Skip to content

v2.6.2

Latest
Latest

Choose a tag to compare

View all tags
@pycook pycook released this 25 Jul 10:14
· 2 commits to master since this release
v2.6.2
e398702

Release v2.6.2 (2026-07-25)

🎉 What's New

✨ Features & Enhancements

QR Codes & Mobile Access

  • CI QR Codes - Generate a QR code from a CI detail page, then download it or copy the mobile detail URL
  • Batch QR Export - Generate, download, and print QR codes for selected CIs, or embed them directly in Excel exports (#781)
  • Mobile CI Details - Added a mobile-optimized CI detail page with attribute aliases, parent and child relations, and recent change history
  • Responsive Login - Improved the login experience on mobile devices

UI & Editing Experience

  • Monaco Editor - Replaced CodeMirror with Monaco for computed attributes, preset-value scripts, auto-discovery plugins, and webhook bodies
  • Editor Preferences - Added light and dark themes, Vim keybindings, font-size controls, word wrapping, document formatting, and fullscreen editing

Agent, Auto Discovery & IPAM

  • Independent Rule Synchronization - Auto-discovery and IPAM rules now use separate update cursors, preventing one rule type from hiding updates to the other
  • Agent-Compatible IPAM Rules - Updated subnet scan rules to match the current agent format and propagate rule changes reliably
  • Subnet Scan Results - Added validated scan-result ingestion and history persistence for agent-executed IPAM scans
  • Discovery Instance Lookup - Added an API for retrieving historical discovery instances by auto-discovery type

🔒 Security Hardening

  • Restricted Script Execution - Custom preset-value and auto-discovery scripts now run through AST validation with a restricted set of Python built-ins, reducing remote code execution risk (#750)
  • Frontend XSS Protection - Removed or sanitized unsafe HTML rendering in notices, metadata, text highlighting, and relation graph nodes (#758, #760, #762)
  • Secret Handling - Vault initialization now masks the root token by default, and the standalone Vault client reads its token from the VAULT_TOKEN environment variable (#754, #756)

🐛 Bug Fixes

Backend Stability & Authentication

  • CI Triggers - Disabled triggers are no longer executed, and trigger candidates are limited to active CIs of the configured CI type
  • OIDC Login - Reused the original redirect URI during token exchange to prevent 401 errors behind reverse proxies
  • Login Audit Logs - Truncated oversized User-Agent values to prevent database errors, including logins from the WeChat in-app browser
  • Mobile Relations - Improved error isolation and logging when loading parent or child relations on the mobile CI detail API

Frontend Fixes

  • Model Import - Included session credentials when uploading CI type templates, fixing 401 errors
  • Field Permissions - Filtered empty attribute groups to prevent errors when configuring field permissions (#773)
  • Text Attributes - Fixed long text attribute layout on CI detail pages (#783)
  • QR and Mobile UI - Fixed relation navigation, mobile detail presentation, and QR export styling

🙏 Contributors

Special thanks to all contributors who made this release possible:

  • @wjh-1024 - QR code export, mobile CI details, responsive login, and related fixes
  • @LHRUN - Monaco editor, authentication fixes, UI improvements, and release stabilization
  • @lhy8888 - Script execution, frontend rendering, and secret-handling security hardening
  • @pycook - Agent compatibility, IPAM scan integration, trigger fixes, and release preparation

📦 Installation

# Fresh Docker installation
git clone --branch v2.6.2 https://github.com/veops/cmdb.git
cd cmdb
docker compose up -d

# Upgrade from an older version
cd cmdb
git fetch --tags
git checkout v2.6.2
docker compose pull
docker compose down && docker compose up -d

See the full changelog for all changes since v2.6.1.

Contributors

pycook, LHRUN, and 2 other contributors
Assets 2
Loading