• v1.18.0 bd6784c5ff

    v1.18.0 — Auth & UI Foundation
    Some checks failed
    Publish / detect-release (push) Successful in 6s
    Publish / tag (push) Failing after 0s
    Publish / publish-containers (push) Has been skipped
    Publish / promote-release (push) Failing after 0s
    CI / lint-and-test (push) Successful in 4m15s
    Stable

    Gravity Bot released this 2026-02-21 18:37:09 +00:00 | 127 commits to main since this release

    What's New

    Complete auth system overhaul and UI foundation for Gravity PM.

    Auth System

    • Replace Zitadel with Authelia as OIDC identity provider
    • Replace hand-rolled sessions with scs + Valkey store
    • Replace hand-rolled OIDC with goth provider
    • Three auth modes: OIDC (external), built-in (local email+password), guest
    • Sec-Fetch-Site CSRF middleware
    • DEV_AUTH mode for local development
    • First-run setup wizard for auth configuration
    • Dual auth middleware (sessions + bearer tokens)

    Theming

    • Theme model with builtin seed data (Catppuccin Mocha, Catppuccin Latte, Nord, Dracula, etc.)
    • Theme REST API (CRUD + resolve)
    • CSS variable injection with Tailwind theme integration
    • Live theme preview on user settings — instant preview on card selection
    • Admin theme management (create/edit/delete custom themes)

    Settings

    • App settings singleton with migration
    • Settings REST API (admin + user)
    • Admin settings with theme card picker (replaces dropdown)
    • User settings: appearance (theme picker + color mode) and profile
    • Admin pages always render with server default theme

    Navigation & Layout

    • Auth-aware header with user menu dropdown
    • Admin layout with sidebar navigation

    Infrastructure

    • Dual-mode edge proxy: Tailscale multi-node + custom domain via Caddy
    • Tailscale stale node cleanup on boot (prevents hostname collisions)
    • Caddyfile templates for tailscale and domain modes
    • setup.sh interactive wizard for stack configuration
    • Seed command for test data
    • Makefile dev compose override

    Bug Fixes

    • Fix DevAuth logout route GET→POST (OP#1237)
    • Fix header logout to use POST form (OP#1238)
    • Fix EnsureAdminUser overwriting setup wizard admin (OP#1239)
    • Fix OIDC issuer mismatch for Docker split URLs (OP#1240)
    • Fix UpdateUserPreferences scan column mismatch (OP#1241)

    Stats

    • 33 commits | 43 work packages (5 epics, 29 tasks, 4 features, 5 bugs)
    • All unit + integration tests passing (84 total)
    • E2E tested: built-in auth, OIDC via Authelia, theme preview, admin pages
    Downloads