Upgrade Instructions
https://github.com/johnsusek/praeco#upgrading
Pull nginx_config/default.conf and docker-compose.yml as well as the new images. Both files are mounted from your own checkout, so the images alone do not deliver these fixes. Update default.conf before or together with elastalert-server 20261115, or the rule Test button stops working.
Release Notes
ElastAlert Server
https://github.com/johnsusek/praeco/wiki/praeco-&-elastalert-server-docker-image-relations-table
https://github.com/johnsusek/elastalert-server/blob/master/DockerImageLog.md
Bugfix
- Security fixes in praecoapp/elastalert-server:20261115, see the image log above
Praeco
Breaking changes
- nginx rejects API and websocket requests whose Origin matches neither Host nor X-Forwarded-Host. Behind another reverse proxy, pass the original Host or set X-Forwarded-Host
- docker-compose binds the elastalert-server ports 3030 and 3333 to localhost
Bugfix
- Rule alert text and subject are escaped instead of rendered as HTML, so markup in a rule no longer runs in the browser and text containing < or & is no longer mangled on save
- Release check points at johnsusek/praeco