Bugfix Release
Fixes several issues introduced by the IPv6 dual-stack PR and the v0.9.0.1 security update.
🔍 Quality Note
Like v0.9.0.1, this bugfix release was developed with AI-assisted code analysis (Claude, ChatGPT, Gemini) to identify regressions introduced by the IPv6 dual-stack and security hardening changes. All fixes were manually reviewed and tested against a multi-node cluster before release. We're a small team of 3 – AI tooling helps us move fast, but we take responsibility for every line that ships. If you find issues, please report them via GitHub Issues or our security contact.
Fixes
- VNC/SSH WebSocket servers not starting after update (port cleanup, error handling, gevent asyncio fallback)
- IPv6 dual-stack breaking VNC, SSH and IP whitelist matching (
::ffff:prefix normalization) - SMBIOS autoconfig deploy failing on nodes without
/optdirectory or SFTP server (fallback toexec_command) - SMBIOS autoconfig settings not persisted to database across restarts
- Login blocked by
force_password_changeflag on default admin account - Session lost after page refresh (session_id restored in auth_check response)
- X-Forwarded-For not trusted from IPv6-mapped loopback addresses
- Datacenter status timeout increased from 5s to 10s for remote clusters
Files Changed
pegaprox/api/auth.py pegaprox/api/nodes.py pegaprox/api/settings.py pegaprox/api/vms.py pegaprox/app.py pegaprox/constants.py pegaprox/core/db.py pegaprox/models/tasks.py pegaprox/utils/audit.py web/index.html