Pi.Alert v2026-08-14

New:

• Add "Copy to Clipboard" buttons to MAC and IP on the details page

Fixed:

• Bug where the download page for UI Settings operated outside the user's session (thx to @Soham-Bhalerao)
• IPs should now be displayed again on the System Info Page, if they were not previously
• Security Advisory (GHSA-66mg-wpcq-2phq) (thx to @tunelko)
• Security Advisory (GHSA-f58p-mp38-66qv) (thx @Soham-Bhalerao)
• Security Advisory (GHSA-ff6r-j7j6-gfx8) (thx to @tunelko)
• Security Advisory (GHSA-vp5h-q268-p65m) (thx to @tunelko)
• Storage usage and USB devices were empty (#615)
• The masked entries were saved if no configuration backup existed previously

Updated:

• Subnet masks are also displayed in decimal dot notation (System Info Page)
• Update directory path in PIALERTCLI documentation (thx to @lastsamurai26)
• Add support SMTP over SSL (#612)
• Documentation (Including, among others, #614)
• Home Assistant mqtt Sensor tweak
• Internet-Speetest-Tab improved
• Minor and major tweaks an improvements

Changed:

• The detailed Nmap scan is now running in the background via a queue. You will receive a notification once it is complete.
• The Telegram notification no longer uses the shoutrrr binary; instead, it uses a direct HTTPS request. The binary is still in the directory for the Telegram setup. TELEGRAM_BOT_TOKEN_URL is deprecated. Use TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_IDS instead.
• A symbolic link to the Pi.Alert logs is no longer necessary
• ‼️ BREAKING CHANGES ‼️ As part of the hardening process for Pi.Alert, the REPORT_FROM value must be checked before updating and adjusted if necessary. Otherwise, the new secured version will reject the configuration, no scans will be performed, and an "Invalid configuration" message will be displayed. Previously, REPORT_FROM could contain Python expressions such as: REPORT_FROM = 'Pi.Alert <' + SMTP_USER + '>'. This is no longer permitted. Before updating, replace the value with a static string, for example: REPORT_FROM = 'your_sender_mail@example.com' or REPORT_FROM = 'Pi.Alert your_sender_mail@example.com'. Only fixed text values are allowed.

Removed:

• Support for installation in the user directory (the old installation and update scripts have been removed, as has the old cron file.)
• The configuration entry SHOUTRRR_BINARY is deprecated and will be removed from the configuration the first time you save via the web editor.

Note:

• A lot of code has been changed under the hood. I've tested it to the best of my knowledge and ability, but if possible, please make a backup before updating so you can restore it if needed.