v1.6.0

What's Changed

• feat(projects): ship bind-mounted files on a remote deploy by @malickyeu in #80
• docs: design note for RBAC roles & per-host scoping by @malickyeu in #81
• feat(projects): close out the remote-projects follow-ups by @malickyeu in #82
• feat(security): named RBAC roles (phase 1) by @malickyeu in #83
• fix(security): gate raw inspect; add systemic RBAC coverage by @malickyeu in #84
• feat(security): role management UI by @malickyeu in #85
• feat(ui): tab Settings and MCP Admin; move SMTP to Settings (admin-only) by @malickyeu in #86
• feat(ops): backup and restore the whole installation by @malickyeu in #88
• fix(ui): give EmptyState a bounded outline instead of floating text by @malickyeu in #87
• feat(alerts): per-rule e-mail recipients and an account address by @malickyeu in #89
• feat(profile): a profile page, and make 2FA re-pairing safe by @malickyeu in #90
• feat(ldap): map LDAP groups to named roles (completes RBAC phase 1) by @malickyeu in #91
• feat(ldap): fallback role for mappings that no longer resolve by @malickyeu in #92
• feat(security): per-host RBAC scoping (phase 2) by @malickyeu in #93
• feat(security): filter aggregate reads by host scope (phase 3) by @malickyeu in #94
• feat(projects): move a project when you change its host, + UI polish by @malickyeu in #95
• fix: act on the Copilot review (role scope widening, host id normalisation) by @malickyeu in #96
• [add] docker version matrix — Engine 24-28 verified by @malickyeu in #97
• [add] edit & redeploy CLI-discovered stacks by @malickyeu in #98
• [fix] deploy rebuilds a project's own image by @malickyeu in #99
• [fix] act on the stack-editor review by @malickyeu in #100
• [docs] align the docs with what shipped, record the testing lessons by @malickyeu in #104
• [fix] stack redeploy rebuilds an edited build context by @malickyeu in #107
• build(deps): bump the go-minor-patch group with 3 updates by @dependabot[bot] in #101
• build(deps): bump the actions group with 2 updates by @dependabot[bot] in #105
• build(deps): bump the npm-minor-patch group in /web with 3 updates by @dependabot[bot] in #102
• build(deps-dev): bump typescript from 6.0.3 to 7.0.2 in /web by @dependabot[bot] in #103
• [add] removing an MCP OAuth client revokes its access at once by @malickyeu in #108
• [add] threshold alerts are conditions with a lifetime by @malickyeu in #109
• [add] alert feed paging, filters, ack attribution and delivery records by @malickyeu in #110
• [docs] split NEXT.md into roadmap, gotchas and dev environment by @malickyeu in #111
• [add] network throughput and totals on the container detail by @malickyeu in #112
• [add] MCP tools for the alerting engine by @malickyeu in #113
• [add] MCP diagnostics without exec by @malickyeu in #114
• [add] MCP stack lifecycle, image scanning and alert delivery by @malickyeu in #115
• [add] preview_deploy for MCP by @malickyeu in #116
• [add] MCP control rate limit + remote-host projects by @malickyeu in #117
• [fix] preview_deploy must check the project's host by @malickyeu in #118
• [fix] scope single-alert ack to the alert's host by @malickyeu in #119
• [add] sweep every record-scoped MCP tool for its host check by @malickyeu in #120
• [add] real page titles in the browser tab by @malickyeu in #121
• [docs] align the manual with the shipped state by @malickyeu in #122
• [docs] act on the Copilot review by @malickyeu in #123
• [docs] record the adversarial review and what it is not by @malickyeu in #124
• [fix] rate-limit and audit the 2FA step by @malickyeu in #125
• [fix] authorize record-addressed routes against the record's host by @malickyeu in #126
• [fix] refuse absolute symlink targets when restoring a backup by @malickyeu in #127
• [fix] drop a dead host client instead of caching it forever by @malickyeu in #128
• [fix] close the three medium findings from the review by @malickyeu in #129
• [add] a DOM test environment, and use it on the untested wiring by @malickyeu in #130
• [chore] ignore the .screens scratch folder by @malickyeu in #131
• [fix] spend a TOTP code once, and settle setup in the insert by @malickyeu in #132
• [fix] cap decompression, spool uploads, flatten mail headers by @malickyeu in #133
• [fix] end existing sessions when a password changes by @malickyeu in #134
• [fix] stop losing stream output, and close four slow leaks by @malickyeu in #135
• [fix] require the password to pair a new authenticator by @malickyeu in #136
• [fix] keep a settings save message on the card that saved by @malickyeu in #137
• [fix] spend an MFA challenge on the first attempt by @malickyeu in #138
• [fix] test the two resource fixes, and delete the one that was dead by @malickyeu in #139
• [fix] skip symlinks in a backup and say which ones by @malickyeu in #140
• [add] active sessions with per-session revocation by @malickyeu in #141
• [fix] close the review comments from the last few PRs by @malickyeu in #142
• [add] give the session list room and name the devices by @malickyeu in #143
• [fix] don't kill the socket when a subscription is cancelled by @malickyeu in #145
• [add] several authenticators per account by @malickyeu in #144
• [add] passkeys as a second factor by @malickyeu in #146
• [fix] bound how long a request body may take by @malickyeu in #147
• [add] sign in with a passkey alone by @malickyeu in #148
• [docs] record what the 1.6.0 auth work got wrong by @malickyeu in #149
• [fix] admin 2FA column called a passkey-protected account off by @malickyeu in #150
• [fix] stop leaking the Go package prefix into the UI by @malickyeu in #151
• [add] dockercmd --reset-password by @malickyeu in #152
• [fix] the events feed said Live over a dead socket by @malickyeu in #153
• [add] kill a container, and build args in the build dialog by @malickyeu in #154
• [docs] correct claims that described something other than the app by @malickyeu in #155
• [docs] generate the audit action reference, and keep it generated by @malickyeu in #156
• [docs] give the profile its own page, and name every limit by @malickyeu in #157
• build(deps): bump docker/login-action from 4.5.2 to 4.6.0 in the actions group by @dependabot[bot] in #159
• build(deps): bump the go-minor-patch group with 2 updates by @dependabot[bot] in #158
• build(deps): bump the npm-minor-patch group in /web with 8 updates by @dependabot[bot] in #160
• [fix] readme count guard checked 1 number of 3 by @malickyeu in #161
• [fix] CI never checked the committed web/dist by @malickyeu in #162
• [fix] history chart axis broke past 100% CPU by @malickyeu in #163
• [docs] re-shoot screenshots against a loaded daemon by @malickyeu in #164
• [docs] close the changelog for 1.6.0 by @malickyeu in #165

Full Changelog: v1.5.1...v1.6.0