v0.24.9_hotfix

This commit is contained in:
Mateusz Gruszczyński committed 2026-10-03 18:15:30 +02:00
1 parent dc0fcabf51
commit cb6d98064b
5 files changed
+9 -5

No files matched your search

+1
View File
@@ -2,6 +2,7 @@
## 0.24.9
- Fix the secret-redaction KV regex literal so 0.24.9 compiles correctly; the redaction behavior itself is unchanged.
- Harden the built-in release checker for FreeBSD/OPNsense and other Unix platforms: supplement bundled Mozilla roots with common system CA bundles/`SSL_CERT_FILE`/`CURL_CA_BUNDLE`, follow bounded non-downgrading HTTP(S) redirects, and report failed checks as normal application `ERROR` events without changing dashboard behavior.
- Add a central AES-256-GCM encrypted Secret Store with private local master-key storage and migration of existing ACME DNS-provider credentials.
- Add encrypted full backup/restore with Argon2id, authenticated encryption, explicit manifests/checksums, staging validation and rollback-safe activation.