Levelrail v0.2.0-beta.19
0.2.0-beta.19 (2026-10-11)
Features
- 0.4 compose, cutover, previews, teams, backups, observability, multi-node, upgrades (#1140) (defbafe)
- 0.5 dashboard performance, smart deploy, proxy-managed domains, shell and database UI, MCP (#1147) (a3b182a)
- api: publish an OpenAPI 3.1 spec generated from the route table (#1037) (5b7b48b)
- attention center, device login approval, setup redesign, release rollback (#1077) (3e5571d)
- brand kit page, headline variants and per-page social cards (#1094) (5fa8ad3)
- canary deploys with weighted traffic (#1065) (1173645)
- claim containers from a docker inspect snapshot (no platform token) (#1092) (bab26aa)
- CLI insights commands, reconciler half-success tests, 19 catalog templates (#1033) (7b4fcb2)
- coolify migration data path, domain wizard, environment domains, db viewer (#1074) (4d4f55e)
- database access and network, IAM policy builder, app import wizard (#1091) (261852f)
- docs: animate the product mock, add mock carousel, scroll reveal and stats strip (#1041) (363dd66)
- docs: favicons, guides, template gallery, announcements feeds (#1060) (281f201)
- docs: flat full-window hero mock, seam fix and Mastra-style FAQ (#1038) (0aa0e4d)
- docs: hero uses the product mock, .well-known ships, light-mode fix (#1035) (367a042)
- docs: homepage hero, feature cards, install chip, nav fixes (#1024) (d09533f)
- docs: site overhaul with new landing pages, grouped nav, mock kit, legal and agent-readiness (#1034) (07ce93c)
- domains, DNS, proxy coexist, traffic controls and platform hardening (0.3) (#1125) (7cbfd3c)
- extract generic packages into a nested kit module (#1014) (6c6ddda)
- first-run fixes: hide domains from search engines, proxy coexist guide, IPv4 public host (#1102) (5e94820)
- functions, requests that wake a sleeping app wait and are replayed (#1068) (ea10f20)
- glinr-bot policy evaluator, shadow-mode workflow and client-id for app tokens (#1100) (44857c1)
- install cosign by default and add upgrade-note for manual binary swaps (#1110) (689055f)
- legacy passkeys sign in and OAuth keeps built-in callback URLs under the library engine (#1029) (89dc5e7)
- library auth engine behind APP_AUTH_ENGINE with backfill (#1015) (30de820)
- list case-duplicate email groups in auth-backfill, add go/no-go checklist (#1023) (7201368)
- managed postgres pgvector variant (#1078) (1821625)
- migrate auth to the theauth library behind default-off flags (#1021) (35709ed)
- move upgrade into kit and brand-drive agent provisioning names (#1020) (63d654e)
- perf, exposure audit, migration hub, upgrade history, external databases, attention v2, fleet overview (#1087) (b53d560)
- public HTTPS port and TLS terminated upstream ingress settings (#1117) (29a6ac5)
- regenerate OG and social images on the petrol brand (#1093) (57ad3b7)
- roles and guest access, global environments, environment-aware IAM and AI control (#1048) (1ad266a)
- scripts/build-linux.sh builds the embedded-web binary with the version stamped (#1112) (9e31a8b)
- security center, session management and sign-in hardening (#1133) (f56e2b9)
- setup, HTTPS, token and image auto-update improvements (#1062) (f950623)
- sign in with a code and new-browser approval (#1115) (57d51da)
- sleep idle apps and wake them on the next request (#1066) (a6ac9b2)
Bug Fixes
- [HIGH] Server-Side Request Forgery (SSRF) in Git provider integrations (#1051) (383fa03)
- bump the mealie template to v3.28.0 (#1019) (68b8b94)
- database explorer schema for large databases, mark explorer beta (#1080) (c9aa45c)
- deflake scheduledtask replace and agent TTY close tests (#1053) (28c9c24)
- DNS check shows what each resolver answered, a timestamp and a propagating state (#1123) (5dcb0dd)
- docker snapshot apps stay image apps with a load hint, neutral secret hint (#1096) (11f518a)
- docs: code block copy button back in the corner, inline code tint only inline (#1042) (fc680c8)
- docs: readable light-mode nav panel and a balanced footer (#1040) (3eb84b5)
- docs: use the app metrics screenshot in the home hero (#1026) (f30aec4)
- egress sidecar gets NET_RAW, e2e cleanup removes service volumes (#1059) (c7423ef)
- exact 1200x630 social cards with a CTA, og:site_name, short descriptions, bolder favicon (#1097) (5ca01e7)
- explain and link the private GitHub App case when adding an organization (#1130) (2f4b4d7)
- explain and offer a fix when real certificates cannot work on non-standard ingress ports (#1114) (de9807c)
- fall back to the embedded default logo and colors when brand.yaml leaves them empty (#1075) (a7d7a8b)
- findings from real-server QA (sign-in, firewall, redeploy, templates, status UI) (#1043) (037b89d)
- git push deploys fall back to the GitHub App installation token (#1145) (5974525)
- glinr-bot talks to the GitHub API over net/http instead of spawning gh (#1103) (b1f27b7)
- levelrail.com uses the transparent mark like the control plane; add 96px icon and manifest (#1104) (b4b46da)
- library sign-in returns the second-factor step for users with TOTP (#1025) (09ce968)
- match legacy device and recovery code behavior in library auth mode (#1027) (651e98b)
- README typing banner on the petrol brand with the new headline (#1095) (a21053c)
- repair 7 catalog image pins that no longer resolve (#1031) (0e4d6c2)
- serve plain HTTP for a TLS-terminating proxy and show setup on the Proxy page (#1127) (d137fc2)
- short delta percentages and proxy-served certificate in app health (#1141) (4d965a9)
- unblock CI on main (execgate allowlist for self-upgrade files, skip test-only packages in go build) (#1148) (562cc6e)
- verify moved images by content, not image ID (#1121) (ce95bee)
Performance
- cut PR CI wall time (live suite gate, parallel fleet, plan job) (#1090) (4b74e4b)
- optimize string concatenation in joinErrors (#1061) (e0a8f73)
- scope migrations by table, guards lane, green-based nightly, scoped hooks, remote Go cache (#1131) (c5a3fbd)