What's Changed

Security & Fixes

• Prevent data loss when persistent containers (databases, apps, services) are accidentally pruned during service deletion (#9654, fixes #9582)
• Fix S3 storage backup endpoints returning 500 in API context (#9655, fixes #9581)
• Encrypt manual webhook secrets and strengthen HMAC signature verification (#9652)
• Fix Rocky Linux installer to use correct RHEL Docker repository (#9541, fixes #8730)
• Harden authentication: upgrade email verification hash and fix invitation link login (#9672)
• Validate and rate-limit feedback endpoint (#9653)
• Tighten volume name and path validation with shell argument escaping (#9666)
• Validate backup upload file type and size limits (#9667)
• Tighten S3 endpoint URL validation (#9668)
• Harden dev helper version validation and build argument escaping (#9670)
• Strengthen team scoping across resource creation flows (#9651)
• Fix SSH repository URLs with custom ports being mangled (#9425)
• Fix healthcheck path validation rejecting commas and semicolons (#9223)
• Fix database credential validation and shell escaping across Postgres, MySQL, MariaDB (#9674, #9676, #9681, #9682)
• Improve shell command tokenization for install, build, and start commands (#9684)
• Return stable generic error messages for API 5xx responses (#9669)

Improvements

• Add optional expiration for API tokens with advance notification warning before expiry (#9677)
• Add DELETE API endpoint to remove preview deployments by pull request ID (#9614)
• Mark Docker Swarm support as deprecated ahead of v5 removal (#9621)
• Categorize application advanced settings into logical sections (#9234)
• Improve service settings layout with dedicated advanced page and clearer headings (#9027)
• Display memory limit fields in a single row (#9232)
• Add info callout to clone resource section listing excluded items (#9233)
• Add architecture warning for service templates with platform limitations (#8390)
• Improve domain port+path format documentation in the UI (#8331)

What's Changed (Github)

• fix(installer): use RHEL Docker repo for Rocky Linux by @andrasbacsai in #9541
• fix(dev): add Docker volume path mapping to testing-host for database deployments by @cyface in #9534
• feat(ui): categorize application advanced settings into logical sections by @ShadowArcanist in #9234
• feat(ui): add info callout to clone resource section about excluded items by @ShadowArcanist in #9233
• feat(ui): display memory limit fields in single row by @ShadowArcanist in #9232
• fix(healthcheck): user input is rejected if path contains comma and semicolon by @ShadowArcanist in #9223
• feat(ui): improve service settings UX, headings, and helper text for clarity by @ShadowArcanist in #9027
• feat(services): add architecture warning by @Cinzya in #8390
• Added extra documentation on format for port+path for domains by @JamesPeters98 in #8331
• fix(git): preserve ssh scheme URLs with custom ports by @Iisyourdad in #9425
• refactor: tighten team scoping on resource creation and admin nav by @andrasbacsai in #9651
• build(deps-dev): bump follow-redirects from 1.15.11 to 1.16.0 by @dependabot[bot] in #9580
• refactor(webhook): encrypt manual webhook secrets and tighten HMAC verification by @andrasbacsai in #9652
• feat(api): add DELETE endpoint for preview deployments by PR id by @andrasbacsai in #9614
• refactor(api): validate and throttle feedback endpoint by @andrasbacsai in #9653
• fix(server): exclude persistent resources from container prune by @andrasbacsai in #9654
• fix(api): use explicit team ID for S3 storage lookup in backup endpoints by @andrasbacsai in #9655
• refactor(volumes): validate input and escape shell args by @andrasbacsai in #9666
• refactor(backup): validate database backup upload file type and size by @andrasbacsai in #9667
• refactor(storage): tighten S3 endpoint URL validation by @andrasbacsai in #9668
• refactor(settings): harden dev_helper_version validation and escape build args by @andrasbacsai in #9670
• refactor(api): return stable generic error messages for 5xx responses by @andrasbacsai in #9669
• [v5.x] chore: mark v4 docker swarm support as deprecated by @peaklabs-dev in #9621
• refactor: harden auth, CLI input, and scheduled-log viewer by @andrasbacsai in #9672
• fix(database): mount guard, healthcheck CMD exec-form, port input layout by @andrasbacsai in #9674
• fix(database): credential format validation with dirty-value escape hatch by @andrasbacsai in #9676
• feat(security): add expiration support for API tokens by @andrasbacsai in #9677
• fix(database): tighten Postgres init script filename handling by @andrasbacsai in #9681
• refactor(database): align Postgres SSL chown escaping with MySQL by @andrasbacsai in #9682
• refactor(validation): tokenize shell-safe command pattern by @andrasbacsai in #9684
• v4.0.0-beta.474 by @andrasbacsai in #9542

New Contributors

• @cyface made their first contribution in #9534
• @JamesPeters98 made their first contribution in #8331

Full Changelog: v4.0.0-beta.473...v4.0.0-beta.474