Added
- Activity log — a full audit trail of who did what. New Activity page in the sidebar (under System) lists every meaningful action: device add/edit/delete, IP-service toggles, command runs, upgrades, backups create/delete/download, user/site/webhook/template changes, license activations, and login events (success, failure, 2FA). Each row shows when, who, what, on which resource, and the result; click any row to see the full sanitized payload — including before/after for device edits, which service was toggled and on which device, and the target devices for a mass command. Filter by user / action / resource / result / date range, search across users and resources, export the current view as CSV. Admins see everything; operators and viewers see only their own actions. Sensitive fields (passwords, tokens, secrets, encrypted blobs) are masked before anything is stored. Live tail (admin-only): toggle live mode and new events flash in at the top in real time. Default retention is 90 days, configurable via the
ACTIVITY_LOG_RETENTION_DAYSenv var. SQLite installations only.
Changed
- Internal: updated the WebAuthn / passkey library to 13.x to remove a deprecated transitive dependency. No functional change — existing passkeys keep working, no re-registration needed.