What's Changed
🔒 Audit Logging Enhancements
- Upgrade Event Tracking - All auto-upgrade operations are now logged to the audit log for security monitoring and traceability. #486
- Upgrade trigger events with version information (who initiated, when, from/to versions)
- Upgrade cancellation events with full context
- User attribution and IP address tracking
- Upgrade script deployment logged with SHA256 hash for verification
🐛 Critical Bug Fix
-
Container Recreation Failure - Fixed critical bug where auto-upgrades failed with
Unable to find image 'profile:latest'error. #487Root Cause: The upgrade watchdog script had two bugs:
- Port mappings included protocol suffixes (
-p 8080:3001/tcp) which is invalid fordocker run - Docker Compose environment variables (
COMPOSE_PROFILES, etc.) were passed through, causing Docker to misparse the image name
Fix:
- Strip
/tcpand/udpprotocol suffixes from port mappings - Filter out
COMPOSE_*,DOCKER_*,PATH,HOME,HOSTNAMEenv vars - Added comprehensive environment variable filtering to prevent similar issues
- Port mappings included protocol suffixes (
Installation
Docker
```bash
docker pull ghcr.io/yeraze/meshmonitor:v2.15.3
```
Helm
```bash
helm repo update
helm upgrade meshmonitor yeraze/meshmonitor --version 2.15.3
```
Docker Compose with Auto-Upgrade
```bash
docker compose -f docker-compose.yml -f docker-compose.upgrade.yml up -d
```
Upgrade Notes
This is a recommended upgrade for all users running auto-upgrade functionality, as it fixes a critical bug that prevented container recreation during upgrades.
Full Changelog: v2.15.2...v2.15.3
🤖 Generated with Claude Code