Note
This release fixes agent-mode startup and performance problems, tightens certificate and update verification, and corrects several Docker, Swarm, and backup behaviors. Agents now skip manager-only work, and updates are always verified.
Agent mode
- Skip manager-only scheduled jobs in agent mode (#4779, @gongloo)
- Skip manager-only RBAC and OIDC backfills on agent startup (#4776, @gongloo)
- Avoid redundant SQLite prepared statement cache and read pool on agent (#4778, @gongloo)
- Strip CR and LF from agent tunnel values in logs (#4771, @kmendell)
Security and updates
- Reject legacy edge SPIFFE client certificates (#4795, @kmendell)
- Remove the
newSelfUpdaterpreview and always verify updates (#4773, @kmendell) - Bump
kit.getarcane.app/acfsto v0.10.3 (#4796, @kmendell)
Docker and containers
- Time out Docker disk usage requests (#4774, @kmendell)
- Match digest-strategy containers to tag update records (#4772, @kmendell)
- Pass enabled features into Docker backend builds (#4793, @kmendell)
Stacks and configuration
- Keep stack
.envacross git syncs and editor saves (#4783, @NullishUsername) - Skip global env file writes when unchanged or read-only (#4794, @kmendell)