Stable releases of August 26, 2026

Everything that shipped on the stable channel on August 26, 2026 — v2.9.2 through v2.9.4, newest first. v2.9.4 is what you install; the versions below it are how you get there.

Stable v2.9.4

• fix(wordpress): generate a random admin username for new installs
• feat(security): fail2ban jail for wp-login.php request floods
• feat(wordpress): rename default admin username + hide login URL via Toolkit

Stable v2.9.3

• feat(wordpress): rename the default admin username + hide the default login URL via the WordPress Toolkit
• feat(security): fail2ban jail against wp-login.php request floods (fleet-wide)

Stable v2.9.2

• feat(security): cross-admin session visibility + remote logout (G9)
• feat(gdpr): self-service and admin customer data export
• feat(security): persist AppArmor denial history across agent restarts
• fix: hide non-functional cPanel import, stop changelog auto-overwrite

Stable v2.9.2

• fix(security): retry the AppArmor denial watcher instead of dying silently