v1.13.3

What's Changed

• fix: master key resets through the panel now automatically propogate by @SkyMulley in #337
• fix: fixed log rotation not using the wrapper by @Sanic5238 in #336

New Contributors

• @Sanic5238 made their first contribution in #336

Full Changelog: v1.13.2...v1.13.3

v1.13.2

Full Changelog: v1.13.1...v1.13.2

v1.13.1

Full Changelog: v1.13.0...v1.13.1

v1.13.0

What's Changed

• Only set the container block IO weight when the host supports io.weight by @robertdrakedennis in #324
• empty folders in uploaded artifacts should be preserved by @robertdrakedennis in #325
• fix: Directories created via panel are owned by root:root by @SkyMulley in #328

New Contributors

• @robertdrakedennis made their first contribution in #324
• @SkyMulley made their first contribution in #328

Full Changelog: v1.12.3...v1.13.0

v1.12.3

Full Changelog: v1.12.2...v1.12.3

v1.12.2

Fixed

• Fixes a bug where fs.Chmod would change the symlink target possibly allowing a malicious user to modify files outside their home directory.
• Improved error handling when downloading files to not log as a 500-level error, preferring a 400-level response.
• Fixes JWT verification logic to confirm that the token has the required scopes for the target subsystem.

v1.12.1

Added

• Add mount for /etc/machine-id for servers for Hytale (#292)

v1.12.0

Fixed

• CVE-2025-68954
• CVE-2025-69199
• CVE-2026-21696
• Fixes folders not being sorted before files when returning list of directory contents (#5078)
• User-defined labels not being passed to environment (#191)
• Fixes handling of termination signals for containers (#192)
• Fixes logic to use base2 (1024, *bibyte) when calculating memory limits (#190)
• Fixes hard-links being counted multiple times when calculating disk usage (#181)

Added

• Support relative file paths for the Wings config (#180)
• Support mounting generated /etc/passwd files to containers (#197)

v1.11.13

Fixed

• Auto-configure not working (#5087)
• Individual files unable to be decompressed (#5034)

SHA256 Checksum

aca5fa45ddf1c10f092c16dd758b920d8a3fa9f91c37aacc62745e72958bf71a  wings_linux_amd64
a3d71e8c67e261fdd287f73dcab98d2a55dbba9ce001794e0006e4ed88fafe6a  wings_linux_arm64

v1.11.12

Fixed

• Arbitrary File Write/Read (GHSA-gqmf-jqgv-v8fw)
• Server-side Request Forgery (SSRF) during remote file pull (GHSA-qq22-jj8x-4wwv)
• Invalid Content-Type being used with the wings diagnostics command (#186)

SHA256 Checksum

4bcbd3a71bed9afed37d132980ac553e4bd39a38b5ae53c477d02933746de856  wings_linux_amd64
af5582e05a34228e9ff423ee982fedddf96e374f243fd2bfa0fe42083f821bdf  wings_linux_arm64