v3.0.1

Note

This release fixes agent-mode startup and performance problems, tightens certificate and update verification, and corrects several Docker, Swarm, and backup behaviors. Agents now skip manager-only work, and updates are always verified.

Agent mode

• Skip manager-only scheduled jobs in agent mode (#4779, @gongloo)
• Skip manager-only RBAC and OIDC backfills on agent startup (#4776, @gongloo)
• Avoid redundant SQLite prepared statement cache and read pool on agent (#4778, @gongloo)
• Strip CR and LF from agent tunnel values in logs (#4771, @kmendell)

Security and updates

• Reject legacy edge SPIFFE client certificates (#4795, @kmendell)
• Remove the newSelfUpdater preview and always verify updates (#4773, @kmendell)
• Bump kit.getarcane.app/acfs to v0.10.3 (#4796, @kmendell)

Docker and containers

• Time out Docker disk usage requests (#4774, @kmendell)
• Match digest-strategy containers to tag update records (#4772, @kmendell)
• Pass enabled features into Docker backend builds (#4793, @kmendell)

Stacks and configuration

• Keep stack .env across git syncs and editor saves (#4783, @NullishUsername)
• Skip global env file writes when unchanged or read-only (#4794, @kmendell)

Backups

• Copy Rustic CA bundle into the container before start (#4797, @kmendell)

Build

• Exclude the embedded Scalar bundle when building without the frontend (#4777, @gongloo)