Skip to content

shellhub

v0.26.0 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

cloud-computing embedded go iot linux raspberry-pi
+3 more
shellhub ssh ssh-tunnel

Affected surfaces

auth rbac

Summary

AI summary

Updates Also in this release, Enterprise and Cloud, and Under the hood across a mixed release.

Full changelog

This release adds a light theme to the console, lets the Secure Vault store its contents on the server for Cloud and Enterprise, and finalizes the move to PostgreSQL.

Upgrading from a MongoDB-based release? This version removes the remaining MongoDB code (#6569). Make sure your instance has already migrated to PostgreSQL (default since v0.22.0) before upgrading, and upgrade version by version.


Light theme for the console

The console now has a light theme alongside the dark one, with a toggle that persists your choice (#6570).

Server-side Secure Vault (Cloud and Enterprise)

The Secure Vault can now store its contents on the server, per user and encrypted, instead of only in the browser (#6478). This is a Cloud and Enterprise option; the local, browser-only vault stays the default.


Also in this release

  • List pages sync their state (filters, page, sort) to the URL, with column sorting on data tables (#6555, #6558)
  • Override the agent image at install time via AGENT_IMAGE (#6591)
  • Tighter role and membership authorization, and agent sessions hardened (#6517)
  • Keep SSH sessions alive in unprivileged LXC containers (#6458)
  • Enforce one accepted device per MAC address in a namespace, fixing duplicate-device situations that could leave a device unreachable (#6600)
  • Restore the deprecated info.platform and identity.mac device filters (#6582)

Enterprise and Cloud

  • MaxMind GeoIP moved out of the community edition into the enterprise build (#6473)
  • Enforce and surface the enterprise device limit (#6505)
  • Enforce firewall rules on cloud instances (#6588)

Under the hood

  • Removed the last MongoDB remnants now that PostgreSQL is the sole datastore (#6569)
  • Unified the monorepo on React 19 (#6584)
  • Dependency updates across all services via Dependabot

Full Changelog: https://github.com/shellhub-io/shellhub/compare/v0.25.1...v0.26.0

Breaking Changes

  • Removed all remaining MongoDB code; PostgreSQL is now the sole datastore.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track shellhub

Get notified when new releases ship.

Sign up free

About shellhub

computer: Get seamless remote access to any Linux device. Centralized SSH for the edge and cloud computing

All releases →

Related context

Earlier breaking changes

  • v0.25.0 Vue frontend deprecated and removed; React console is now the only served UI.
  • v0.25.0 MongoDB datastore removed; Postgres is now the sole storage implementation.

Beta — feedback welcome: [email protected]