Interface and container workflows

• Prevent duplicate role assignments from causing a 500 in the user editor. (#4332; @DominikZublasing)
• Recognize JSON in container logs. (20c2438; @kmendell)
• Virtualize large tables, confirm before loading all vulnerabilities, and keep table height within the viewport. (#4340; 011d2cc; 7d8b207; @kmendell)
• Reuse unclaimed project directories when creating projects. (#4343; b80f1bc; @kmendell)
• Remember the last-used shell for each Compose service. (#4348; 8176ee5; @kmendell)
• Confirm before bulk-updating containers or projects. (#4347; f5672c9; @kmendell)
• Close editor tabs with a middle-click and save projects with Ctrl/Cmd+S. (#4333; a7f16c9; @DominikZublasing)
• Support icon_url in remote template registries. (#4350; a78fc13; @kmendell)
• Add development/beta version branding. (2158fe7; @kmendell)
• Fix action button overflow and make menus more compact. (94b1658; @kmendell)

Jobs, storage, and reliability

• Enforce SQLite foreign keys and remove orphaned authorization records. (#4339; 33bdd33; @kmendell)
• Allow schedules to be updated for disabled jobs. (e7317f0; @kmendell)
• Prune local backup repositories daily to free space from deleted backup data. (#4235; 2ecc763; @GiulioSavini)
• Migrate jobs to fan-out workflows. (#4356; 1cb7577; @kmendell)
• Stop the app if the Francis host fails during bootstrap. (#4371; e9b8ee1; @kmendell)
• Keep SQLite tuning on the Francis actor store and stop syncing on commit. (#4372; a4376c5; @kmendell)

Edge, security, and observability

• Stream edge responses, pool proxy connections, and clean up the edge package. (#4354; df80491; @kmendell)
• Mark direct agents online when the dashboard can reach them. (8b3756c; @kmendell)
• Add OpenTelemetry metrics, traces, and logs. (#4367; f3bfc28; @kmendell)
• Report environment counts only from the manager. (17c223a; @kmendell)
• Add a multiplexed edge tunnel and redesigned connection view. (#4375; 70c2954; @kmendell)
• Extract client IPs only from configured TRUSTED_PROXIES. (#4351; ceab1a7; @kmendell)
• Skip API-path auto-login checks when auto-login is disabled. (64eb4d3; @kmendell)
• Require a verified email before merging OIDC accounts. (#4381; bc6547f; @kmendell)
• Gate actions on variable permissions rather than templates:update. (#4382; ccb06ea; @kmendell)
• Prevent stale user writes from overwriting profiles. (ae7641d; @kmendell)
• Match Trivy scans by layer diff IDs. (ebb5a1f; @kmendell)
• Allow self-upgrade helpers through the Wollomatic socket proxy. (#4383; 9e2e9f4; @kmendell)

CLI and integrations

• Add an all-environments preview to the CLI and UI. (c8ec324; 298c8cf; @kmendell)
• Refactor CLI commands around constructors, generic helpers, and shared types. (0d07bea; @kmendell)
• Display JSON stream output and correctly formatted configuration in the CLI. (ace2c8d; e8b83db; @kmendell)
• Store CLI authentication settings in a separate auth.json file. (#4379; 517cd55; @kmendell)
• Add a Sigstore-verified self-update preview to the CLI. (#4380; 2a7673a; @kmendell)
• Let ECR registries use the AWS default credential chain. (#4357; fc18c60; @Guik)
• Improve ntfy notification formatting. (#4336; 1899f0b; @maghuro)
• Standardize on github.com/docker/go-units. (#4377; aafcfb4; @kmendell)
• Disable Gravatar by default and make it configurable. (#4349; 75996ec; @kmendell)

2.16.0

2.16.0

2.16.0

Compose and updates

• Interpolate variables in Compose include paths (#4298) — @kmendell
• Preserve Compose image spelling during project updates and self-updates (#4330) — @kmendell
• Keep the selected tag during self-updates and refresh stale project update status (commit e862615fc4e47c8bf7fbfc089254bf509d0a82c7) — @kmendell

Environments, notifications, and authentication

• Resolve webhook target names in remote environments (#4299) — @kmendell
• Default notifySelf to true and add a setting for Signal notifications (#4302) — @Shraymonks
• Prevent logout from hanging on permission errors after OIDC login (#4309) — @kmendell
• Navigate to the selected environment on environment-scoped routes (#4320) — @kmendell

Backups and maintenance

• Prevent system backups from failing when project files are in use (#4311) — @kmendell
• Allow deleting backups when their S3 repository no longer exists (#4319) — @kmendell
• Report accurate reclaimed space in scheduled pruning (#4317) — @kmendell
• Store Francis actor state in its own SQLite database (commit 93a740597df7a6aa47d5925d9d8dc5499934af05) — @kmendell
• Use persistent Git storage for SSH host keys on native installs (#4300) — @kmendell

Interface and platform

• Remove table header blur (commit 4d9bca092d6006b7265a6ce07928860b47ab84a5) — @kmendell
• Release arcane-cli only for Apple Silicon (arm64), dropping amd64 support (commit b3acb52dd02f39e39489203ce04ab316b47de8f6) — @kmendell

Internal changes

• Move the Docker utils package to go.getarcane.app/docker (#4296) — @kmendell
• Inline logic in project services (commit 73b43dba1e83f9a630b81e21381b533e50cdc57d) — @kmendell

2.15.1

2.15.1

2.15.1

Features and interface

• Browse repositories and tags in configured registries. (#4162) @Laval13
• Add mobile sorting to the shared table menu. (#4225) @kmendell
• Add unsaved-changes warnings when deploying or redeploying projects. (32f1e335) @kmendell
• Add actor statuses to the diagnostics page. (01a8964d) @kmendell
• Make several UI/UX improvements, support backup login, and show both digest values. (#4271) @kmendell
• Update the dashboard header design. (#4269) @kmendell
• Refresh the login screen layout. (32262306) @kmendell
• Clean up crowded action buttons. (#4233) @kmendell

Fixes and reliability

• Handle .env directories in project scans, environment saves, and workspaces. (#4213) @Mczubi
• Honor *_FILE settings on the environment-managed settings path. (#4203) @mortencombat
• Reduce manager polling and config-sync egress to remote agents. (#4218) @kmendell
• Align editor themes with the selected application theme and prevent overlapping columns in virtualized tables. (#4219, #4220) @kmendell
• Avoid duplicate deployment events on project redeploy. (1b31dd9c) @kmendell
• Prevent GitOps directory sync from copying unrelated project data and stop loaded associations from overwriting repository updates. (#4222, #4243) @kmendell
• Allow project redeploys with restricted bind sources. (#4260) @kmendell
• Prevent volume detail-page errors when navigating away. (#4229) @kmendell
• Include ECR Public in the Docker image list. (0d3cd419) @kmendell
• Omit SQL parameters from query logs to prevent oversized logs. (#4221) @kmendell
• Automatically clean up upgrade logs according to configurable retention. (#4230) @kmendell
• Show upgrade status for Arcane self-upgrades. (#4278) @kmendell
• Reject events from cancelled stream connections, and harden stream cleanup against stale cache fills. (#4241, #4267) @kmendell
• Remove manual job review, fix Francis scheduling, and recover oversized legacy job histories on startup. (#4268, #4270) @kmendell

Performance and internal improvements

• Reduce database queries and simplify frequently used queries. (#4239) @kmendell
• Switch log streaming from JSON lines to SSE. (#4276) @kmendell
• Simplify the JSON serializer. (b47a8b90) @kmendell
• Adopt go.getarcane.app for common utilities. (#4223) @kmendell
• Use Francis for distributed actors. (#4261) @kmendell
• Standardize on Go standard-library errors. (#4263) @kmendell
• Standardize domain package layouts. (7d41c588) @kmendell
• Remove Viper config loading from the CLI in favor of raw YAML marshalling. (e4c1c0a3) @kmendell
• Regroup CLI commands and add loading states. (0f6591f7) @kmendell

2.15.0

2.15.0

2.15.0

Security and vulnerability management

• Added bulk ignore and restore actions for vulnerability findings — 8dd49f1ac48b6dc1a17c960e08287338934eb33f (#4158) (@kmendell)
• Redesigned the risk-based security view — cac682df3161e4228b5217fc3c9361700485c280 (#4204) (@kmendell)
• Improved the risk score model — 0238e1414138788e1b674b1ae9d1ffc5b65adc38 (#4205) (@kmendell)
• Fixed environment-admin resource pages requesting globally protected data — 91825a6865e1e3a5a5913c0dfb938dc4093dbfe6 (#4151) (@kmendell)
• Accepted Safari’s unrequested appid=false value during passkey assertions — a7db1aeafd3aff1e5e3161780dd37d117ac0084a (#4208) (@kmendell)

Containers, projects, and updates

• Added a container processes tab — bbc70f7d6007b3532c1bc103e30e1cb9222ef6fe (#4187) (@kmendell)
• Routed container updates through the activity system — 2e35dfda39ed51e692fb4b00c944fd1ba6ceb6e5 (#4167) (@kmendell)
• Resolved pending update status consistently across containers, projects, and the dashboard — aaac10a0d5e1105edfa01a0708f4cdbaf6e96375 (#4189) (@kmendell)
• Preserved Compose formatting when applying tag updates — b9d64a9f116f700f64fa30ebc04d5816e3174f20 (#4172) (@kmendell)
• Recreated namespace dependents when updating Compose services — 33216715407a75a2b2ce499d228dab68a847ac87 (#4179) (@kmendell)
• Preserved pinned Compose tags unless enabled by the updater strategy — 72532defe45ac340d07aaf01b6d6a9e393972d87 (#4180) (@kmendell)
• Continued checking for updates for containers excluded from automatic updates — 4eeb7d43d3c4aea469803ea6f94645ab94f8de1c (#4181) (@kmendell)
• Logged project updates during Git sync only when content changed — 439aee51db0e19769928e68454d610f2cb53cfcd (#4206) (@kmendell)
• Skipped symlinked external bind sources when preparing project updates — bcaa9d447b5aa044c60a9aa657179b8000dfa2d7 (#4207) (@kmendell)
• Kept the project Save action mounted to maintain a stable toolbar layout — dd37ce953c0e673776f7a843fabff612fa928147 (#4157) (@kmendell)

Environments, backups, and configuration

• Allowed token re-entry when changing an agent API URL — af4dab5f00980e34c3870deffae636eb4a498793 (#4160) (@kmendell)
• Allowed deleting backup records for missing snapshots — b30e617cfa403d91fd6306dfe88bdd2133a8dcb6 (#4161) (@kmendell)
• Surfaced Docker join errors and added a manager-address override to Easy Join — e2312137c99ff400f8473265780816d6bf9cab3f (#4191) (@kmendell)
• Allowed dots and hyphens in .env variable names — 144d7acced1ba23e0661148ce29b3db107732b58 (#4199) (@DominikZublasing)
• Added search to the template selection dialog — 4bbcbfea6274e149a57daa386a57543df688f380 (#4183) (@kmendell)
• Forwarded proxy configuration to Trivy scan containers — 85b9b16baa0d79edc7ab3d01df98dcd3d811a1d1 (#4168) (@kmendell)

Activity processing

• Isolated activity subscriber payloads to prevent concurrent writes — 9fc00866b9107366824b91cdd887de54c8b089d6 (#4159) (@kmendell)

2.14.0

2.14.0

2.14.0

Project and Compose fixes

• Create missing project bind directories as the runtime user — 8bcb59d538a28bcd149b42bcbb9e096d10eb1059 (#4138) (@kmendell)
• Update the Compose example to include DISTRIBUTION=1 — 1b21e5c3594d3e60d8f8a449981a078a989790d6 (@kmendell)

Container update and backup fixes

• Allow manual updates for containers excluded from automatic updates — 6c227d02de0f412371f4124214934af2933fe7f5 (#4139) (@kmendell)
• Preserve data volumes when recreating containers during upgrades — 75f6ddb2bb8cee8cec52259d11d5123fe7b97f4d (#4141) (@kmendell)
• Include separately mounted projects in system backups — 081e638de8000ec033a7fe4b4ac036ff8571e238 (#4144) (@kmendell)

2.13.1

2.13.1

2.13.1

Features

• Added a stream label toggle for distinguishing STDOUT and STDERR in logs. (#3976, 4f10dee49f7a3c4b32a695cc9f05584403ea674d) — @kmendell
• Added Telegram topic destinations for notifications. (#3978, e47164421a22b8a9f12714a923be566889d2cbe1) — @kmendell
• Added a timestamp toggle to the log viewer controls. (#3979, 9fa57c867b1085a7142d7e755f87ddd9318b1a1d) — @kmendell
• Added personal defaults for the project editor layout. (#3986, 67b34b9c032d8f56379ed60322839d39dc5af855) — @kmendell
• Added bulk updates for selected containers. (#3971, 0365c6861d50ef5fc5aaf7f816e370955eadc398) — @mewajda
• Added retained log viewing for stopped projects. (#4097, b350d394cd19027e90bb8dd581474de54745c434) — @kmendell

Fixes and UI improvements

• Nested Compose services and networks under their respective sections in the outline. (#3985, f4573188664d88d6d3a8ac0427c34611211dcb72) — @angst911
• Let the backend generate run IDs for manually submitted jobs. (#3987, af96a6e99b3fdc0b64cd8b26552e624be7732e54) — @kmendell
• Added a separate tag-listing timeout for large registries. (#3990, 5262d2f33af966b856a10b8572c061bf7ba8fc18) — @kmendell
• Updated the sidebar update item. (#4003, 476d8b17fc4f695e90a2758740fa77acf8ab42aa) — @kmendell
• Sorted containers globally by live CPU and memory usage. (#4099, 18e4e3f5b1b2d8abf3999008cf3a0934bae6d4f3) — @kmendell
• Surfaced Update All startup errors and adopted already-running jobs. (#4104, dc89ea0b1920f4f2d6eefb92f2cafb9b528822ca) — @kmendell
• Sorted network subnet and gateway columns numerically. (#4119, 324adf3585ece4ecd1f4f3317875521398028ea7) — @kmendell
• Prevented header actions from overlapping badges and added per-device layout modes. (#4121, 9454ce57db6763263e4628cc58a4c2e1c169183d) — @kmendell
• Included container image references in update discovery. (#4126, e0357ec8468fadb8a8daba7804ec20594092d3b0) — @kmendell
• Displayed project-scoped versions instead of image digests. (#4127, ddead64b8b96e0929a0e79acd8d1a4f350e2f5a3) — @kmendell

Performance

• Skipped repeated per-message visibility reads and source lookups on the local activity stream. (#4105, 423cd549b74271f8a4b3992cf04e5920d6a06dc5) — @kmendell
• Resolved GitOps Compose paths once per project list request. (#4106, f5d6f37dba1c9cab72271d6e9d183cbe1f7fd79e) — @kmendell
• Enriched filtered project lists after pagination. (#4108, 92349aa97949e54ee2409a1c4a3c35758df60e8a) — @kmendell
• Deduplicated and parallelized container tag checks. (#4109, 57812f8f0511e9f2d3f6b6fa17242da6db98d592) — @kmendell
• Replaced repeated update-record scans with indexed lookups. (#4110, 109f22402d059167b079f735b19b72e4029ca4ef) — @kmendell

2.13.0

2.13.0

2.13.0

Backups and Git sync

• Added Back up to Git sync mode and the ability to link existing projects to syncs — dadf87f93d9214dcd741c7ed503dfbf504c9df54 (#3932) (@kmendell)
• Added configurable Git identity for pushes — 372f168940702645d63d34d0d6d80b742a7cb8da (#3935) (@kmendell)
• Added an explicit environment-backup switch with a warning for project backups — 9ba395d5272ee5a3506682e61b9d1e06c4752f16 (#3937) (@kmendell)
• Added support for binary files in Git backups and reused the editor file tree in the sync dialog — b80880fab4146572c02f071126d44751391031b9 (#3946) (@kmendell)
• Preserved pre-deploy hooks and deployment options when importing GitOps syncs — da22a65fac881f7b6ff6048bae91399608d2eeab (#3952) (@kmendell)
• Added S3 backup discovery and re-keyed volume backups to the recovery key — 02208f5cd24e028dfb0e2221305febbf3ee58837 (#3885) (@neurekadev)

Security and vulnerability scanning

• Added CSV export to the security vulnerabilities table — af5538dde929bcc0e94053fd9ad4f3d263820da7 (#3936) (@kmendell)
• Added a Fix available filter to the security vulnerabilities table — bf48ce6eebebca249607b02dcebb7df37079ab90 (#3944) (@kmendell)
• Added vulnerability-count sorting to the images table — 9f89ceefbfcd6dd16581cf520b40d4b201d41801 (#3945) (@kmendell)
• Added Trivy configuration and ignore-file settings for vulnerability scans — eff16eb5688e981b36847f55995d92990d02d30c (#3949) (@kmendell)
• Added support for decimal CPU limits in Trivy scans — 02225a2d03529ef14ec7e4009f6f4b746feca2b6 (#3972) (@kmendell)

Containers and networks

• Added subnet and gateway columns to the networks table — 146b4b9658d163c1290453203172b3cd286bdf3f (#3942) (@kmendell)
• Added IPv6 addresses for containers and network members — 8345e5669ac2580a0b67385fbb9868ab6468e97e (#3957) (@kmendell)
• Added optional IP ranges when creating networks — 38d3ed8c19faea20e4d9457395519196f074ce6a (#3959) (@kmendell)
• Linked container overview volume and network counts to their respective tabs — f9988528d1a94e3440d2d295bfcd1c658aff1798 (#3958) (@kmendell)
• Added support for downloading container logs — 9a83c5ac02944dc72c3fc4a39691eb8a1a832403 (#3960) (@kmendell)

Interface and settings

• Added Shift-select range support to selectable tables — 472b01f5855c642afe192be448fe6339f6a6f74c (#3943) (@kmendell)
• Clarified ntfy token authentication, required Matrix credentials, and cleaned up test menu labels — e68ab5ab4b8e3df7528b6f365846c383a49d381e (#3951) (@kmendell)
• Updated theme colors and added support for inheriting theme colors — eee8a84bd5d467ca5f1f6dac4ca20768a377dcf4 (#3965) (@kmendell)

Authentication, permissions, and reliability

• Surfaced OIDC and settings errors, allowed clearing the OIDC secret, and required it while OIDC is enabled — 70cf8a2596d32f2fd84685e5827bc79f95e2a3b7 (#3954) (@kmendell)
• Hid the Automations tab and stopped job polling without jobs:manage permission — 94d6d79d533cd941d46d2cacaba391167d570c96 (#3963) (@kmendell)
• Updated the legacy users.roles backfill to run only once — a4ae1a0f20463c7dc018f7bae4996e3cab2e34ac (#3964) (@kmendell)

Agents and edge tunnel

• Fixed Docker snippets to use the port number from the agent address input — 2c34ade39db5f8686f73e7f76bb8df691f39cebc (#3955) (@tinkrynite)
• Added missing job commands to the edge tunnel — 6af4589a12376f7fe40a9f1d8778fbbe6e5afbf4 (@kmendell)

2.12.0

2.12.0

2.12.0

Authentication and notifications

• Align first-login password validation with the configured policy — b71892d0902480a5e430bf4c10439d167508301c (@kmendell)
• Prevent passkey MFA failures caused by reactive options — 95e5a3bc14706e69a9a366794d92706c55a53a7f (#3926) (@kmendell)
• Preserve notification event subscriptions during partial settings updates and warn when none are subscribed — 817444abbd7984401e9f2e3ef59447e474f8d97b (#3925) (@kmendell)

Vulnerability management and Docker compatibility

• Fall back to cpuset for Trivy when the Docker host lacks CFS quota support — 41eae6334d8807d7fd7c159b73f157b28422e2a8 (#3910) (@kmendell)
• Allow vulnerability management to be disabled per environment — 4e432b30a69458c2077f9eac5ceb1a83709282b6 (#3914) (@kmendell)
• Pull pre-deploy runner images using configured registry credentials — 989e160ec544842d0db69ade182037cd2976b310 (#3918) (@kmendell)
• Fail image patching early when Docker lacks the containerd image store — 6fdcf37c2dba690a227d09e1bf5aaf3a3c632330 (#3928) (@kmendell)

Projects and GitOps

• Preserve existing file modes when saving project and global environment files — c92f3932cca1597c3d3fe3484b3d9a1e41289216 (#3919) (@kmendell)
• Preserve configured directory modes for GitOps directory-sync project roots — 31081659de472c06a639bd53e1615dff5077b5ac (#3920) (@kmendell)
• Treat identity bind mounts as mapped when re-resolving escaped relative Compose paths — 7b19b854ace736bedafd0a632e8cb54f3420696a (#3924) (@kmendell)
• Sort projects by live status instead of the stale persisted status — 0b594d1fd17c50285d9e7956f7bc8a488200c27b (#3923) (@kmendell)

Interface and dashboard

• Keep the environment detail page stable when navigating back to the list — 73d478211ebe090dc5afe38c098361e2b5770472 (#3921) (@kmendell)
• Prevent the project log panel from recursing on the viewer stop callback — e8cc329c1042b896669ae091d64e6a8cbd15bf0f (#3927) (@kmendell)
• End dashboard statistics loading on stream failure and retry on refresh — 16b7b59d5e6442bd8d2e0181356fb8f5d6488ebc (#3930) (@kmendell)

2.11.1