Bug fixes

• update gomodule imports to /v2(6cb4913 by @kmendell)
• decrypting of notification tokens failing (#2850 by @kmendell)

Dependencies

• bump updater module to new module name(50c0847 by @kmendell)

Full Changelog: v2.0.0...v2.0.1

2.0.1

2.0.1

2.0.1

New features

• use DHI images for base docker image (b73eb4c by @wrycu)
• full rbac permissions (1500646 by @kmendell)
• full background activity tasks (3d2c9ef by @kmendell)
• new account page and small ui tweaks and fixes (526e6d6 by @kmendell)
• better universal dashboard ui tweaks (986333b by @kmendell)
• support for federated credentials for workflow automation (818d306 by @kmendell)
• icon catalog and passthrough (72c6f23 by @kmendell)
• customizable font size per user (#2848 by @kmendell)

Bug fixes

• decouple context for activities (2afd24a by @kmendell)
• add the ability to cancel ongoing activities (fb11a53 by @kmendell)
• show all environment activities (0a6be65 by @kmendell)
• trivy scans not using arcane registries credentials (5d29ce3 by @kmendell)
• make updater service skip swarm containers and make checks more robust (ef0cec6 by @kmendell)
• incorrect paths for activity syncing(9d06074 by @kmendell)
• add global csrf middleware (c922327 by @kmendell)
• better rbac frontend UX for selecting permissions (23e24b6 by @kmendell)
• project auto update not updating container properly (a6a106a by @kmendell)
• diagnostic logs not formatted correctly(eed265c by @kmendell)
• image update checks timeout for no reason (45e229c by @kmendell)
• fix project update order and authentication (793ae89 by @kmendell)
• events create rbac role removed cause its pointless (864a581 by @kmendell)
• validate claim value and role ID in OIDC mapping functions (fa0c147 by @kmendell)
• annotate jwt placeholder secret(bfec449 by @kmendell)
• prune long running stuck jobs (9dbf241 by @kmendell)
• project sync depth not respected during FS sync (09737ce by @kmendell)
• skip checking for updates on pinned digests (760a88d by @kmendell)

Dependencies

• use node version 26.x.x(7b0c9c0 by @kmendell)
• bump pnpm to v11.5.2(d236ee9 by @kmendell)
• upgrade to sveltekit v3 (2709b6b by @kmendell)
• upgrade to tanstack-table v9 (d81c19e by @kmendell)

Other

• remove deprecated services and logic (576865d by @kmendell)
• consolidate frontend types and utils(0d579fa by @kmendell)
• use distroless images over DHI to support all platforms(86b7f60 by @kmendell)
• updated tab bar design(f621fe4 by @kmendell)
• consolidate frontend logic / components (538465a by @kmendell)
• modernize and refactor deduped logic (22e7336 by @kmendell)
• modernize backend code (6e89cff by @kmendell)
• add new go linters and refactor functions (93eefa2 by @kmendell)
• generate services and jobs from google/wire (aa5f767 by @kmendell)
• better RBAC layout filters and catalog (da70b3f by @kmendell)
• use getarcaneapp/updater module (35a0f2b by @kmendell)
• register each gitsync job individually (f1e9f44 by @kmendell)
• enhance updater functionality with restart status and options handling (c8dd0ce by @kmendell)
• migrate from golang-migrate to goose for database (3cdc8a4 by @kmendell)
• cleanup duplicated frontend code (2b68577 by @kmendell)
• update email template design(#2841 by @kmendell)

Full Changelog: v1.20.0...v2.0.0

2.0.0

2.0.0

2.0.0

New features

• add removeOrphans option to project deploy/redeploy (#2785 by @khanhx)
• prune idle volume browser helper containers (#2767 by @Zgrill2)

Bug fixes

• slog-go nil pointer dereference (#2781 by @lohrbini)
• dashboard card buttons paddings overlaps(c1a0bda by @kmendell)
• disable schema display on text selection(058f062 by @kmendell)
• clear / check for default jwt secret(ae914bd by @kmendell)

Dependencies

• bump date-fns from 4.2.1 to 4.3.0 (#2745 by @dependabot[bot])
• bump @sveltejs/kit from 2.60.1 to 2.61.1 (#2748 by @dependabot[bot])
• bump docker/login-action from 4.1.0 to 4.2.0 (#2739 by @dependabot[bot])
• bump eps1lon/actions-label-merge-conflict from 3 to 3.0.3 (#2743 by @dependabot[bot])
• bump depot/build-push-action from 1.17.0 to 1.18.0 (#2738 by @dependabot[bot])
• bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#2740 by @dependabot[bot])
• bump github/codeql-action from 4.35.5 to 4.36.0 (#2741 by @dependabot[bot])
• bump github.com/nicholas-fedor/shoutrrr from 0.15.0 to 0.15.1 (#2747 by @dependabot[bot])
• bump @tanstack/svelte-query from 6.1.30 to 6.1.33 (#2744 by @dependabot[bot])
• bump react-email from 6.2.0 to 6.3.3 (#2749 by @dependabot[bot])
• bump react and @types/react (#2821 by @dependabot[bot])
• bump svelte from 5.55.9 to 5.56.1 (#2798 by @dependabot[bot])
• bump react-email from 6.3.3 to 6.5.0 (#2806 by @dependabot[bot])
• bump prettier-plugin-svelte from 4.0.1 to 4.1.0 (#2811 by @dependabot[bot])
• bump react-dom from 19.2.6 to 19.2.7 (#2799 by @dependabot[bot])
• bump @xyflow/svelte from 1.5.2 to 1.6.0 (#2809 by @dependabot[bot])
• bump eps1lon/actions-label-merge-conflict from 3.0.3 to 3.1.0 (#2801 by @dependabot[bot])
• bump date-fns from 4.3.0 to 4.4.0 (#2810 by @dependabot[bot])
• bump github/codeql-action from 4.36.0 to 4.36.1 (#2800 by @dependabot[bot])
• bump to go 1.26.4(31efe1a by @kmendell)

Full Changelog: v1.19.5...v1.20.0

1.20.0

1.20.0

1.20.0

Bug fixes

• improve environment proxy error handling (#2649 by @kmendell)
• align local BuildKit load/push exporter (#2650 by @kmendell)
• PUID and PGID being set on project subfolder on every startup (#2656 by @kmendell)
• system upgrade doesnt support non unix socket docker hosts (#2651 by @kmendell)
• resizing window discards edits in compose editors (#2719 by @kmendell)
• only validate project name if it has changed (#2720 by @kmendell)
• make Arcane reverse-proxy aware to resolve connection issues (#2717 by @kmendell)
• tolerate undefined typed env vars in GitOps sync (#2721 by @kmendell)
• show all container ip's in list view (#2726 by @kmendell)

Dependencies

• bump pnpm to v11.1.3(fb8f2f5 by @kmendell)
• bump devalue to 5.8.1(2ed772d by @kmendell)
• bump ws to 8.20.1(47c4f81 by @kmendell)
• bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 in /backend in the go_modules group across 1 directory (#2654 by @dependabot[bot])
• bump @sveltejs/kit from 2.58.0 to 2.60.1 in the npm_and_yarn group across 1 directory (#2662 by @dependabot[bot])
• bump github.com/containerd/containerd/v2 from 2.3.0 to 2.3.1 in /backend in the go_modules group across 1 directory (#2663 by @dependabot[bot])
• bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /backend (#2664 by @dependabot[bot])
• bump github.com/docker/cli from 29.5.0+incompatible to 29.5.2+incompatible in /backend (#2666 by @dependabot[bot])
• bump github.com/compose-spec/compose-go/v2 from 2.10.2 to 2.11.0 in /backend (#2665 by @dependabot[bot])
• bump date-fns from 4.1.0 to 4.2.1 (#2675 by @dependabot[bot])
• bump github.com/docker/compose/v5 from 5.1.3 to 5.1.4 in /backend (#2670 by @dependabot[bot])
• bump go.podman.io/image/v5 from 5.39.2 to 5.40.0 in /backend (#2667 by @dependabot[bot])
• bump github.com/compose-spec/compose-go/v2 from 2.10.2 to 2.11.0 in /types (#2668 by @dependabot[bot])
• bump github.com/getarcaneapp/arcane/types from 1.19.1 to 1.19.4 in /cli (#2669 by @dependabot[bot])
• bump marked from 18.0.3 to 18.0.4 (#2679 by @dependabot[bot])
• bump svelte from 5.55.7 to 5.55.9 (#2672 by @dependabot[bot])
• bump @codemirror/autocomplete from 6.20.1 to 6.20.2 (#2673 by @dependabot[bot])
• bump @codemirror/legacy-modes from 6.5.2 to 6.5.3 (#2671 by @dependabot[bot])
• bump pnpm to v11.2.2(74f7ec4 by @kmendell)
• bump react and @types/react (#2682 by @dependabot[bot])
• bump frontend deps(7fe4f34 by @kmendell)
• bump prettier-plugin-svelte from 3.5.2 to 4.0.1(a2fbf3e by @kmendell)
• bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.16 to 1.19.17 in /backend (#2705 by @dependabot[bot])
• bump golang.org/x/net from 0.54.0 to 0.55.0 in /backend (#2696 by @dependabot[bot])
• bump golang from 1.26-trixie to 1.26.3-trixie in /docker (#2708 by @dependabot[bot])
• bump github.com/aws/aws-sdk-go-v2/config from 1.32.17 to 1.32.18 in /backend (#2700 by @dependabot[bot])
• bump golangci/golangci-lint-action from 9 to 9.2.0 (#2714 by @dependabot[bot])
• bump github/codeql-action from 4 to 4.35.5 (#2713 by @dependabot[bot])
• bump @uiw/codemirror-themes from 4.25.9 to 4.25.10 (#2712 by @dependabot[bot])
• bump depot/build-push-action from 1 to 1.17.0 (#2716 by @dependabot[bot])
• bump docker/login-action from 4 to 4.1.0 (#2715 by @dependabot[bot])
• bump react-email from 6.1.1 to 6.2.0 (#2711 by @dependabot[bot])

Other

• run workflows on breaking branches(993d27f by @kmendell)

Full Changelog: v1.19.4...v1.19.5

1.19.5

1.19.5

1.19.5

Bug fixes

• block unsafe compose include file reads (#2630 by @kmendell)
• add missing gRPC/ws tunnel commands (#2636 by @kmendell)
• unable to use templates due to 'not found' error (#2634 by @kmendell)
• retry rate limited update checks (#2639 by @kmendell)
• prevent projects from disappearing when projects folder is unreadable (#2641 by @kmendell)
• release notes not populated for manager instance (#2643 by @kmendell)

Other

• publish manager and agent image tags (#2645 by @kmendell)
• use trivy-db mirrors from arcane-tools (#2646 by @kmendell)

Full Changelog: v1.19.3...v1.19.4

1.19.4

1.19.4

1.19.4

Bug fixes

• remove gzip middleware from agent endpoints (#2627 by @kmendell)

Full Changelog: v1.19.2...v1.19.3

1.19.3

1.19.3

1.19.3

Bug fixes

• remove intel-gpu-tools from docker images since its has no effect currently(fea78a5 by @kmendell)
• allow hiding default networks on typology view (#2594 by @kmendell)
• refresh project detail runtime status (#2602 by @kmendell)
• allow LOGIN email authentication type (#2603 by @kmendell)
• keep session across backend version bumps (#2607 by @kmendell)
• missing store prefix on test connection form(5f1645f by @kmendell)
• swarm engine not respecting cpu limits (#2617 by @kmendell)
• only perform auto pairing on edge edgent not direct (#2622 by @kmendell)
• container cache leak from docker subscription (#2624 by @kmendell)

Performance improvements

• increase loading times of project list view (#2596 by @kmendell)

Dependencies

• bump to go 1.26.3(8e819fe by @kmendell)
• bump all go deps(6817e70 by @kmendell)
• bump the npm_and_yarn group across 1 directory with 2 updates (#2600 by @dependabot[bot])
• bump svelte from 5.55.5 to 5.55.7 in the npm_and_yarn group across 1 directory (#2601 by @dependabot[bot])
• bump github.com/danielgtaylor/huma/v2 from 2.37.3 to 2.38.0 in /backend (#2612 by @dependabot[bot])
• bump github.com/docker/cli from 29.4.3+incompatible to 29.5.0+incompatible in /backend (#2613 by @dependabot[bot])
• bump google.golang.org/grpc from 1.81.0 to 1.81.1 in /backend (#2610 by @dependabot[bot])
• bump prettier-plugin-svelte from 3.5.1 to 3.5.2 (#2618 by @dependabot[bot])

Other

• create admin role middleware for each endpoint (#2593 by @kmendell)
• consolidate digest and image updater logic (#2623 by @kmendell)

Full Changelog: v1.19.1...v1.19.2

1.19.2

1.19.2

1.19.2

Bug fixes

• show archived switch overlapping projects search bar(d02a05c by @kmendell)
• show correct environments types in filter (#2578 by @kmendell)
• build history not being updated after builds are completed (#2586 by @kmendell)
• incorrect backend arg used for trivy on 32bit hosts (#2587 by @kmendell)
• updater api authorization checks (#2588 by @kmendell)
• deny non hmac jwt requests(d568d03 by @kmendell)
• add rate limiting to webhooks and auth endpoints, and add caching to user session (#2591 by @kmendell)

Other

• add mobile device custom redirect url for oidc (#2580 by @kmendell)
• migrate off gin to use echo for backend router (#2582 by @kmendell)
• store user sessions in database with proper jti (#2590 by @kmendell)

Full Changelog: v1.19.0...v1.19.1

1.19.1