Announcing QuickStack v1.0.1!

QuickStack 1.0.1 is a security and stability release. An issue in Pod terminal authentication was resolved, apps can run commands through the REST API, and phpMyAdmin moves to its official Docker image. We recommend updating as soon as possible.

Security

• Secured pod terminal: An issue in the previous implementation of the Terminal WebSocket allowed connections without proper authentication and authorization. This is now fixed. Thanks to ucsurf for reporting this vulnerability.

⚠️ Update as soon as possible!

New Features

• Run commands in apps via the REST API: POST /api/v1/apps/{appId}/commands executes a shell command in a running pod of an app and returns stdout, stderr and the exit code. Supports cwd, environment variables and a timeout. Requires write access to the app.

Improvements

• Official phpMyAdmin image: the phpMyAdmin database tool now uses the official phpmyadmin Docker image instead of the community image phpmyadmin/phpmyadmin. Thanks to @williamdes for the contribution (#153)!
• Cleaner app settings drawer: "Advanced container configuration" and "Network policies" now use the same card layout as the other sections, each with a short description.
• Projects are no longer typed: the internal project type was removed. Existing projects and apps are migrated automatically.

What's Changed

• feat: per-custom-tag agent volumes with direct sandboxes by @aperolschpritz in #149
• feat: unify apps and agents in projects by @biersoeckli in #150
• feat: add app command execution API by @biersoeckli in #151
• chore: migrate to the official phpmyadmin docker image by @williamdes in #153
• fix: secure pod terminal sessions by @biersoeckli in #154

New Contributors

• @williamdes made their first contribution in #153

Full Changelog: 1.0.0...1.0.1