tugtainer

v1.30.3 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Containers & Orchestration

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

angular auto-update container-management container-monitoring container-update containers

+13 more

web devops docker docker-automation self-hosted image-watcher orchestration python rest update-checker update-tool web-ui webserver

Affected surfaces

auth

ReleasePort's take

Light signal

editorial:auto 1mo

The release adds a guard that verifies auth providers are enabled before login attempts and fixes OIDC refresh token handling in the backend.

Why it matters: Ensures authentication flows only proceed when providers are active; critical for preventing failed logins. Fixes OIDC refresh‑token bugs (severity 40) that could cause access interruptions.

Summary

AI summary

Fixed OIDC refresh token handling and added a guard to ensure auth providers are enabled before login attempts.

Changes in this release

Type	Severity	Summary	CVE
Security	High	Checks OIDC/password auth providers are enabled before login attempt. Checks OIDC/password auth providers are enabled before login attempt. Source: llm_adapter@2026-06-11 Confidence: high	—
Bugfix	Medium	Fixes OIDC refresh token handling in backend. Fixes OIDC refresh token handling in backend. Source: llm_adapter@2026-06-11 Confidence: high	—

Full changelog

v1.30.3 (2026-06-11)

Bug Fixes

backend: OIDC refresh tokens (91bc17b)
security: Check OIDC/password auth providers is enabled before trying to login by @finderer (76371db)

Detailed Changes: v1.30.2...v1.30.3

Security Fixes

Check OIDC/password auth providers are enabled before login to prevent unauthorized attempts

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track tugtainer

Get notified when new releases ship.

About tugtainer

An application for automated Docker container updates with a web UI

All releases →

Related context

Related tools

Earlier breaking changes

v1.30.4 Requires AGENT_SECRET environment variable.