getarcaneapp/arcane v3.0.0

on GitHub

Upgrades, updates, and image security

• Stream upgrade progress and logs for individual and all-environment upgrades, aggregate activity across environments, improve update status popovers, and finalize upgrade jobs after external manager upgrades (743a49e, 387b17c (#4539), 8fbf5b8, e63f8f5; @kmendell).
• Improve update details with commit notes for next-channel updates, image release notes, image creation dates and versions, detail-page update status and pull actions, and Docker Hardened Image status. Add vulnerability-based update blocking and improve risk scoring (b55472a, 948386d, 163f854 (#4665), 2e00ddc (#4708), 0d8373f (#4692), 0fbfac4 (#4760), 835b5ca; @kmendell).
• Add queued-agent updates and update counts to Update all; configure parallel agent upgrades and move the all-environments limit into environment settings (494e56e (#4766), 74f9187, f01697e; @kmendell).
• Fix update handling for pending self-updates, scoped update deadlines and partial results, and image digest parsing. Improve scanning by resolving images to their repository digest and scanning selected images by ID (2330877 (#4661), 7960d6a, bbb7fa8, df5a590 (#4724), 3471a4b (#4719); @kmendell).

Dashboard and interface

• Add customizable, saved dashboard layouts, a free-form widget grid, per-environment reclaimable space, and configurable widgets with label filters. Add grid views to lists (5dcfc6c, d0f0cf1, 9cde649, 8d4223f, fdc093c; @kmendell).
• Redesign the activity center and refresh the overall layout, tabs, badges, and tables. Add status-badge animations, a redesigned loading bar and log viewer, and improved update views (32acf02, 5a3fc6b, 617f012, 5442a9f (#4543), 6b7ac72, 4c8a574, ccb052b; @kmendell).
• Improve dashboard and container status details with health icons, memory usage rings, centered stat rings, and clearer container/project labels. Hide disabled environments and show the update section on beta builds (3910558, 29072e3, 66aae0d, 7d04b16, da69ea6, f4c615b, 0c7978a (#4728); @kmendell).
• Add account preferences for toast position and typography, environment color swatches and custom colors, and custom theme and brand-asset uploads. Hide sensitive values and improve the theme picker (4bf7909, a0abd9b, 6163994, b8a5b76 (#4666), 136c903, fe88cbd (#4746), 704c5ee, 12650c6, 128ed88; @kmendell).
• Improve navigation, settings organization, sidebar and page-header layouts, mobile actions, and mobile code-editor behavior. Hide navigation from users without permissions (58b6c3e, f8613a1, b27f503, c628b0f, e6b98a5, f3f0e3a (#4738, @Mczubi), 029c86a (#4737, @neurekadev)).
• Improve project and stack headers, editor controls, workspace context menus, and build workspace views. Add syntax-highlighted code blocks and configurable editor tab width (86584e7, 5fdd04d, 40696ed, 611e826, 18017b8, a5c97ea, 057c794, 9547293; @kmendell).
• Stabilize tables and log rendering, improve list loading and cached frontend data, and reduce frontend bundle size (dc4b0c1, ece3b0a, 1b0051b (#4726), afd6162 (#4729); @kmendell).

Backups, projects, and GitOps

• Expand system backups to remote environments, improve volume backup retention and pruning, restore volume workspace files, and back up on save without requiring auto-sync (4d7c69e (#4715), 478f59d (#4673, @neurekadev), ac709be (#4674, @neurekadev), bb38da8 (#4675, @neurekadev), deb583e (#4687, @neurekadev), 64c2d63 (#4682); @kmendell for other listed changes).
• Improve backup reliability and restore behavior: list backups across environments, return clear client errors, optimize restore selection checks, and tune scheduled disk-usage and repository pruning (37b2c3b (#4649), 79b2410 (#4672, @jmrplens), 156c987 (#4688, @neurekadev), 6801314, 0971972, 478f59d (#4673, @neurekadev), ac709be (#4674, @neurekadev); @kmendell for other listed changes).
• Improve GitOps sync and backup workflows with repository and branch defaults, synced-commit recovery, Compose override selection, sync environment variables, linked-project backup pulls, and Swarm stack-name validation (8f97870, a8f5813 (#4644), 5512cc3 (#4718, @NullishUsername), 307e0d6 (#4763), 1286248 (#4659, @NullishUsername); @kmendell for other listed changes).
• Support multiple project directories, Git repository provider links, and substitution-only global variables. Fix archived-project deletion and workspace file persistence (82aa75b (#4740), 6a1ebbd (#4710), 71288d9 (#4651, @Dim145), bc945f0 (#4703), 1070cd9; @kmendell for other listed changes).
• Load project and volume workspace folders on demand, improve volume folder listing and staged rename paths, and fix project file permissions and environment-file display (3387e5a (#4689, @neurekadev), 2f60193 (#4690, @neurekadev), b349514 (#4768), f93a51d, 36cf97c; @kmendell for other listed changes).

Agents, containers, and operations

• Rename edge agents to Arcane agents, remove the polling agent, and migrate agents to reusable enrollment tokens. Improve agent connection recovery, tunnel restarts, host details, mTLS enrollment, and upgrade transport performance (41e0699, 8da6084 (#4646, @NullishUsername), 1fd0dc2, 8378277, d52ad50, 43d2cb5, 97fe8e3 (#4742), 7954f76 (#4720), 162c5c0 (#4733); @kmendell for other listed changes).
• Improve agent tunnel and HTTP/2 configuration, proxy performance, response-header filtering, and hostname forwarding. Dispatch notifications over the tunnel and improve notification version details (83f46c9 (#4662), f505fb7, d7f6065, 22fbc2c, 6ea76d7; @kmendell).
• Improve container stats sampling and CPU sorting, Docker list caching, and Podman Quadlet/systemd handling. Fix container exec terminal sizing and event names (8ff8359 (#4658, @somaz94), 08659b1, cdd8179, 1cd0a1b (#4700, @Mczubi), 8953c4b (#4759, @jmrplens); @kmendell for other listed changes).
• Improve job-run details and history, scheduler lease recovery and efficiency, and cleanup of orphaned workflow cancellation jobs (4701c63, 13bb0dd, 7b689c9, 421c145 (#4707), 9b6b054 (#4725); @kmendell).
• Prevent overlapping auto-heal runs while keeping recovery active after errors, and fix runtime identity handling (d4a2aa1, 51f9bb4; @kmendell).

Security, configuration, and reliability

• Strengthen password-change enforcement, password-policy settings, and account controls. Add default admin credentials through environment configuration and block email changes when OIDC account merging is enabled (3e27477, a588d62 (#4747), 7171251 (#4709), 5879713 (#4741); @kmendell).
• Harden security headers, WebSocket limits, proxy protocol handling, and path validation. Patch Echo’s IP-header spoofing issue and sanitize denied-request logging (e840114 (#4743), 054aa6b, f20f081, e91e96c, 9181ec8 (#4712), ea0f187 (#4713); @kmendell).
• Improve API-key validation, reduce duplicate telemetry, and shut down the telemetry provider cleanly. Return field-level validation errors and correct invalid-input responses (0f45f14, 796f04f, 353ab2a, 17ce4ad; @kmendell).
• Fix authentication token-refresh timing, permission-dependent event queries, and page loading after query errors. Add copy actions to error and warning toasts (eddb9f2 (#4745), 21a014c, 7174532, 631fae1 (#4749); @kmendell).

Platform and developer changes

• Consolidate types, prefix configuration variables with ARCANE_, bump modules to v3, and replace SQL migrations with Goose migrations and a v2 baseline. Remove legacy image tags, protocols, migration paths, CLI flags, and configuration fallbacks (94c1413, 7242793, 10a60d1, 4790e9c, 2952f6b, f5ffa8e, 2033389, 844d6f7, 4e9c354, 11c0bfa, df23008, d04e6cb (#4540), 4cff77a (#4589), 8fe5a39; @kmendell).
• Speed up startup, first load, list queries, SQLite operations, and API responses; reduce memory use, optimize vulnerability pagination, and improve cached list loading (9eeddc4 (#4534), a2b2e95, 0f45f14, 08659b1, c4e8477, afd6162 (#4729); @kmendell).
• Modernize backend routing, dependency injection, filesystem operations, cron syntax, and frontend route/query organization (563517d, 36851d3, ca7ab2b, ec4a261, bece2b4, 8bae251, a34a154, f6aad86, a52a9d1, f52756d, e3bd5b7, 9333270, 0127a27, d354220 (#4660), d8d47cb (#4705), b5f8497 (#4704); @kmendell).
• Fix CLI health checks when TLS is enabled, numeric project ulimits, scheduler snapshot overhead, and Postgres idle connections (d51ad43, 39ab229 (#4706), 7b689c9; @kmendell).
• Document API request fields for S3 destinations, container create/edit, and Swarm; fix negative GitOps limits and backup restore/upload client errors (90f48fd (#4757), be7ef7d (#4762), ae830e7 (#4766), 0d2ea58 (#4756), 79b2410 (#4672, @jmrplens); @kmendell for other listed changes).
• Update end-to-end tests for project creation and project-update actions, and cache the pnpm store in CI (a60d6f2, 711f017, 5ff12c2, 0e30356; @kmendell).