This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+3 more
Affected surfaces
Summary
AI summaryUpdates Also in this release, Enterprise and Cloud, and Under the hood across a mixed release.
Full changelog
This release adds a light theme to the console, lets the Secure Vault store its contents on the server for Cloud and Enterprise, and finalizes the move to PostgreSQL.
Upgrading from a MongoDB-based release? This version removes the remaining MongoDB code (#6569). Make sure your instance has already migrated to PostgreSQL (default since v0.22.0) before upgrading, and upgrade version by version.
Light theme for the console
The console now has a light theme alongside the dark one, with a toggle that persists your choice (#6570).
Server-side Secure Vault (Cloud and Enterprise)
The Secure Vault can now store its contents on the server, per user and encrypted, instead of only in the browser (#6478). This is a Cloud and Enterprise option; the local, browser-only vault stays the default.
Also in this release
- List pages sync their state (filters, page, sort) to the URL, with column sorting on data tables (#6555, #6558)
- Override the agent image at install time via
AGENT_IMAGE(#6591) - Tighter role and membership authorization, and agent sessions hardened (#6517)
- Keep SSH sessions alive in unprivileged LXC containers (#6458)
- Enforce one accepted device per MAC address in a namespace, fixing duplicate-device situations that could leave a device unreachable (#6600)
- Restore the deprecated
info.platformandidentity.macdevice filters (#6582)
Enterprise and Cloud
- MaxMind GeoIP moved out of the community edition into the enterprise build (#6473)
- Enforce and surface the enterprise device limit (#6505)
- Enforce firewall rules on cloud instances (#6588)
Under the hood
- Removed the last MongoDB remnants now that PostgreSQL is the sole datastore (#6569)
- Unified the monorepo on React 19 (#6584)
- Dependency updates across all services via Dependabot
Full Changelog: https://github.com/shellhub-io/shellhub/compare/v0.25.1...v0.26.0
Breaking Changes
- Removed all remaining MongoDB code; PostgreSQL is now the sole datastore.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About shellhub
computer: Get seamless remote access to any Linux device. Centralized SSH for the edge and cloud computing
Beta — feedback welcome: [email protected]