v0.4.4
IceWhaleTech/CasaOSv0.4.4Jul 14, 2023by github-actions[bot]
AI Summary
Major overhaul of the application store, architecture, and security.
Key Highlights
- Complete app store upgrade with 30+ new apps and Docker-compose support.
- Migrated to Socket.io for real-time communication.
- Added global environment variable management.
- Fixed critical security vulnerabilities (CVE-2023-37265, CVE-2023-37266).
Breaking Changes
- Removed settings, update, and clone functions for installed applications.
- Removed random port assignment feature.
- Removed application sorting functionality.
- Removed application cloning function.
New Features
- New applications (Adminer, Alist, ChatbotUI, etc.)
- Multi-language support
- 12-hour and 24-hour time toggle
- Fahrenheit and Celsius temperature toggle
- File syntax checking (JS, CSS, HTML, JSON, YAML)
Full Release Notes
New Appstore - The application store has been fully upgraded with the addition of 30+ new applications, including support for composite applications. - New applications: Adminer, Alist, ChatbotUI, Cloudflared, Databag, EmulatorJS, Handbrake, MariaDB, Memos, MineOS, Mongo, MongoDB4, Overseerr, Petio, PostgreSQL, Resilio-sync, Snapdrop, Stash. - You can add third-party app sources from one page ( the page link will be live ,align with 0.4.4 in this week), offering thousands of applications to choose from. - Migrated from Docker-cli to Docker-compose. - Added support for multiple languages. - Added author type filters to the app store. - Supports assigning multiple applications to the same network. - Added management of global environment variables, allowing injection of arbitrary environment variables into all CasaOS applications, such as OPENAI_API_KEY . - Added relevant subcommands for managing global environment variables . - Synchronized application list to the local system, providing more stability. - Potential issues (if concerned, please hold off on upgrading): - Removed the settings, update, and clone functions for installed applications. Installed applications can not be updated or have their configurations changed, but their expected operation and data remain unaffected! - Removed the feature of randomly assigning ports when there is a port conflict in applications. - Removed the sorting function for applications in the application store. - Removed the application cloning function. Added - Changed the synchronization method between frontend and backend to socket.io, using socket.io communication throughout the application's lifecycle. - Added a prompt feature to applications, allowing users to save passwords or query default passwords in the tips section - Clicking on the time allows switching between 12-hour and 24-hour formats - Clicking on the CPU temperature allows toggling between Fahrenheit and Celsius - Added the functionality to download system logs. - Added the file editor performs syntax checking for the following file formats: JavaScript, CSS, HTML, JSON, YAML. Security Advisories( Fixed) - CVE-2023-37265: Incorrect identification of the source IP address. - CVE-2023-37266: Weak JWT secret. - Fixed a security vulnerability (credits: @thomas-chauchefoin-sonarsource @CorrectRoadH). - If you are still on an older CasaOS version, please do not expose your CasaOS to anyone you do not trust. See details by searching CVE IDs in https://github.com/advisories. Fixed - Optimized some styles and aesthetics. - Fixed sorting and other issues in the file list. - Fixed the issue of incorrect paths when downloading multiple files. - Fixed the forced JSON formatting behavior of the editor when saving files. - Faster speed for app update checks. - Adjusted fonts on the log, console, and other pages to match the native console. - Merged the "Exited Applications" panel into the application list. - Fixed the mounting issue when there are no partitions on the disk.