471)
Fixed API server private key updates (#10416)
Fixed SSH usernames with dots (#9951)
Fixed stale page loading cloak after navigation (#10518, fixes #10506)
Fixed password field keyboard focus order (#10519, fixes #10486)
Fixed Railpack Buildx cache metadata persistence (#10511, fixes #10507)

New Services & Templates

Added Healthchecks as a one-click service (#10335)
Fixed Garage startup by using the correct RPC secret length (#10425)
Updated Chatwoot support for private API inbox webhooks (#10426)
Fixed Hermes Agent with Web UI image tag (#10445)
Updated Gitea runner to v1.0.7 (#10500)
Fixed ownCloud trusted-domain login issues (#10508, fixes #9944)

Improvements

Made exposed ports optional for portless apps (#9182, fixes #9170)
Added configurable application restart loop limits (#9231, fixes #8669)
Added standalone database health check settings (#10481, fixes #10444)
Added resource details with easier access to UUIDs (#9756)
Added destination resource listings (#9757)
Added environment variable search (#10421, fixes #10413)
Moved Sentinel into its own tab and improved metrics refresh (#9544)
Improved the configuration changes modal for redeployments (#10461, fixes #10367)
Added scrollable modals for smaller screens (#9647, fixes #9618)
Kept long-running terminal sessions connected (#10482)
Added mobile terminal controls (#10498)
Added custom Docker DNS option support (#10516)
Improved the GitHub App setup flow (#10524)
Updated the team invitation flow (#10510)

What's Changed

fix(livewire): stop broadcast handlers from wiping in-progress form by @adiologydev in #10321
fix(service): set correct image tag for hermes-agent-with-webui by @ShadowArcanist in #10445
fix(service): Chatwoot Support allowlisted private API inbox webhooks by @kunumigab in #10426
chore(deps): bump symfony/polyfill-intl-idn from 1.37.0 to 1.38.1 by @dependabot[bot] in #10442
chore(deps): bump ws from 8.19.0 to 8.20.1 in /docker/coolify-realtime by @dependabot[bot] in #10424
fix(team): prevent 500 when deleting the current team by @Firsak in #10353
fix(webhook): skip preview deployments for fork PRs by @ShadowArcanist in #10457
fix(webhook): match GitLab SSH repos with custom ports by @andrasbacsai in #10479
fix(cleanup): preserve self-hosted server IPs by @andrasbacsai in #10480
feat(database): configure standalone health checks by @andrasbacsai in #10481
fix(terminal): keep long-running sessions connected by @andrasbacsai in #10482
fix(backups): validate S3 storage before scheduling by @andrasbacsai in #10389
fix(deployments): filter generated compose service env vars by @andrasbacsai in #10186
feat(terminal): add mobile shell controls by @andrasbacsai in #10498
chore(deps): bump ws from 8.19.0 to 8.20.1 in /docker/coolify-realtime by @dependabot[bot] in #10456
fix(deployments): skip registry image tag for previews by @andrasbacsai in #10185
fix(git): ensure ssh credentials are propagated to submodule operations by @andrasbacsai in #8900
fix(api): validate token team context by @andrasbacsai in #10505
Improve proxy configuration validation by @andrasbacsai in #10503
Improve application branch validation by @andrasbacsai in #10502
Improve application image validation by @andrasbacsai in #10501
Improve deployment input handling by @andrasbacsai in #10504
chore(service): Update Gitea runner image to version 1.0.7 by @Twest2 in #10500
fix(service): Garage doesn't start due to RPC secret being wrong length by @derdaele in #10425
feat(service): add Healthchecks as a service by @viticodotdev in #10335
Update team invitation flow by @andrasbacsai in #10510
fix(deploy): persist Railpack Buildx metadata by @andrasbacsai in #10511
fix(forms): focus password fields before visibility toggles by @andrasbacsai in #10519
fix(navigation): remove stale cloak after Livewire navigation by @andrasbacsai in #10518
Improve GitHub App setup flow by @andrasbacsai in #10524
fix(service): owncloud login doesn't work by @abesmon in #10508
fix(ui): configuration changes modal doesn't go away after redeployment for git based compose apps by @ShadowArcanist in #10461
fix(dev): testing host downloads wrong arch docker binaries on linux by @ShadowArcanist in #10462
fix(logs): use server timezone in deployment and container logs by @ShadowArcanist in #10165
feat(ui): add resource details view by @ShadowArcanist in #9756
feat: support --dns custom Docker option by @tikimo in #10516
feat(application): make ports_exposes optional for portless apps by @ShadowArcanist in #9182
feat(applications): add configurable restart loop limit by @ShadowArcanist in #9231
feat(ui): move sentinel to new tab by @ShadowArcanist in #9544
feat(destination): show resources that are deployed on the destination by @ShadowArcanist in #9757
fix(modal): add missing scrolling behavior for better user experience… by @JanThiel in #9647
fix(server): allow dots in ssh username by @ShadowArcanist in #9951
fix(ui): models and slide-overs to use the same Close (x) icon button styles by @gianpaj in #9393
fix(logs): handle missing clipboard API in non-HTTPS contexts by @devrim-1283 in #8942
fix(scheduled-jobs): link skipped service database backups by @andrasbacsai in #10527
fix(git): force HTTP/1.1 for repository imports by @andrasbacsai in #10528
fix(logs): html tags is removed in log viewer by @alexzvn in #10346
feat(ui): add search functionality for environment variables by @rohittiwari-dev in #10421
fix(api): apply private_key_uuid in update_server by @yaroslavnovykov in #10416
fix(git): write deploy key to per-deployment path, not root's id_rsa by @ofaruksahintr in #10440
v4.1.2 by @andrasbacsai in #10452

New Contributors

@Firsak made their first contribution in #10353
@viticodotdev made their first contribution in #10335
@abesmon made their first contribution in #10508
@tikimo made their first contribution in #10516
@JanThiel made their first contribution in #9647
@gianpaj made their first contribution in #9393
@yaroslavnovykov made their first co...

Contributors

gianpaj, JanThiel, and 16 other contributors

Assets 2

v4.1.1

andrasbacsai released this 27 May 09:27

v4.1.1

5a27427