Franz646/orphan-cleaner v4.2.2

v4.2.2 - Services are now admin-only

on GitHub

Security

• orphan_cleaner.scan, orphan_cleaner.delete_orphans and orphan_cleaner.delete_orphan_devices now require an admin user. Before this, any logged-in user could call them, while the panel's delete and export endpoints already required an admin.

Upgrade notes

• Calls from non-admin users are now rejected, including those from a dashboard button or a script the user runs.
• Automations that run on their own triggers are not affected.