Skip to content

Release history

Rackula releases

Open-source drag-and-drop rack layout designer

All releases

30 shown

No immediate action
v26.5.0 Breaking risk

SemVer → CalVer migration

Upgrade now
v0.10.1 Security relevant
Dependencies

CVE‑2026‑8723 fix

Upgrade now
v0.10.0 Breaking risk
Auth Dependencies

Security fixes + UI enhancements

Upgrade now
v0.9.5 Security relevant
Crypto / TLS Dependencies

CVE-2026-31789 fix

v0.9.4 Security relevant
⚠ Upgrade required
  • nginx DNS resolver is now configurable for Kubernetes deployments
Security fixes
  • Fix escape order in NetBox importer to prevent double‑escaping, scope CodeQL to src (#1595)
  • Bump hono to 4.12.14 and dompurify to 3.4.0, closing 7 CVEs (#1594)
Notable features
  • Separate layout naming from rack naming allowing independent names
  • Auto‑detect IPv6 availability to avoid nginx startup failure
Full changelog

Added

  • Separate layout naming from rack naming — layouts and racks can now have independent names (#1005)

Fixed

  • Device type auto-import integrates with command system for proper undo/redo (#1470)
  • Batch auto-import with placement command for atomic undo/redo
  • Context menu move up/down now checks collisions (#1462, PR #1504)
  • Unique SVG pattern IDs per rack instance to prevent cross-rack rendering conflicts (#1466, PR #1505)
  • Auto-detect IPv6 availability to prevent nginx startup failure (#1516, PR #1527)
  • Show error/warning toasts for device import failures (#1391, PR #1506)
  • Preserve slot_position and slot_width in YAML serialization (#1564, contributed by @lorenzowood)
  • Guard preset shortcuts when custom-height input is focused in new-rack wizard (#1580, PR #1604)
  • Double bay device selection (#1522, PR #1545)
  • Storage resilience — use safeStorage for all web storage access (#1392, PR #1530)
  • Make nginx DNS resolver configurable for Kubernetes (#1535, PR #1538)

Security

  • Fix escape order in NetBox importer to prevent double-escaping, scope CodeQL to src (#1595, PR #1601)
  • Bump hono to 4.12.14 and dompurify to 3.4.0, closing 7 CVEs (#1594, PR #1596)

Technical

  • Decompose App.svelte and Rack.svelte into rendering and interaction layers (#1395, #1451)
  • Extract drag-drop and context menu logic from Rack.svelte
  • Centralise E2E CSS selectors into locators.ts (#1458)
  • E2E test suite recovery — 58 failures resolved (#1508)
  • Remove root npm package-lock.json (project uses bun) (#1603)
  • Dependency updates: Svelte 5.55.5, Vite 8.0.10, marked 18.0.2, hono 4.12.14
v0.9.3 Bug fix

Fixed nginx startup failures in environments without IPv6 support. Multiple security-focused dependency upgrades for package currency.

v0.9.2 Maintenance

Technical release with refactored components, improved E2E test infrastructure, and centralized CSS selectors. No user-facing changes.

v0.9.1 New feature
Notable features
  • multi-rack share URL support (v2 schema)
  • session save on pagehide
v0.9.0 Security relevant
Security fixes
  • CRLF injection prevention in layout names
  • OIDC issuer pinning requirement
Notable features
  • local authentication mode (username/password)
v0.8.4 Security relevant
Security fixes
  • jsPDF 4.2.0 CVE patches
  • Svelte 5.53.0 with patched devalue 5.6.3
  • Hono 4.12.0
v0.8.3 Maintenance

Production deployment workflow now properly gates security severity levels to prevent medium/low advisories from blocking deployment.

v0.8.2 Maintenance

### Technical - Recut release after the deploy workflow was cancelled during , to republish and container tags

v0.8.1 Bug fix
Breaking changes
  • separate Save vs Save As user action
Notable features
  • separate Save and Save As actions
  • ProxmoxVE LXC distribution groundwork
v0.8.0 New feature
Breaking changes
  • mobile UI redesign
  • various UX changes
Security fixes
  • API CORS hardening
  • write-route authentication defaults
Notable features
  • mobile bottom navigation
  • swipe navigation
  • touch long-press menus
v0.7.9 Security relevant
Security fixes
  • @isaacs/brace-expansion ReDoS (CVSS 9.2)
  • jsPDF race condition, XMP injection, PDF injection, BMP DoS CVEs
  • nginx security header inheritance bug
Notable features
  • HSTS header
  • Referrer-Policy
  • Permissions-Policy
v0.7.7 Bug fix

Fixed persistence mode data loss with proper YAML serialization, auto-save cloud status integration, and layout auto-loading on startup.

v0.7.6 New feature
Breaking changes
  • device palette hides incompatible devices instead of graying out
Notable features
  • rack width selector with smart defaults
v0.7.4 New feature
Notable features
  • Cisco brand pack
  • 8 new brand icons
  • :persist Docker image tag
v0.7.3 Bug fix

Fixed splash screen blocking localStorage persistence, canvas sizing issues, and multi-rack layout focus positioning and alignment problems.

v0.7.2 Bug fix

### Fixed - Canvas not filling available space with small racks (#931, #897)

v0.7.0 New feature
Breaking changes
  • automatic layout format migration on first save
Notable features
  • multi-rack support
  • persistent storage API
  • UUID-based layout storage
v0.6.15 Bug fix

Fixed Safari bugs including coordinate conversion when zoomed, text selection during device drag, and logo disappearance in party mode; migrated foreignObject elements to SVG-native implementations for better compatibility.

v0.6.14 Bug fix
Notable features
  • tooltips on hover
  • IP address field
  • half-width device support
v0.6.13 Bug fix

Fixed critical Safari WebKit bug preventing device selection and drag-and-drop functionality with workaround for pointer events.

v0.6.12 New feature
Notable features
  • PlacedPort schema and instantiation
  • Connection model with port references
  • Multi-architecture Docker builds
v0.6.11 Bug fix

### Fixed - Face override not working on full-depth devices (#383, PR #385)

v0.6.10 New feature
Notable features
  • Network interface port indicators
  • Fuzzy search with Fuse.js
  • Cable data model

Beta — feedback welcome: [email protected]