Features

• Added an instance setting to control forced HTTPS redirects for the dashboard.

Fixes

• Prevented DNS validation from hanging on unresponsive resolvers by adding five-second query timeouts (#11378, closes #11351).
• Preserved active deployments when shared SSH multiplexing connections were refreshed or cleaned up (#11377, closes #11372).
• Restored GitLab push and merge-request deployments that could fail with an HTTP 500 response (#11284, closes #11262).
• Allowed long-running volume backups to run for up to ten hours while preserving custom timeouts on existing schedules (#11358, closes #11273).
• Prevented SSL-enabled database containers from being left stopped during certificate ownership repair and container replacement (#11315, #11352, closes #11312).
• Prevented OAuth provider settings from being erased when OAuth settings were re-seeded (#8210).
• Enforced team-scoped authorization for scheduled tasks, preventing cross-team access and execution (#11239, closes #11238).
• Prevented large bind-mounted files and oversized remote output from exhausting memory while services, tasks, logs, volumes, and configuration were read (#10960).
• Made upgrades recover correctly when status data was temporarily unavailable after restart (#11350, closes #11347).
• Prevented stuck container removal from blocking deployments; cleanup was deferred and retried instead.
• Enabled compression for the dashboard over HTTPS (#10828, closes #10802).
• Corrected S3 error email links so they pointed to the configured instance instead of localhost (#8633).
• Fixed highlighted-button, spinner, and keyboard-shortcut contrast across custom themes (#11279).
• Fixed account menus remaining open after clicking outside an expanded Appearance panel (#11374, closes #11373).
• Centered icon tooltips over their triggers (#11382).

Improvements

• Surfaced pending proxy configuration and outdated Traefik states with actionable warning indicators.
• Made server warnings clearer, improved deployment-log scrolling, and corrected spacing in database backup settings.
• Clarified proxy-label generation choices (#11362).
• Clarified that saving Sentinel settings restarted Sentinel.
• Made database and OAuth seed operations transactional to preserve existing data when seeding failed (#11360).

What's Changed

• feat: add configurable Horizon dashboard access by @SelimSalihovic in #9354
• fix(upgrade): handle missing status after restart by @andrasbacsai in #11350
• fix(databases): redirect stdin for the SSL cert chown by @MarkosTech in #11315
• fix: compress dashboard over HTTPS by @Prains in #10828
• fix(notification): update storage email link in S3 error by @NrwPlay in #8633
• fix(databases): chown SSL certs before container replacement by @andrasbacsai in #11352
• fix(ui): improve highlighted button and spinner contrast by @fsioni in #11279
• fix(webhook): restore GitLab source deployments by @drewmt in #11284
• fix(services): avoid loading bind-mount file contents by @andrasbacsai in #10960
• fix(backups): support long-running volume backups by @andrasbacsai in #11358
• fix(security): enforce team-scoped authorization for scheduled tasks by @HelgeSverre in #11239
• fix(oauth): prevent data loss during OAuth settings re-seed by @ryzenixx in #8210
• fix: wrap seeders in db transactions by @peaklabs-dev in #11360
• chore(ui): improve clarity of generate proxy label options by @peaklabs-dev in #11362
• fix(ui): close account menu on outside click when appearance is expanded by @rohittiwari-dev in #11374
• fix(ui): center icon tooltips over their trigger by @peaklabs-dev in #11382
• fix(ssh): preserve sessions when recycling mux connections by @andrasbacsai in #11377
• fix(dns): time out validation queries after five seconds by @andrasbacsai in #11378

New Contributors

• @SelimSalihovic made their first contribution in #9354
• @MarkosTech made their first contribution in #11315
• @Prains made their first contribution in #10828
• @NrwPlay made their first contribution in #8633
• @fsioni made their first contribution in #11279
• @HelgeSverre made their first contribution in #11239
• @ryzenixx made their first contribution in #8210

Full Changelog: v4.3.8...v4.3.9

Features

• Added configurable HTTPS redirects for service applications across the dashboard, API, and MCP.

Fixes

• Prevented members from accessing deployment, database, service, and other mutable controls, and clarified disabled control styling.
• Fixed confirmation modal checkboxes that generated malformed Livewire bindings (#11335).
• Kept table page-size dropdowns visible and usable near the bottom of the viewport (#11349, fixes #11336).
• Persisted PostgreSQL public-access changes so they no longer reverted after refreshes or proxy restarts (#11348, fixes #11345).
• Corrected Traefik redirect capture groups and selected the proper Docker network for routed Compose applications and services.
• Reconciled proxy networks from running containers, improving routing when cached resource status was stale.

Improvements

• Made GitHub repository and branch selectors searchable and preselected each repository’s default branch.
• Improved active-deployment indicator contrast with solid surfaces in every state.

What's Changed

• fix(modal): use checkbox ids for Livewire bindings by @andrasbacsai in #11335
• fix(postgresql): persist selected public access state by @andrasbacsai in #11348
• fix(table): keep page-size dropdown within viewport by @andrasbacsai in #11349

Full Changelog: v4.3.7...v4.3.8