New:
- Tag-based host access control. User groups can now be scoped to Host tags (Settings -> Groups -> Host Visibility) (#214)
- Network column in the container table — received/sent bytes per container (contributed by @muzdai, #247).
- Host search in the host table — filter by name, URL and tags (contributed by @Killionis, #240/#241).
- Sort containers by IP address (#239).
- Container update progress now shows every stage — pulling image, creating backup, creating/starting container, health-check wait, completion — not just the image pull.
Fixed:
- Agent hosts' CPU, memory and disk (requires /hostfs to be mounted unless the system service Agent is used) usage now reach the alert evaluator, so host-scope rules fire for remote hosts, not just the local one ()
- Nightly host system-info refresh (OS / kernel / Docker version) now works for agent hosts.
- OIDC behind a reverse proxy: the redirect URI keeps the public port (#242)
- Compose validation for malformed YAML (like a TAB) is rejected on save instead of surfacing as a confusing deploy failure (#236).
- Batch stack import reports which files failed alongside the ones that imported.
Security / dependencies:
- Go 1.26.6 builder; x/crypto, x/net, x/text, grpc, gorilla/websocket, containerd, in-toto, otel updated.
- FastAPI 0.141 / starlette 1.6, cryptography 50, aiosmtplib 5, aiohttp 3.14.3, python-multipart 0.0.31.
- react-router-dom 6.30.6, vitest 5