v0.48.0

0.48.0 (2026-11-12)

Features

• lease sizing, Telegram sign-in and four small fixes (2026-11-11 issues) (#848) (9972dde)
• notifications: SMS Factor integration (#846) (1b68d2a)

Bug Fixes

• deps: update github.com/dop251/goja digest to f493a2b (#842) (dba208b)
• deps: update go dependencies (non-major) (#844) (621d492)
• deps: update go dependencies (non-major) (#847) (4bb06f7)
• security: bind JS env and plugin configs, strict re-wrap keys, replay masking of remaining secret inputs, rewrap list cap, secret headers on redirects (#851) (32fd560)
• security: bind sealed secrets to their target, verify peer re-wraps, drop deleted regions' keys, TLS-only agent server URL (#840) (4b70e46)
• security: keep shown-once secrets out of dash0 session replay (#839) (9bb8e8b)
• security: require a verified email for GitLab sign-in and stop linking existing accounts by email (#850) (1a0cea9)

Lines of code

1,057,889 lines of code in 6,319 files (counted with scc 4.1.0, generated and minified files excluded), of which 773,056 outside docs and data (Markdown, JSON, YAML, License, Plain Text, CSV, SVG, XML, TOML, gitignore).

Language	Files	Code	Comments	Blanks
Go	3,307	577,240	126,601	146,470
Markdown	1,444	223,924	0	51,522
TypeScript	1,063	183,652	29,705	20,462
JSON	238	38,015	0	9
YAML	31	21,715	791	1,091
SQL	134	5,738	5,179	2,288
HTML	41	1,903	67	111
CSS	5	1,356	293	287
License	2	1,097	0	238
JavaScript	18	983	290	103
Other (11 languages)	36	2,266	385	462