v0.5.0

What's Changed

• fix: protect tunneled peers and clarify pending updates by @Lostepic in #16

Full Changelog: v0.4.1...v0.5.0

v0.4.1

Full Changelog: v0.4.0...v0.4.1

v0.4.0

What's Changed

• feat: add stable and development update tracking by @Lostepic in #10
• Add multi-instance operations and guided operator UI by @Lostepic in #11
• Address multi-perspective review findings by @floreabogdan in #12
• Follow-ups: confirmations, avatar, context threading by @floreabogdan in #13
• ci: bump actions/setup-go from 6 to 7 by @dependabot[bot] in #14
• deps: bump modernc.org/sqlite from 1.53.0 to 1.54.0 by @dependabot[bot] in #15

New Contributors

• @floreabogdan made their first contribution in #12

Full Changelog: v0.3.8...v0.4.0

v0.3.8

Added

• Guarded kernel installation for selected BGP routes. Per-family opt-in under Settings. Existing routers auto-enabled on upgrade; fresh installs default off. Birdy-originated static routes always installed when any kernel export is active. Never a blanket export all.
• Per-session import community tagging. Tag accepted routes from a specific peer with named or literal communities, independently of the automatic relationship tag.
• Native HTTPS. --tls-cert and --tls-key flags, TLS 1.2 minimum.
• Dashboard model coverage. Shows configured vs unmanaged live sessions.

Changed

• Full-table polling publishes session state before the expensive route count.
• Inline scripts moved to static assets; CSP tightened to script-src 'self'.
• SQLite connection pool bounded; backup downloads stream instead of buffering.
• Risky applies (lint dangers, sessions at risk) require explicit acknowledgement.

Fixed

• Kernel filters protect control-plane addresses (peer IPs, router ID, preferred source) from being overridden by imported BGP prefixes. Default route (0.0.0.0/0, ::/0) is exempt.

Security

• Kernel sync fails closed on fresh installs.
• HTTP timeouts, 32 KiB header limit, cross-origin write rejection, Permissions-Policy.
• Password changes atomically revoke all old sessions.
• Snapshots/restores written with mode 0600; upload size bounded before parsing.
• Login limiter memory bounded at 4096 entries.

Upgrade note

Existing routers have both kernel BGP export families auto-enabled during migration so behaviour is preserved. Review the checkboxes under Settings → General after upgrading.

Contributors: Aaran (AS204208 / AS47272)

What's Changed

• Harden routing management and add guarded kernel exports by @Lostepic in #9

New Contributors

• @Lostepic made their first contribution in #9

Full Changelog: v0.3.7...v0.3.8

v0.3.7

Added

• Per-peer interface for link-local BGP sessions. BIRD requires an interface
  directive when the neighbor address is link-local (fe80::), because the address
  is ambiguous without knowing which link it sits on. The peer form now has an
  Interface field: set it to the name of the network interface (e.g. eth0) and
  birdy renders interface "eth0"; inside the protocol block. Validation enforces
  the field when the neighbor is link-local, and lint surfaces a danger finding for
  the same condition. Optional for all other sessions.

Full Changelog: v0.3.6...v0.3.7

v0.3.6

Full Changelog: v0.3.5...v0.3.6

v0.3.5

Full Changelog: v0.3.4...v0.3.5

v0.3.4

Full Changelog: v0.3.3...v0.3.4

v0.3.3

Full Changelog: v0.3.2...v0.3.3

v0.3.2

What's Changed

• ci: bump docker/metadata-action from 5 to 6 by @dependabot[bot] in #7
• ci: bump docker/login-action from 3 to 4 by @dependabot[bot] in #8

Full Changelog: v0.3.1...v0.3.2