Repository navigation
·
6 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
TokenTimer Core 0.18.2 is a patch release that improves certificate lifecycle safety, guided recovery and operator monitoring.
What's Changed
Fixed
- Certificate management — retirement preserves history and terminal key cleanup; discovered certificates renew without duplicate DNS names. After observing a replacement for a retired certificate, use Re-add management to restart renewal management explicitly.
- Vault setup — register consumers, recover paused rollouts and follow progress for the selected group and current version. File-only delivery confirms installation separately from live TLS verification.
- Access and dates — workspace managers can complete AD CS setup and manage renewal profiles; initial workspace-member loading and expiry dates across timezones and daylight-saving changes are corrected.
- Linux agents — improve scoped service-reload installation and Debian trust-anchor removal. Service reload requires polkit 0.106 or later with JavaScript-rule support; use a compatible host or file-only delivery.
- GitHub and GitLab setup — enabling a connection requires a successful scan for its current credentials and scope, including a successful scan with no results.
Added
- Durable auto-sync monitoring — metrics survive restarts and cleanup, with optional creation, failure and stale-activity alerts. Apply migrations 79–80, establish a Prometheus baseline and scrape one stable API target per database. Historical activity is not backfilled; do not sum replica copies.
Security
- Dashboard images — include patched curl packages for CVE-2026-92392. Upgrade and redeploy the dashboard image; rebuild custom images.
Full changelog: 0.18.1...0.18.2