Rackpad v1.8.3

This stable release brings the tested v1.8.3-beta.1 changes to main, prioritizing
the Storage regression affecting browsers without a usable crypto.randomUUID.
Docker remains the supported deployment on linux/amd64 and linux/arm64.

Highlights

• Storage sections can be created, edited, saved and reloaded when the browser's
  UUID API is missing or throws, including Firefox over ordinary LAN HTTP.
• SNMPv3 key localization, AES privacy, authenticated responses and engine-time
  recovery are repaired, with Net-SNMP interoperability coverage.
• Rack Studio improves rear and mixed-face cables, patch-panel bindings,
  stacked-switch placement and undo/redo. Stacks retain member and port identity.
• Security and dependency updates from the beta series are included, alongside
  installer configuration/key preservation and refreshed documentation images.

Upgrade and recovery

Pin ghcr.io/kobii-git/rackpad:1.8.3 for this release. The latest tag follows
stable releases. Use a matching version of the Compose manifest.

Before upgrading, retain the previous application image, pre-upgrade database or
volume snapshot, configuration and original RACKPAD_SECRET_KEY together.

• Schema 50 encrypts legacy inline SNMP communities and requires the existing
  key; conversion aborts atomically when it cannot proceed. Preserve the key
  exactly. Rotate any communities previously exposed through responses/backups.
• OIDC sessions are revoked at the security migration. Configure a trusted admin
  mapping and local recovery access; verify roles after signing in again.
• Replace old TRUST_PROXY hop counts with the explicit IPs/CIDRs of controlled
  proxies. Traps are opt-in; reconfigure historical trap-source credential links.
• Schema 51 adds stacked-switch members. Migrations are forward-only. Rollback
  restores the entire previous application/database/configuration/key pair;
  never open the upgraded database with an older binary.

See the installation guide and
security upgrade notes for details.

Release scope and remaining checks

The maintainer chose early stable promotion to address Storage on main. This
supersedes the beta notes' planned acceptance-and-soak prerequisite for this
Docker release; it does not claim that community acceptance or seven days of
soak have completed. Issues #138, #139, #146, #148, #152 and #153 remain open.

Native Proxmox LXC stays experimental pending real PVE guest and recovery tests.
Cisco IOS-XE testing in the reporter's network, reporter confirmation of the
remaining workflows, and normal SMTP delivery still need community evidence.

The stable pipeline passed 436 server/client tests, 42 browser workflows,
12 Storage compatibility cases, Net-SNMP interoperability and all 40 refreshed
screenshots with zero changed pixels. Both published architectures passed
startup and backup recovery; the versioned and latest builds each passed six
additional Storage browser checks. Verification files and digests are attached.

The independently built 1.8.3/1.8 and main/latest images contain the same
release commit. Both were tested and scanned: zero fixable high/critical findings,
with 54 unfixed upstream OS advisories per architecture.

The existing narrow, source-bound SNMP USM CodeQL exception remains unchanged,
with its original owner and 2026-11-30 expiry. Fixable high/critical findings block
publication. Unfixed upstream OS advisories are reported separately; this is not
a claim of zero total vulnerabilities.