12 releases 12 tags

RSS feed

• v0.6.2 8539ad5f6a

  Compare

  v0.6.2 Stable

  Gravity Bot released this 2026-02-28 16:33:38 +00:00 | 0 commits to main since this release

  What's Changed

  Features

  • Kiosk operation mode — Featured dashboard snapshot/restore, per-IP deletion tracking, daily reset, setup wizard integration (OP#1763)
  • User-facing dashboard import — Import dashboards from Dashy config with safe defaults and access control (OP#1824)
  • Theme system improvements — Live preview on appearance page, admin pages forced to server default theme (OP#1793)
  • Server default dashboard — Set dashboard as server default from admin panel, auto-create when none exists (OP#1835, OP#1836)
  • Live footer preview — Composite footer reorder and preview in admin settings (OP#1832, OP#1839)
  • OIDC session revalidation — Periodic revalidation on ~32h interval (OP#1761)
  • Immediate status checks — Trigger checks for newly created/imported items (OP#1840)

  Bug Fixes

  • Status indicators stuck gray — Duplicate element IDs from edit/view mode dual rendering caused getElementById to update hidden copy (OP#1838)
  • SSE endpoint returning 500 — statusWriter missing http.Flusher interface broke streaming (OP#1857)
  • Polling timers perpetually reset — SSE reconnect errors cleared and recreated intervals before they could fire (OP#1858)
  • Toolbar overflow — Extending page horizontally (OP#1831)
  • Settings cache — Invalidate after UpdateSettings and setup completion (OP#1833, OP#1796)
  • Toolbar visibility — Hide container when no actions available (OP#1798)
  • Status indicator rendering — Not rendering after batch OOB swap (OP#1841)
  • Status checks disabled — Enable by default and log when disabled (OP#1841)

  Security & Hardening

  • Access control — Guest mode read-only, rate limiter map caps, kiosk DELETE restricted to item paths (OP#1795)
  • Auth hardening — Password length cap, email regex, metadata logging, OIDC secret warnings (OP#1669, OP#1760)
  • Session security — DB error logging in revalidation, X-Forwarded-For for client IP (OP#1814, OP#1823)
  • SSE resource management — Channel close on unsubscribe, client limits, reconnect backoff (OP#1670)
  • Frontend lifecycle — Stale polling IDs, stuck animation flag, resize leak (OP#1671)
  • Accessibility — ARIA labels, focus traps, dialog roles (OP#1672)
  • Chart.js SRI — Subresource integrity hash for CDN script (OP#1673)
  • DeletionTracker bypass — Block unknown IPs when map is full (OP#1813)

  Test Coverage

  • Kiosk mode enforcement and daily reset (OP#1791)
  • User import access control and isolation (OP#1829)
  • Theme resolution for admin and preview (OP#1801)
  • Setup flow cache invalidation and toolbar (OP#1797)
  • ListTokensByType and InvalidateTokens (OP#1759)

  Housekeeping

  • Remove redundant migration 00028 (OP#1674)
  • Add goose annotations to migration 00035

  Stats

  • 42 commits, 53 tasks closed across 6 epics
  • 2 tasks deferred to v0.7.0 (OP#1830, OP#1837)

  Install

  docker pull git.bros.ninja/mike/gashy:v0.6.2
  

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads