runtipi releases

Release notes

Improvements

• Add an option to add trusted IP/CIDRs for forwarded headers. This makes Cloudflare tunnels and other VPN setups possible when the link between the proxy and runtipi is not using the same protocol. Error: Invalid request origin See docs

How to update

From the root folder of your runtipi install

• ./runtipi-cli update v4.9.3

If you are coming from version 3 or lower please follow the migration guide

Release notes

Improvements

• Sensitive values are now automatically redacted from application logs
• Swagger API documentation is no longer exposed in production environments, reducing unnecessary production surface area.
• Set maxResponseBodySize in traefik forward auth middleware

Bug fixes

• Marketplace app images no longer count against API throttling limits. This should prevent app store images from failing to load or returning rate-limit errors when browsing many apps.

How to update

From the root folder of your runtipi install

• ./runtipi-cli update v4.9.1

If you are coming from version 3 or lower please follow the migration guide

Release notes

Improvements

• Markdown descriptions now render safe embedded HTML while sanitizing unsafe content, improving app description rendering without allowing scripts or unsafe links.
• Replaced our cron library with a custom implementation to avoid an upstream bug making the server crash during daylight saving time changes
• Protected apps behind Traefik now use a dedicated forward-auth cookie instead of reusing the dashboard session cookie, improving session isolation.

Bug fixes

• Fixed a race condition during first admin/operator registration that could allow multiple operators to be created concurrently.
• Fixed an issue cause by an outdated RabbitMQ configuration.

How to update

From the root folder of your runtipi install

• ./runtipi-cli update v4.9.0

If you are coming from version 3 or lower please follow the migration guide