This release adds 3 notable features for engineering teams evaluating rollout.
Published 1mo
Configuration Management
✓ No known CVEs patched
✓ No known CVEs patched in this version
Affected surfaces
auth
Summary
AI summaryUpdates Highlights, v2, and Authentication across a mixed release.
Full changelog
🚀 External REST API (v1 & v2)
This release adds a token-authenticated public REST API to rConfig Core.
Highlights
- Versioned REST API under
/api/v1and/api/v2— devices, configs, config-changes (v2), templates, categories, commands, vendors, tags, tasks, users, device-credentials, plus dashboard/health and download-now actions. - API key workflow — generate, view once, and revoke API tokens under Settings → REST API. Requests authenticate with the
apitokenheader (or query parameter). - In-app documentation — a built-in docs site at Settings → REST API → Documentation with sidebar navigation and per-endpoint reference for the installed endpoints.
Notes
- Authentication: send
apitoken: YOUR_TOKENas a request header on every call. - The editions comparison now lists REST API Access as available in Core.
🤖 Generated with Claude Code
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- vcore-8.2.8 Granting Admin role now requires the acting account to already hold Admin role.
- vcore-8.2.8 `role` field on user create/update validates against fixed set of allowed values.
Beta — feedback welcome: [email protected]