Fixes
- Fixed pull request previews that existed before the upgrade breaking on redeploy. They keep the production values they were first deployed with. New previews use only their own variables.
- Fixed 503 errors from Traefik during the first rolling update after you saved application settings. The retry proxy labels from v4.5.1 were removed, so the proxy labels are the same as in v4.5.0.
- Fixed SSH connections that stayed open and used up memory on the server when another process held the multiplexing socket.
- Fixed S3 backups that failed when the MinIO client fell back to S3v2 signing. Requests now always use S3v4, and failed uploads are tried again.
- Improved MySQL and MariaDB restores. They use the restore options of newer client versions, check the backup before they change the database, and stop with a clear message for unsupported content (#12352).
- Custom database configuration and custom Docker options of standalone databases are now shown only to team admins and owners, and to API tokens with sensitive read access (#12353).
- Application commands and configuration are now shown only to team admins and owners, and to API tokens with
read:sensitiveaccess. - The service configuration form now uses the same role permissions as the environment variables page. Users who cannot manage the service environment see its fields as read-only (#12356).
- Finish events of background tasks now apply only to servers and services of their own team (#12355).
- API tokens with the
writeability can now set manual webhook secrets. - Pushover notifications no longer write the message payload to the log.
What's Changed
- fix(database-import): improve MySQL and MariaDB restore handling by @andrasbacsai in #12352
- fix(databases): show custom configuration only to admins by @andrasbacsai in #12353
- fix: scope finish events of background tasks to their team by @andrasbacsai in #12355
- fix(services): align service configuration form with role permissions by @andrasbacsai in #12356
Full Changelog: v4.5.1...v4.5.2