This release adds a light theme to the console, lets the Secure Vault store its contents on the server for Cloud and Enterprise, and finalizes the move to PostgreSQL.
Upgrading from a MongoDB-based release? This version removes the remaining MongoDB code (#6569). Make sure your instance has already migrated to PostgreSQL (default since v0.22.0) before upgrading, and upgrade version by version.
Light theme for the console
The console now has a light theme alongside the dark one, with a toggle that persists your choice (#6570).
Server-side Secure Vault (Cloud and Enterprise)
The Secure Vault can now store its contents on the server, per user and encrypted, instead of only in the browser (#6478). This is a Cloud and Enterprise option; the local, browser-only vault stays the default.
Also in this release
- List pages sync their state (filters, page, sort) to the URL, with column sorting on data tables (#6555, #6558)
- Override the agent image at install time via
AGENT_IMAGE(#6591) - Tighter role and membership authorization, and agent sessions hardened (#6517)
- Keep SSH sessions alive in unprivileged LXC containers (#6458)
- Enforce one accepted device per MAC address in a namespace, fixing duplicate-device situations that could leave a device unreachable (#6600)
- Restore the deprecated
info.platformandidentity.macdevice filters (#6582)
Enterprise and Cloud
- MaxMind GeoIP moved out of the community edition into the enterprise build (#6473)
- Enforce and surface the enterprise device limit (#6505)
- Enforce firewall rules on cloud instances (#6588)
Under the hood
- Removed the last MongoDB remnants now that PostgreSQL is the sole datastore (#6569)
- Unified the monorepo on React 19 (#6584)
- Dependency updates across all services via Dependabot
Full Changelog: v0.25.1...v0.26.0