• v0.3.4 bfa220525a

    v0.3.4 Stable

    franz released this 2026-06-01 17:19:26 +00:00 | 119 commits to master since this release

    Security

    • Resolved RustSec advisories: dropped unused rand, bumped lru to 0.16

    Builds, checksums and packages: https://github.com/franzos/stackpit/releases/tag/v0.3.4

    Downloads
  • v0.3.3 3aa6888ae5

    v0.3.3 Stable

    franz released this 2026-06-01 17:00:04 +00:00 | 120 commits to master since this release

    Changed

    • Docker images rebased on Debian trixie

    Added

    • CI scans dependencies for RustSec advisories (non-blocking)

    Builds, checksums and packages: https://github.com/franzos/stackpit/releases/tag/v0.3.3

    Downloads
  • v0.3.2 9fe316c28d

    v0.3.2 Stable

    franz released this 2026-05-31 09:03:18 +00:00 | 121 commits to master since this release

    Fixed

    • PostgreSQL: rate-limited projects crashed with a column decode error

    Builds, checksums and packages: https://github.com/franzos/stackpit/releases/tag/v0.3.2

    Downloads
  • v0.3.1 4978ed8f05

    v0.3.1 Stable

    franz released this 2026-05-31 07:30:36 +00:00 | 122 commits to master since this release

    Added

    • Docker images published to GHCR on release (SQLite and PostgreSQL variants)

    Builds, checksums and packages: https://github.com/franzos/stackpit/releases/tag/v0.3.1

    Downloads
  • v0.3.0 d502f4018f

    v0.3.0 Stable

    franz released this 2026-05-28 18:21:44 +00:00 | 126 commits to master since this release

    Changed

    • Web UI redesigned around the "Stackpit Precision Tooling" design system:
      240px fixed sidebar, dark cockpit canvas with a matching light variant,
      Inter + JetBrains Mono, dense tables, semantic status pills, tonal layers
      without shadows
    • Per-project navigation moved from a horizontal tab strip into the sidebar
    • CSS is now pre-built from Tailwind v4 via the standalone CLI (make css);
      runtime stays single-binary — no Node or node_modules at runtime
    • Fonts are vendored as woff2 under assets/fonts/ and served from _assets/
      (no external CDN)

    Builds, checksums and packages: https://github.com/franzos/stackpit/releases/tag/v0.3.0

    Downloads
  • v0.2.1 7c19c12399

    v0.2.1 Stable

    franz released this 2026-05-28 06:50:33 +00:00 | 127 commits to master since this release

    Added

    • Email alerts via Lettermint and SendGrid in addition to Postmark
    • Global [email] config with optional lock to fix provider and sender across integrations

    Builds, checksums and packages: https://github.com/franzos/stackpit/releases/tag/v0.2.1

    Downloads
  • v0.2.0 2a0cf7b556

    v0.2.0 Stable

    franz released this 2026-05-27 19:27:47 +00:00 | 128 commits to master since this release

    Added

    • OAuth 2.0 / OIDC single sign-on (Authorization Code + PKCE) with just-in-time user provisioning
    • API bearer auth via JWT (RS256/JWKS) and RFC 7662 token introspection
    • MCP endpoint (/mcp, bearer-only)
    • external_url / external_ingest_url config for deployments behind a proxy
    • Operator guide (docs/operator-guide.md)

    Changed

    • Admin token is now a break-glass fallback that runs alongside OAuth/OIDC
    • OAuth requires a 32-byte master key; IdP tokens stored encrypted at rest

    Builds, checksums and packages: https://github.com/franzos/stackpit/releases/tag/v0.2.0

    Downloads
  • v0.1.8 33e3fbe3af

    v0.1.8 Stable

    franz released this 2026-04-23 18:51:31 +00:00 | 130 commits to master since this release

    Security

    • SSRF: decode IPv6-embedded IPv4 in 6to4, NAT64, Teredo, and IPv4-compatible forms before private-range checks
    • SSRF: block additional v4 ranges (0.0.0.0/8, limited broadcast, 198.18.0.0/15 benchmark, 240.0.0.0/4 class E)
    • Webhook test client refuses HTTP redirects to keep DNS-pinning effective
    • API key validation runs constant-time compare on hit, miss, and DB-error paths

    Changed

    • Filter engine snapshot switched from RwLock<Arc<_>> to arc_swap::ArcSwap for lock-free reads
    • Release profile opt-level raised from "s" to 3
    • Source map artifact bundle parsing moved off the async runtime via spawn_blocking
    • Threshold alert accumulators use BTreeMap for deterministic iteration

    Added

    • Background tasks run under a panic-observing supervisor that logs instead of silently dropping
    • Chunk upload enforces per-request field count and total byte caps
    • Artifact bundle parser caps entry count and per-entry size

    Fixed

    • Envelope and notification dispatch no longer panic on unknown level/type values

    Builds, checksums and packages: https://github.com/franzos/stackpit/releases/tag/v0.1.8

    Downloads
  • v0.1.7 a4812f2118

    v0.1.7 Stable

    franz released this 2026-04-04 20:35:59 +00:00 | 131 commits to master since this release

    Fixed

    • Source map and release uploads via sentry-cli
    • Upload chunk isolation and write safety

    Builds, checksums and packages: https://github.com/franzos/stackpit/releases/tag/v0.1.7

    Downloads
  • v0.1.6 8566d0aa78

    v0.1.6 Stable

    franz released this 2026-04-04 15:06:57 +00:00 | 132 commits to master since this release

    Added

    • Per-project API keys for source map and release uploads (spk_ prefix, SHA-256 hashed)
    • Source Maps settings page with key generation, setup guide for sentry-cli
    • API key auth on all Sentry-compatible upload endpoints (/api/0/)

    Fixed

    • Project "First Seen" no longer changes with the time filter
    • "All time" filter now propagates correctly to project detail views

    Added

    • Browser defaults: configurable default filters (status, level, period) stored as a cookie
    • Settings page at /web/settings/defaults/ to manage defaults
    • List pages redirect to fill in missing filter params from saved defaults

    Builds, checksums and packages: https://github.com/franzos/stackpit/releases/tag/v0.1.6

    Downloads