Require an elevated session for creating users (GHSA-phfm-q6fr-wv34 via #1048) Move theme selection and password change to separate settings page (#1040 via #1041 by @justadityaraj) Disable password change form when GOTIFY_LOCALAUTH_ENABLED is disabled (#1040 via #1041 by @justadityaraj) Fix crash when a Let's Encrypt request fails (#1046 by @NotAFlightRisk) Update dependencies
Notable features: Add setting GOTIFY_LOCALAUTH_ENABLED for disabling local user authentication Docs (#1007 via #1020 by @DerDummePunkt) Allow mapping user admin status from OIDC claims OIDC Groups Docs (#957 via #1033 by @UiP9AV6Y) Prompt for re-authentication when authenticating with OIDC by default, configurable via GOTIFY_OIDC_PROMPT (#1029 by @DerDummePunkt) Add setting GOTIFY_OIDC_IDP_NAME to…
Notable features: Add OIDC login support. See OIDC Docs (#433 via #941, #977, #982, #1003) Thanks to @KovachVL and @alanturing881 for reporting security issues for this feature. Add session elevation for sensitive actions in the web UI. Session Elevation Docs (GHSA-3hcj-9m7p-wwm9, #944 via #952, #954). Automatically delete inactive clients/sessions (#943 via #959) Breaking changes: The config.yml…
Fix crash at startup for MySQL (#920 via #923) Fix sorting of applications for MySQL & Postgres (#923) Update to go1.26
Add "push message" dialog to UI (#276 via #897 by @AlliotTech) Use system theme for default UI theme (#851 via #902 by @AlliotTech) Allow undo for delete message (#791 via #903 by @AlliotTech) Add drag&drop reordering for applications (#358 via #909 by @xavier-GitHub76) Fix UI warnings (#906 by @eternal-flame-AD)
Allow deleting application image (#448 via #855, #873) by @xavier-GitHub76, @LaurenceJJones Fix rendering of embedded images in markdown (#857) by @ggqshr Upgrade to gorm.io/gorm (#862 via #863) by @eternal-flame-AD Add file type restriction to application image upload (#872) by @LaurenceJJones Throttle audio notification (#850 via #869) by @LaurenceJJones Normalize paths for better support with r…
Add logging to lets encrypt certificate operations (#843) Fix TLS challenge for lets encrypt (#845 via #843) Allow configuring staging endpoint for lets encrypt (#843) Fix read-more message detection (read-more button not showing) (#846 via #848)
Fix serving web ui on a subpath (#839 via #840)
consistent app ordering (#802) by @ldidry collapse big messages (#790 via #810) by @jeremygooch improve UI accessibility and consistency (#815) by @martinfrancois skip dotfiles and directories when loading plugins (#811 via #812) by @eternal-flame-AD compact message layout (#824) allow setting _target in markdown (#762 via #818) internal: update UI dependencies (#574,#695 via #818) by @mfechner mi…
(broken build)
Fix release build.
Set umask=0 when creating unix sockets (#741 via #743) by @eternal-flame-AD Update dependencies
Fix crash when setting boolean config value via environment variable #731 (comment) via #734