KRATE 0.6.0 alpha.20

KRATE 0.6.0

Tag	v0.6.0-alpha.20
Channel	pre-release (beta)

Packages

Platform	File	SHA256
debian13-amd64	krate_0.6.0.alpha.20-trixie_amd64.deb	efa9ad81574c394e550a37047d449ee12ad44edfd2f57f2f2a784095e82bcf8e

Install

zen pull --check
zen pull

The update channel (stable or pre-release) is configured with update_channel in
/etc/krate/environment.d/zenfw.conf (overrides in zenfw.conf.local).
zen pull resolves the matching release automatically when conditions are met.

Changes

console (e670e62)

• fix(workspace): terminate env files with newline and add Python 3.14 (e670e62) — @tomcdj71
• fix(dependencies): restore setuptools package specification in pip section (1270f73) — @tomcdj71
• fix(dependency): allow mutating grouped APT phase list during install (fe8936d) — @tomcdj71
• fix(setup): ensure platform PHP APT group runs on cloud Debian images (e60ef75) — @tomcdj71
• fix(dependency): allow long timeout for apt-get upgrade (dd8afc6) — @tomcdj71
• fix(pull): pass release tag into dashboard update helper (d1e0c46) — @tomcdj71
• fix(dashboard): rebuild Encore when assets or templates change without lock bump (7122dbb) — @tomcdj71
• perf(dashboard): fast-path updates with scoped chown and build stamp (be2ee9d) — @tomcdj71
• feat(dashboard): stream composer/pnpm output and log each update step (bfc2e47) — @tomcdj71
• fix(dashboard): clear prod cache with correct APP_ENV after update (9e3c793) — @tomcdj71
• fix(i18n): add missing dependency keys and clarify wait_ping_timeout (ab37e8f) — @tomcdj71
• fix(zenfw): skip apt install when app manifest declares no packages (e9d6c3c) — @tomcdj71
• fix(zenfw): install setuptools in Python venvs via platform pip deps (25ab083) — @tomcdj71
• fix(zen): normalize hyphen pre-release versions in pull --check (fbe34cb) — @tomcdj71
• fix(dashboard): wipe Symfony prod/dev cache before dashboard::update (6c81c2a) — @tomcdj71
• fix(zen): match installed krate package by tag and codename suffix (bcb8656) — @tomcdj71
• fix(zen): delegate vault commands to zenfw SQLite vault API (17ce447) — @tomcdj71
• fix(zen): treat dotted pre-release .deb names as up to date (af1e2ff) — @tomcdj71
• fix(zenfw): declare switch_app_env_to_dev before AppEnvSwitchGuard (228b2a9) — @tomcdj71
• feat(zenfw): reload PHP-FPM after dashboard update (bec2377) — @tomcdj71
• fix(zenfw): preserve APP_ENV across dashboard update (38bc393) — @tomcdj71
• feat(zen): provision HarmonyUI user after zen user add (b26cae3) — @tomcdj71
• fix(systemd): set krate-app-statusd working directory for krate user (eb3150e) — @tomcdj71
• fix(runtime): let krate user refresh versions and run background timers (cce3cbb) — @tomcdj71
• feat(zen): run dashboard::update after zen pull installs a release (217bb01) — @tomcdj71
• feat(version): report runtime app versions via manifest probe cascade (98f863b) — @tomcdj71
• fix(firewall): allow ICMP/ICMPv6 in default-deny input chain. (8a71630) — @tomcdj71
• fix(caddy): add www-data supplementary group for php-fpm socket access. (3228de2) — @tomcdj71
• fix(dashboard): defer var/ www-data handoff until setup finishes. (591e69e) — @tomcdj71
• fix(dashboard): keep var/ writable during HarmonyUI install. (04a29a2) — @tomcdj71
• fix(dashboard): composer install from lock with update fallback on drift. (06ffdab) — @tomcdj71
• feat(crypto): add KRATEH2 handler encryption with slim runtime bootstrap. (53145f6) — @tomcdj71
• fix(dashboard): resolve node PATH and preserve var/ ownership on build (5c791d3) — @tomcdj71
• feat(lifecycle): sync manifest-declared git repos on add and update (981e785) — @tomcdj71
• fix(pull): resolve GitHub release assets when tilde is stored as dot (13055d0) — @tomcdj71
• fix(firewall): do not open default_port/ssl_port in host firewall (bb6690c) — @tomcdj71
• feat(firewall): open autogen ports in zen lifecycle, support port ranges (e026f39) — @tomcdj71
• feat(zen): add firewall CLI command for status and apply (001dbce) — @tomcdj71
• feat(firewall): add setup phase translation keys for firewall init and port open (d61d967) — @tomcdj71
• refactor(firewall): use instance IDs instead of app names for port declarations (b774601) — @tomcdj71
• feat(firewall): add nftables firewall module with per-app port declarations (b20b872) — @tomcdj71
• fix(dashboard): restore www-data ownership on var/ after update (7607d3d) — @tomcdj71
• fix(worker): clear prod cache before messenger worker starts (66d83c5) — @tomcdj71
• fix(worker): set APP_ENV=prod and schema update on dashboard update (e061c14) — @tomcdj71
• fix(dashboard): dump JS translations before HarmonyUI webpack build (53a3505) — @tomcdj71

setup (bea2ac7)

• fix(setup): persist zenfw.command.timeout during install (bea2ac7) — @tomcdj71
• fix(install): stop pinning APP_ENV in the PHP-FPM pool (29d0e76) — @tomcdj71
• fix(setup): persist krate.conf branch=beta to zenfw.conf.local (1b412e3) — @tomcdj71
• fix(setup): declare zenfw_conf_finalize_local_permissions after permission_set (1fcf013) — @tomcdj71
• fix(setup): normalize krate runtime permissions for timers and vault (987dff3) — @tomcdj71
• fix(php): restart php instead reload (52b8937) — @tomcdj71
• fix(setup): grant Caddy access to php-fpm socket via listen.acl_users. (1514f67) — @tomcdj71
• fix(setup): pre-declare SSH and web ports before nftables default-deny. (97c0616) — @tomcdj71
• fix(setup): open firewall port 443/tcp for Caddy after nftables init. (3ead361) — @tomcdj71
• fix(setup): ensure var/ is writable by krate before Harmony migrations. (e567056) — @tomcdj71
• feat(setup): wire nftables firewall into SSH/FTP setup phase (ada4ae7) — @tomcdj71
• fix(setup): expose APP_ENV=prod to php-fpm for HarmonyUI (83bc984) — @tomcdj71
• feat(setup): enable HarmonyUI messenger worker after install (1d29000) — @tomcdj71
• docs: document update_channel setup flow in README (9c6ef96) — @tomcdj71
• feat(setup): persist update_channel from krate.conf branch to zenfw.conf.local (2ebf9a7) — @tomcdj71
• chore: reinit console repo (049392c) — @tomcdj71
• Initial branch (a74d37d) — @tomcdj71

web (HarmonyUI) (f2bf9f0)

• fix(ui): show Emby premiere key when ui_options and CLI flags overlap (f2bf9f0) — @tomcdj71
• fix(migrations): skip ALTER when schema:update already applied columns (280824b) — @tomcdj71
• fix(apps): rescan update flags after manage jobs and sync card dots (346a8e8) — @tomcdj71
• fix(apps): route app updates through the same path as remove (8be953d) — @tomcdj71
• fix(apps): dual-launch zen jobs via messenger and detached CLI (b74afbe) — @tomcdj71
• fix(apps): queue software jobs via detached worker and zen_job table (8f230b7) — @tomcdj71
• fix(apps): sync update notifications and refine update UI (3f907c5) — @tomcdj71
• fix(web): restore clickListenerAttached guard in AppUpdateAction (41e827f) — @tomcdj71
• feat(apps): replace update Yes label with actionable update controls (4f71fd9) — @tomcdj71
• feat(web): expose Emby Premiere and Plex Pass keys in install wizard (ea80ad1) — @tomcdj71
• chore(deps): lock league/commonmark dependencies (0977884) — @tomcdj71
• feat(updater): detect beta update channel from zenfw config (27d99e5) — @tomcdj71
• fix(settings): polish general settings save UX (4abb71b) — @tomcdj71
• fix(updater): place TESTING.md checklist before changelog on update page (f9b09fc) — @tomcdj71
• fix(updater): show TESTING.md checklist on system update page (d64a80c) — @tomcdj71
• feat(apps): add remove action to dashboard app options menu (6ea8740) — @tomcdj71
• fix(updater): normalize hyphen pre-release versions in comparison (f1ccd47) — @tomcdj71
• fix(updater): remove redundant up-to-date sentence on settings page (8d1da59) — @tomcdj71
• fix(dashboard): show up-to-date check icon beside footer label (3da151b) — @tomcdj71
• fix(updater): run dashboard self-update in detached CLI process (0c3f9c1) — @tomcdj71
• fix(updater): reconcile installed version when zen reports false positive (40321ef) — @tomcdj71
• style(changelogs): increase modal width for system update changelog (f11d30a) — @tomcdj71
• fix(vault): use named API_ENDPOINTS import for unlock request (c803a4f) — @tomcdj71
• fix(vault): load vault page script from app bundle instead of profile_vault (ac7f851) — @tomcdj71
• fix(updater): format last check time in PHP for notification footer (fe1e4c0) — @tomcdj71
• fix(dashboard): format last update check time with format_datetime (e5a92ea) — @tomcdj71
• fix(vault): register profile vault route via controller attribute (478b59a) — @tomcdj71
• i18n(vault): add EN/FR strings for password vault page (812e328) — @tomcdj71
• feat(vault): add profile vault UI with unlock toggle and copy actions (77f9e4b) — @tomcdj71
• feat(vault): add profile page route and password-gated reveal API (81a20d4) — @tomcdj71
• feat(vault): add service to list and reveal user-scoped credentials (445f9e6) — @tomcdj71
• i18n(widgets): add EN/FR strings for dashboard widget display preference (6299c43) — @tomcdj71
• feat(widgets): add profile toggle for dashboard widget row-2 display (3a42dc8) — @tomcdj71
• feat(widgets): show or collapse dashboard widget row 2 based on user preference (d7e666e) — @tomcdj71
• feat(widgets): persist dashboard widget row-2 display preference from profile (26b5d04) — @tomcdj71
• feat(widgets): add dashboard widget row-2 collapsible preference field (e48a0b8) — @tomcdj71
• feat(dashboard): show green check on notification bell when KRATE is up to date (474296d) — @tomcdj71
• feat(dashboard): show last KRATE update check time in the UI (4181091) — @tomcdj71
• feat(settings): show installed changelog with modal for pending update (7cb622f) — @tomcdj71
• feat(updater): expose installed and available release changelogs (7afed97) — @tomcdj71
• feat(settings): display rendered markdown on system update page (4b942c9) — @tomcdj71
• feat(updater): render release notes markdown to HTML server-side (814a710) — @tomcdj71
• fix(updater): show full package version for pre-release updates (b412152) — @tomcdj71
• i18n(updater): add EN/FR translations for system update UI (55794d8) — @tomcdj71
• feat(settings): add admin system update settings page (47383fc) — @tomcdj71

official apps (68eee6b)

• fix(rtorrent): use systemd Type=simple for tmux session (e813e17) — @tomcdj71
• fix(tautulli): harden uv venv provisioning on Python 3.13 (511cff2) — @tomcdj71
• fix(decluttarr): harden uv venv provisioning on Python 3.13 (f3fdcce) — @tomcdj71
• fix(jellyfin): fetch playback API key via GET after POST (246c13a) — @tomcdj71
• fix(emby): defer API readiness check to _secure (ae003f1) — @tomcdj71
• fix(deluge): use distro python3-rencode on Python 3.13 (2bc0278) — @tomcdj71
• fix(dispatcharr): write Postgres .env keys with explicit newlines (fdf380d) — @tomcdj71
• fix(quasarr): preserve subpath patch when applying route patches (6b26cae) — @tomcdj71
• fix(apps): repair byparr, decluttarr and deluge beta install flows (9ec3e72) — @tomcdj71
• fix(requestrr): avoid tmp RETURN trap under set -u during _secure (1ad3a7b) — @tomcdj71
• fix(jellyfin): read playback API key from Auth/Keys response (5b48652) — @tomcdj71
• fix(whisparr): drop referenceassemblies-pcl from apt dependencies (962e372) — @tomcdj71
• fix(rtorrent): extend systemd restart wait for forking tmux unit (1377127) — @tomcdj71
• fix(emby): wait for API readiness using url_base after install (cb8927e) — @tomcdj71
• fix(quasarr): regenerate subpath routes patch for v4.6.0 (d0188ff) — @tomcdj71
• fix(byparr): pin Python 3.13 and extend service restart timeout (2fea2ee) — @tomcdj71
• fix(deluge): pin pyOpenSSL below 24 for Deluge 2.2.0 (9551205) — @tomcdj71
• fix(dispatcharr): write SECRET_KEY to .env before Django migrate (bbd8e22) — @tomcdj71
• chore(requestrr): clarify .NET extract comment in manifest (d86482b) — @tomcdj71
• feat(apps): declare runtime version probes in manifests (f878ff1) — @tomcdj71
• feat(publish): encrypt official handlers as KRATEH2 containers. (a351b96) — @tomcdj71
• feat(rutorrent): declare apps-extensions sync via manifest sync_repos (110a29e) — @tomcdj71
• ci: fix repo sync (4be3c32) — @tomcdj71
• chore: add .krate/ directory to .gitignore (472b50d) — @tomcdj71
• docs: update README.md format (9ee7fd6) — @tomcdj71
• fix: add missing emby logo.png (a0c6e7e) — @tomcdj71
• feat: add wizarr support (243f156) — @tomcdj71
• feat: add seerr support (02b299d) — @tomcdj71
• feat: add suggestarr support (1893df8) — @tomcdj71
• feat: add trailarr support (0ca8120) — @tomcdj71
• feat: add quasarr support (c408da3) — @tomcdj71
• feat: add dispatcharr support (a3ac69f) — @tomcdj71
• feat: add decluttarr support (8756028) — @tomcdj71
• feat: add tautulli support (912667a) — @tomcdj71
• feat: add requestrr support (ac5be81) — @tomcdj71
• feat: add jackett support (f93955e) — @tomcdj71
• feat: add kapowarr support (129e924) — @tomcdj71
• feat: add prowlarr support (1489285) — @tomcdj71
• feat: add lidarr support (7af2f42) — @tomcdj71
• feat: add flaresolverr support (c44d640) — @tomcdj71
• feat: add filebrowser support (7cfc5ff) — @tomcdj71
• feat: add episeerr support (3886520) — @tomcdj71

community apps (21ceee3)

• chore: init repo (21ceee3) — @tomcdj71

Contributors

• @tomcdj71