Stable-Releases vom 6. Oktober 2026

Alle Änderungen, die am 6. Oktober 2026 im Stable-Kanal erschienen sind — von v2.10.5 bis v2.10.6, neueste zuerst. Installiert wird v2.10.6; die Versionen darunter sind der Weg dorthin.

Stable v2.10.6

• Maintenance and stability improvements

Stable v2.10.5 — Security

• fix(security): the posture snapshot sweep stopped before its first customer

Stable v2.10.5

• fix(dashboard): a server's percentage and load chart share a row instead of stacking
• feat(mail): an install with no branding at all gets our own logo in the band
• fix(mail): balance the body zone so the gap before the footer matches the one after the brand band
• fix(mail): the default envelope gives the page a margin, lets the card shrink and widens the inset
• fix(ui): the brand plate is the body surface in dark too, so the band has no step
• fix(ui): the brand plate is the left half of the header band, and the two fleet charts share a row
• feat(sitebuild): the decided name rules become one setting (ADR-011 step 4)
• fix(lint): US spelling in the new certificate tests
• fix(tls): the TLS health report judges the certificate it actually fetched
• fix(ssl): a wildcard certificate counts for the names it covers
• fix(nginx): the HTTPS catch-all covers HTTP/3 too, so an unserved name stops leaking a customer's certificate
• fix(lint): US spelling in the mail-host cert test
• fix(mail): a dedicated mail server can finally get a certificate for its hostname
• fix(lint): US spelling in the delete-job comment
• fix(ui): delete dialogs name what the servers kept and force only on a separate button, own-certificate replace needs confirmation, alias and subdomain show the certificate warning, decision counter on the dashboard
• fix(packages): a new subscription's first site gets its package's slice limits
• fix(packages): a small tier no longer gets a slice that kills its own PHP master
• build(release): refuse a version number the repository already carries
• fix(agent): a start no longer rewrites healthy vhosts — the body-size migration only touches pre-template vhosts, the panel vhost keeps its security.txt Expires
• fix(tls): drop the registry row of an own certificate once nothing claims its name
• fix(subscriptions): only an admin may force a subscription delete past leftovers on the servers
• fix(sitebuild): a preview host is claimed only while its site has the preview, no prefix shortcut
• feat(ssl): RepairSSL reconciles the own-certificate marker with the recorded intent, plus the decision counter and the report flag
• refactor(sitebuild): one source for the claim question, the request builder reads the NameSet (ADR-011 step 3, behavior unchanged)
• fix(toolkits): the auto-login helpers carry the enconf prefix, and the panel stops hard-coding the file name
• fix(changelog): the testing version span comes from testing tags, not from the name of a stable tag
• feat(sitebuild): the NameSet observation week starts by itself on an undecided install (ADR-011 step 2b)
• feat(sitebuild): NameSet shadow mode compares the decided rules with the legacy ones and records the differences (ADR-011 step 2)
• fix(mail): the certbot deploy hook rebuilds Postfix's SNI map so a renewal reaches Postfix at once
• refactor(sitebuild): one NameSet derivation behind the name functions (ADR-011 step 1, behavior unchanged)
• fix(dashboard): the update notice sits with the other alerts again
• fix(i18n): name the dashboard sections by action and state in 13 languages
• fix(dashboard): name the operator bands after the action, not the damage
• fix(ui): brand plate - the logo zone of the sidebar and sign-in tile follows the theme, own logo gets a dark-lettered twin for light ground
• docs: repair and TLS architecture follow the domain teardown, DKIM repair and own-certificate work
• fix(ssl): panel vhost keeps its certificates with reseller domains, renewed certificates reach separate mail nodes, vhost writes are atomic
• fix(settings): the panel name can be cleared again
• fix(ssl): a disabled or suspended site stays held through re-renders, the startup backfill leaves deleted names alone, www shadow rows get no zone
• feat(dashboard): operator view - open findings table, per-server load history, fleet traffic, enconf logo in the update window
• feat(ssl): the certificate list names what is served, FTP skips own certificates, expiry and alias warnings for own certificates
• feat(ssl): reissue, renewal, repair and doctor leave your own certificate alone
• feat(ssl): your own certificate stays — marker, resolver, validated install with rollback
• fix(ssl): US spelling in the ssl-off test (lint)
• fix(delete): subscription and customer deletion stop when the servers keep something, and clean the domain names too
• feat(traffic): fleet-wide daily traffic summary endpoint for the admin dashboard
• fix(ssl): turning SSL off removes HTTPS from the vhost even while the certificate stays on disk
• fix(domains): a live site's primary domain stays, shared names keep their files, admins can force past a dead agent
• fix(ssl): heal every vhost with a missing certificate in one pass
• fix(mail): every domain with active mail gets a DKIM key and a published record
• fix(domains): the leftover scan no longer reports system hosts' mail certificates
• fix(ui): site_id preselection in the WordPress toolkit and malware scanner, dead navigate targets fail the build
• fix(domains): deleting a domain removes everything that belongs to its name
• fix(doctor): update WordPress opens the toolkit, not the dashboard
• fix(ssl): deleting a site removes its own certificate and private key
• fix(domains): one name-claim check on every path that creates a hostname
• fix(subscriptions): suspending never deletes a site's files