Latest release
Version 0.2.0
Safe
From 0.1.0
4
SECURITY
6
FIX
1
IMPROVEMENT
- Security Admin service AJAX requires CSRF token and Manage Clients privilege; errors are generic to clients.
- Security Console proxy tunnels use short-lived PVEAuthCookie (not long-lived PVEAPIToken); shared secret only via header/POST.
- Security PVEAuthCookie is HttpOnly; SVG media icons reject scriptable content.
- Fix Provision jobs refuse empty node selection and log rollback stop/delete failures.
-
Fix
Release build stamps
moduleVersion.phpBUILD_VERSION; finalize detectsincludes/licensing; cron usesstorage/cron.lock. - Improvement localAPI calls pass an active admin username for CLI/cron contexts.
- Security Client console AJAX omits VNC/SPICE tickets from JSON (viewer URL / session only).
- Fix AfterCronJob shares storage/cron.lock with cron/run.php.
- Fix License key validator accepts legacy SRV-PXV- prefix alongside PS-.
- Fix Admin UI loads merged language from admin session (AR fallback to EN).
- Fix Dashboard widget properties untyped for WHMCS AbstractWidget compatibility.
Previous releases
Version 0.1.0
- New Addon admin shell with Overview, Nodes, VM List, Resource, Media Manager, Products, Operations, and Configuration.
- New Cluster connections, nodes inventory, and distribution policies for guest placement.
- New IPv4 / IPv6 address and subnet management with assignment logs.
- New Templates Center for KVM, LXC, ISO libraries, OS families, firewall templates, scheduled backups, and cloud-init snippets.
- New VM Plan / Cloud Plan package editor with Standard and Advanced modes.
- New Cron Scheduler page with catalog, jobs, and schedules tasks plus manual run actions.
- New Client Area Capability Gates and console proxy configuration.
- Improvement Admin forms use Lagom-style switches, field tips, and consistent modal sizing.
- Fix Firewall template and Cron Scheduler localisation and layout polish for operator workflows.