You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Auth API: Remove the GET /api/v1/auth/logout endpoint; API clients must use POST to log out. (c834e08)
Build: Replace root Makefile workflows with Shadowtree recipes for builds, tests, code generation, documentation, and maintenance. (75bbb43)
Build/Benchmark: Replace the benchmark shell scripts with the typed Shadowtree benchmark recipe. (db6b04c)
Bug Fixes
Agent/Proxy: Validate modern agent proxy headers while retaining legacy fallback, bound the agent reverse-proxy cache, and roll back partial routes when setup is canceled. (3e6b564)
Entrypoint: Normalize host parsing for route lookup, wildcard matching, and short links so port-bearing IPv6 hosts and exact FQDN routes resolve correctly. (40bb20c)
Goutils/Reverse Proxy: Preserve configured targets and replay recreatable request bodies when reverse proxies retry after a scheme mismatch. (yusing/goutils@129c221, yusing/goutils@cdc35dd)
MaxMind: Start periodic MaxMind database updates after a successful local database load. (8270004)
Autocert: Skip renewal scheduling for local and pseudo certificate providers based on their configured provider type. (58fdec4)
ACL: Parse IPv6 IP and CIDR ACL matchers correctly while rejecting malformed timezone and country matchers. (ab13451)
Agent Setup: Clean up registered agents, providers, and started routes when agent verification or configuration persistence fails. (756a840)
Idlewatcher: Keep the active provider and dependency list in place when an idlewatcher reload fails. (6bb1788)
Configuration Reload: Continue receiving watcher events while configuration reload flushing is in progress. (9eeac4e)
Notifications: Keep the previous notification dispatcher active after a failed reload and prevent notification enqueue races during shutdown. (d6bad5d)
Stream Routes: Close rejected TCP clients promptly and evict closed UDP sessions from stream route tracking. (6da33e7)
File API: Reject file-validation requests with missing or unsupported type values with HTTP 400. (a41e54e)
Improvements
Build: Update container builds and Go module toolchains to Go 1.26.5. (b5a16c5)
Security
WebUI/Logs: Escape HTML in ANSI-rendered error and autocert renewal logs to prevent log content from being injected into the WebUI. (yusing/godoxy-webui@871fc3e)
New Features
Goutils/Synk: Track active pooled-buffer capacity in pprof pool statistics and remove stale entries after garbage collection. (yusing/goutils@c91ae6e)