New features
- WebUI: make error messages dismissible.
- WebAdmin: allow to search and export audit logs.
- WebAdmin: allow to configure SMTP and the most common ACME and SFTP settings from the WebUI.
- IP/network lists moved from files to provider. Therefore they can be managed from the WebAdmin UI.
- WebClient shares: replace basic auth with a proper login form.
- WebClient: added copy action.
- WebClient/REST API: remove default upload size limit.
- EventManager: added a notification action for users with expiring passwords.
- EventManager: added copy action.
- EventManager: added support for pre-* actions.
- EventManager: added on-demand trigger.
- EventManager: added IDP login trigger and check account actions.
- Added support for password policies (strength and expiration).
- Added role support to delegate user administrations.
- Allow to set a default expiration for newly created users.
- Added a CLI command to reset the admin password.
- Added a CLI command to check if the service is alive.
- GCS: allow to customize upload part/time.
- Conditional support for recursive renaming for cloud providers.
- Allow to disactivate event rules.
- Added support for monitoring and automatically reloading TLS certs.
- WebDAV: allow to define custom MIME type mappings.
- Fs events: added elapsed field.
- Groups: allow to overidde account expiration date.
- SSH: enable keyboard interactive authentication by default.
- HTTP to HTTPS redirect now allows the HTTP binding on port 80 to be used also for ACME HTTP-01 challenge.
- Portable mode: allow to read the password from a file.
- Capture logs from external auth, pre-login and check password hook commands.
- FTPD: allow hostnames for passive IP.
- Docker: build also for armv7.
- Added an experimental Terraform provider.
Backward incompatible changes
- Portable mode: remove support for service discovery via multicast DNS.
- REST API: remove merging of fields on update, respect the PUT verb.
- File based allow and block lists are not supported anymore.
- JSON serialization of the users: rename 2fa_protocols to two_factor_protocols to improve compatibility.
Other
- Support plans added to the SFTPGo website.
- Thanks to Polina Zvorykina, VK for reporting an XSS vulnerability in the new IP lists page before the official release, although we are not pleased that they don't support the project and they use a private SFTPGo fork.