Pulse v5.1.0-rc.2
This RC focuses on comprehensive security hardening, enhanced reporting, and stability improvements.
What's New
Security Hardening
- Endpoint authorization: Added scope checks across all AI endpoints (chat, patrol, approvals, config, models).
- WebSocket security: Fixed scope validation and agent impersonation vulnerabilities in Socket.IO connections.
- API protection: Secured test-notification, stats, diagnostics, and admin endpoints with proper auth.
- Vulnerability fixes: Addressed SAML, SSRF, approval replay attacks, and OAuth scope bypass issues.
- Host token binding: Fixed credential exposure and AI findings scope in multi-tenant setups.
Reporting
- Executive Summary: PDF reports now include an executive summary with actionable insights and recommendations.
- Enriched metrics: Reports include detailed resource information for better context.
- SSD life fix: Corrected SSD life interpretation (100% now correctly indicates healthy, not worn).
Discovery
- URL suggestions: Auto-suggest web interface URLs for discovered services based on detected ports.
- Transparency features: Added Discovery Transparency & Trust features for better visibility.
- UX improvements: Fixed routing, host identification, and feedback during scans.
UI
- Backup warnings: Permission warnings now shown on Backups page when access is limited.
- Star prompt: GitHub star prompt for returning users to support the project.
- Drawer fixes: Fixed text overflow and colspan issues in drawer cards.
Platform & Agents
- Windows support: Added uninstall command support for Windows in the UI.
- Backup visibility: Agent now granted PVEDatastoreAdmin for proper backup visibility.
- OpenAI compatibility: Fixed endpoint support for OpenAI-compatible chat providers.
- Kiosk Mode: Enhanced with auto-enable logic and magic link generation.
Fixes (Selected)
- Memory leak from stale metrics history and rate tracker entries now prevented.
- SSE race conditions and alert user spoofing resolved.
- Multi-tenant persistence and backend stability issues fixed.
- AI patrol concurrency and streaming issues addressed.
- PBS instance selection now correctly filters backup list.
- Alert resolution now records incident timeline during quiet hours.
- Node drawer colspan no longer causes table layout shift.
- Discovery button no longer flashes during scan/refetch cycle.
Installation
Docker (recommended):
docker pull rcourtman/pulse:5.1.0-rc.2Docker Compose:
Update your docker-compose.yml to use rcourtman/pulse:5.1.0-rc.2
See the Installation Guide for complete setup instructions.
Installation
Docker (recommended):
docker pull rcourtman/pulse:5.1.0-rc.2Docker Compose:
Update your docker-compose.yml to use rcourtman/pulse:5.1.0-rc.2
See the Installation Guide for complete setup instructions.