Read the Announcement
Read the full announcement with discussion of new features: Pangolin 1.26: Session Management, SSH Logs, and Auto Windows Updates
What’s Changed
- Add option to add additional DNS records on delegated domains with Pangolin DNS (EE)
- Add optional match on base wildcard domains
- Add continuous session revalidation for OIDC IdPs using refresh tokens (EE)
- Add SSH session logging when using Pangolin SSH (EE)
- Add resource session management with ability to see and revoke active sessions (EE)
- Add custom domain for org auth pages to self-hosted (EE)
- Add opt-in CrowdSec bot detection
- Fix failing Safari passkey registration
- Fix the enabled/disabled filter on the private resources table
- Fix IdP auto-provision not toggleable on a per org basis when using org-scoped IdP mode
- Fix order same-second status events in status history
- Fix duplicate header auth from blueprints
- Fix Swagger API docs missing from container build
- Fix missing API key permissions for integration API routes
- Fix Bedrock cache token calculation
- Dependency security updates
- General UI improvements
- Various other bug fixes
New Contributors
- @jnko266 made their first contribution in #3938
- @ASPCODES made their first contribution in #3988
- @samirasidd made their first contribution in #3971
- @RishavTiwari25 made their first contribution in #3999
- @S-NoF3aR made their first contribution in #4027
Full Changelog: 1.25.3...1.26.0
How to Update
Important
As of November 3, the Traefik team has fixed the bug that prevented Badger v1.8.0 from being pulled. You can now safely upgrade to Badger v1.8.0 to enable permanent redirects, introduced in Pangolin v1.25. The v1.26 migration will attempt to update Badger for you automatically. If it cannot find your Traefik config in the standard location, manually update Badger.
Important
SSH session logs with Pangolin SSH mode require an updated site agent. Upgrade to Pangolin CLI v0.2.0+ or Newt v1.20.0+ before enabling SSH logging.
Important
Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.