This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+4 more
Affected surfaces
Summary
AI summaryUpdates CLI - Bug fixes, Bug fixes, and Other across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Increase max session timeout limit to one year. Increase max session timeout limit to one year. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Add support for Docker override files. Add support for Docker override files. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Restart dependent services on project‑level service restart. Restart dependent services on project‑level service restart. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Localize timezone based on current locale. Localize timezone based on current locale. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Dependency | Low |
Switch to github.com/libtnb/sqlite for SQLite dialect library. Switch to github.com/libtnb/sqlite for SQLite dialect library. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Scope project update backup to changed files and lazy‑load file tree. Scope project update backup to changed files and lazy‑load file tree. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fix workspace editor showing stale file content after save. Fix workspace editor showing stale file content after save. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Do not overwrite good image update records on registry rate‑limit errors. Do not overwrite good image update records on registry rate‑limit errors. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Skip SMTP auth without full credentials and add none auth mode. Skip SMTP auth without full credentials and add none auth mode. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
Fix git clone failures with Azure DevOps repositories. Fix git clone failures with Azure DevOps repositories. Source: llm_adapter@2026-07-15 Confidence: high |
— |
Full changelog
New features
- restart dependent services on project-level service restart (#3103 by @pkoutsovasilis)
- support for docker override files (#3104 by @kmendell)
- increase max session timeout limit to 1 year (#3222 by @OlziYT)
- localized timezone based on current locale (#3238 by @kmendell)
Bug fixes
- scope project update backup to changed files and lazy-load file tree (#3158 by @kmendell)
- workspace editor showing stale file content after save (#3188 by @kmendell)
- don't overwrite good image update records on registry rate-limit errors (#3190 by @kmendell)
- skip SMTP auth without full credentials and add none auth mode (#3192 by @kmendell)
- git clone failures with Azure DevOps repositories (#3197 by @kmendell)
- fix https links on containers list (#3191 by @ribbal)
- gitops sync failing with 'invalid hostPort: /placeholder-undefined' for compose files using variable defaults (#3198 by @kmendell)
- allow updater to update specific resource id's (#3206 by @kmendell)
- remove rbac from notification dispatch endpoint for agents (#3223 by @kmendell)
- fix image polling schedule rescheduling api shape (#3224 by @kmendell)
- overlay arcane env overrides on top of git env instead of copying (#3226 by @kmendell)
- scope aggregate access and isolate frontend session state (#3227 by @kmendell)
- prevent stale data across environment switches (#3228 by @kmendell)
- prevent invalidated fetches from repopulating caches (#3229 by @kmendell)
- wait for schedulers during shutdown (#3230 by @kmendell)
- preserve external .env symlinks on save (#3236 by @kmendell)
- restore tooltips and focus behavior for dashboard actions (#3237 by @kmendell)
- aggregate hub overload warnings (#3240 by @kmendell)
CLI - Bug fixes
- align image update checks with API contract (#3231 by @kmendell)
Dependencies
- switch to github.com/libtnb/sqlite for sqlite dialect library(5f61022 by @kmendell)
- bump docker/login-action from 4.2.0 to 4.4.0 (#3174 by @dependabot[bot])
- bump charm.land/bubbletea/v2 from 2.0.7 to 2.0.8 in /cli (#3173 by @dependabot[bot])
- bump marocchino/sticky-pull-request-comment from 3 to 3.0.4 (#3175 by @dependabot[bot])
- bump the tanstack-table group across 1 directory with 2 updates (#3176 by @dependabot[bot])
- bump react-email from 6.6.5 to 6.6.6 (#3179 by @dependabot[bot])
- bump @tanstack/virtual-core from 3.17.2 to 3.17.3 (#3181 by @dependabot[bot])
- bump github.com/wneessen/go-mail from 0.7.3 to 0.8.0 in /backend (#3201 by @dependabot[bot])
- bump github.com/getarcaneapp/arcane/types/v2 from 2.3.1 to 2.3.2 in /cli (#3202 by @dependabot[bot])
- bump charm.land/bubbles/v2 from 2.1.0 to 2.1.1 in /cli (#3200 by @dependabot[bot])
- bump pnpm to v11.10.0(6777c3e by @kmendell)
- bump golang.org/x/sync from 0.21.0 to 0.22.0 in /backend (#3203 by @dependabot[bot])
- bump @sveltejs/kit from 3.0.0-next.4 to 3.0.0-next.7 (#3184 by @dependabot[bot])
- bump docker/compose to 5.3.1(ae1cee5 by @kmendell)
- bump the aws-sdk-go-v2 group across 1 directory with 3 updates (#3217 by @dependabot[bot])
- bump the tanstack-table group across 1 directory with 2 updates (#3209 by @dependabot[bot])
- bump @xyflow/svelte from 1.6.1 to 1.6.2 (#3216 by @dependabot[bot])
- bump @codemirror/view from 6.43.5 to 6.43.6 (#3211 by @dependabot[bot])
- bump marocchino/sticky-pull-request-comment from 3.0.4 to 3.0.5 (#3208 by @dependabot[bot])
- bump go.getarcane.app/updater to v0.5.3(e66f816 by @kmendell)
- bump go to v1.26.5(bffa8ce by @kmendell)
Other
- use go.getarcane.app/docker/convert for docker run to yaml conversions (#3165 by @kmendell)
- move crypto logic into go.getarcane.app/sys/crypto (#3164 by @kmendell)
- extract streaming logic to go.getarcane.app/streams (#3166 by @kmendell)
- import shadcn-svelte css and cleanup frontned css files (#3172 by @kmendell)
- always pull latest updates for environment updater (#3196 by @kmendell)
Full Changelog: https://github.com/getarcaneapp/arcane/compare/v2.3.2...v2.4.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]