Stable releases of July 26, 2026¶

Everything that shipped on the stable channel on July 26, 2026 — v2.6.16 through v2.6.24, newest first. v2.6.24 is what you install; the versions below it are how you get there.

Stable v2.6.24¶

feat(sites): selectable Node.js/Python runtime versions per app (phase 2)
docs(sites): document the Node.js/Python app manager (create + runtime dialog)

Stable v2.6.23¶

feat(sites): Node.js/Python app manager — lifecycle, env, logs, deps (phase 1)

Stable v2.6.23¶

docs(wordpress): document the Wordfence CVE feed (key-free, local matching, CC BY-SA)

Stable v2.6.22¶

feat(wordpress): local Wordfence CVE feed for the WP toolkit (key-free, privacy-first)

Stable v2.6.22¶

Maintenance and stability improvements

Stable v2.6.21¶

fix(agent): heal broken apt state before the controlled downgrade + accept date versions
build(release): date-based testing versions (YYYY.MM.DD.NN), stable stays semver

Stable v2.6.20¶

fix(agent): self-heal MariaDB provider plugins autoremoved by the vendor upgrade
style(acme): fix misspell honour->honor (golangci-lint gate)
feat(ssl): TLS-Health distinguishes 'waiting for DNS' from actionable SAN drift
fix(ssl): show Let's Encrypt's real retry-after on rate-limit errors + honour it
feat(updates): controlled downgrade to the channel version + drift explanation

Stable v2.6.19¶

fix(domains): auto-create www for redirect + site-less domains, not just site domains
feat(wordpress-toolkit): cache statistics with live FastCGI probe (ext 1.1.0)

Stable v2.6.18¶

feat(dashboard): pending-reboot banner with confirmed one-click reboot
feat(customers): type-to-confirm modal before deleting a customer

Stable v2.6.17¶

fix(sites): customers can edit PHP settings within package caps (completes self-service)

Stable v2.6.16¶

feat(packages): PHP-limit caps enforced on customer self-service PHP settings
fix(master-ftp): remove orphaned bindfs mount units on single-site delete
docs(ssl): document RepairSSL + startup self-heal + multi-IP preflight; readme contributor