C
v3.130.0
3.130.0 (2026-08-01) Features Socks5 proxy supports auth (#5687) (2313913)
C
v3.129.0
3.129.0 (2026-08-01) Features add avatar claim to custom jwt (#5688) (2ba1cbb)
C
v3.128.0
3.128.0 (2026-07-30) Bug Fixes serve uploaded files with sandbox, nosniff and attachment headers (#5668) (2b9a052) Features clean up sessions for all applications, not only app-built-in (3f67672)
C
v3.127.0
3.127.0 (2026-07-30) Features keep logout audit records when logPostOnly is enabled (27a9c58)
C
v3.126.0
3.126.0 (2026-07-30) Features reject forgot password for LDAP users before sending the code (c13cd7a)
C
v3.125.0
3.125.0 (2026-07-24) Features capture Beego session id before regeneration so logout deletes the DB session row (8bb6c39)
C
v3.124.0
3.124.0 (2026-07-24) Features preserve device userCode through social login round-trip (f9f608f)
C
v3.123.0
3.123.0 (2026-07-22) Features adapt forget password placeholder to configured providers (216da12)
C
v3.122.0
3.122.0 (2026-07-22) Features match email case-insensitively in GetEmailAndPhone (554a879)
C
v3.121.0
3.121.0 (2026-07-21) Features keep lastSigninTime as previous login in password grant token (e3003a4)
C
v3.120.0
3.120.0 (2026-07-21) Features unmask Email/SMS provider categories so forget password works (cf17074)
C
v3.119.0
3.119.0 (2026-07-17) Features hide forget-password verification methods without a matching Email/SMS provider (24f6273) populate user last_signin_time and last_signin_ip on login (50e77ad)
C
v3.118.0
3.118.0 (2026-07-17) Features change provider Content field to mediumtext to fix overflow error (33a571e)
C
v3.117.0
3.117.0 (2026-07-14) Features show MFA setup for LDAP users with empty signupApplication (c52a703)
C
v3.116.0
3.116.0 (2026-07-14) Features emit LDAP memberOf as valid DN instead of raw "owner/name" group id (4b1915e)
C
v3.115.0
3.115.0 (2026-07-12) Features fix cramped toolbar buttons and unnecessary scrollbars in admin UI (#5641) (d567f69)
C
v3.114.0
3.114.0 (2026-07-11) Features fix unreadable dark mode text on entry pages (login, signup, forget) (#5640) (26c1d52)
C
v3.113.0
3.113.0 (2026-07-10) Features don't hide global scrollbar, revert: 0077839 (7f95e39) guide users instead of erroring when WeChat login opens in-app without an Official Account (8f7b4ff)
C
v3.112.0
3.112.0 (2026-07-10) Features use mediumtext for description fields to remove length limit (cf3e41d)
C
v3.111.0
3.111.0 (2026-07-09) Features prevent application pageHtml from leaking into management console (0a5946d)
C
v3.110.0
3.110.0 (2026-07-09) Features redirect to /account via full reload when password update is required (2079030)
C
v3.109.0
3.109.0 (2026-07-09) Features add missing new-user-ldap/new-user-syncer webhook events to UI (6db0dce)
C
v3.108.0
3.108.0 (2026-07-05) Features support recipient for notification sending (#5627) (a4a5184)
C
v3.107.0
3.107.0 (2026-07-04) Features execute embedded scripts in custom signin/signup HTML (88d5aed)
C
v3.106.0
3.106.0 (2026-07-04) Features avoid full table scan and run token cleanup asynchronously on startup (e17fce7)
C
v3.105.0
3.105.0 (2026-07-02) Features clear unsupported domains for permissions on models without domain definition (5389dee)
C
v3.104.0
3.104.0 (2026-07-02) Features honor userNavItems for home redirect and nav item checkboxes (d690517)
C
v3.103.0
3.103.0 (2026-07-02) Features remove length limit on permission description field (0ba963e)
C
v3.102.0
3.102.0 (2026-06-30) Features add missing Content-Type header to JSON fetch requests (06aeb81)
C
v3.101.1
3.101.1 (2026-06-30) Bug Fixes enable short state for Telegram OIDC in provider_hint redirect (c369b3c)