Release Notes
🛡️ Ztnet
- Harden webhook delivery and scope webhook updates to the organization (#978)
- Normalize emails to lowercase on write and lookup (#979)
- Match pg_dump to the server's major version for backups (#982)
- Return member version fields (vMajor, vMinor, vProto, vRev) from the REST API (#988)
- Tighten auth surface and require a unique NEXTAUTH_SECRET (#1011)
- Upgrade better-auth to 1.7 and nodemailer to 10, enforce OAUTH_ALLOW_NEW_USERS on OAuth sign-in (#1014)
- Fix standalone install on Debian 13 and newer Ubuntu by falling back to the closest ZeroTier 1.14.2 build (#1018)
- fix(auth): create missing UserOptions for OAuth users (#1012)
- trim docker image size (#1020)
- Scope organization network API routes to the organization in the URL (#1021)
- Add WEBHOOK_ALLOW_PRIVATE_TARGETS and tighten webhook and org network checks (#1022)
- Keep the Alibaba metadata address blocked for private webhook targets (#1023)
- Declare site icons in the document head and regenerate them from the logo (#1024)
📝 Documentation
- Tighten auth surface and require a unique NEXTAUTH_SECRET (#1011)
- [Docs] Bump Dependencies (#1016)
- Add WEBHOOK_ALLOW_PRIVATE_TARGETS and tighten webhook and org network checks (#1022)
- Keep the Alibaba metadata address blocked for private webhook targets (#1023)
📦 Installer
- [Installer] Bump nodemailer (#1017)
- Fix standalone install on Debian 13 and newer Ubuntu by falling back to the closest ZeroTier 1.14.2 build (#1018)
Full Changelog: v0.8.3...0.8.4
Documentation
Contributors to this release: @maaad and @stefansaraev 🎉