v0.29.2

Dokploy/dokployv0.29.2Apr 25, 2026by github-actions[bot]

AI Summary

This release addresses a critical Cross-Origin IDOR vulnerability (GHSA) and introduces invitation email functionality for organizations, alongside various bug fixes.

Key Highlights

Fixed Cross-Origin IDOR vulnerability (GHSA f8wj-5c4w-frhg)
Added invitation email functionality for organization creation
Fixed webhook error responses leaking SQL queries
Added authorization checks for server and host-level schedules
Fixed .zip deployment date parsing error

New Features

Added invitation email functionality for organization creation

Full Release Notes

## What's Changed
* fix(schedule): add authz checks for server and host-level schedules by @Siumauricio in https://github.com/Dokploy/dokploy/pull/4279
* Fix/ghsa f8wj 5c4w frhg cross org idor by @Siumauricio in https://github.com/Dokploy/dokploy/pull/4298
* fix: drop .zip deployment - isDate is not a function by @NomisCZ in https://github.com/Dokploy/dokploy/pull/4129
* feat: implement invitation email functionality for organization creation by @Siumauricio in https://github.com/Dokploy/dokploy/pull/4302
* fix: stop leaking Drizzle SQL queries in webhook error responses (#4276) by @sajdakabir in https://github.com/Dokploy/dokploy/pull/4281
* fix: filter requests by hostname instead of path by @manalkaff in https://github.com/Dokploy/dokploy/pull/4255
* fix: fallback to DownstreamStatus when OriginStatus is 0 in requests table by @Siumauricio in https://github.com/Dokploy/dokploy/pull/4303

## New Contributors
* @NomisCZ made their first contribution in https://github.com/Dokploy/dokploy/pull/4129
* @sajdakabir made their first contribution in https://github.com/Dokploy/dokploy/pull/4281

**Full Changelog**: https://github.com/Dokploy/dokploy/compare/v0.29.1...v0.29.2