v4.1.4 v3.7.13
medium risk
alibaba/MNNSep 4, 2026 → Sep 4, 20260 days between releases
What's New
Newer release focuses on security and HTTP/3 updates, whereas the older release focused on UI and documentation.
Breaking Changes
- Migration guide required for v3.7.13
New Features
- Dedicated transport per HTTP/3 client connection
Improvements
- Bumped github.com/go-acme/lego/v5 and quic-go dependencies
Bug Fixes
- Fixed multiple CVEs
- Fixed sticky cookie expiration
- Prevented user enumeration in basic auth
Upgrade Notes
Please read the migration guide provided in the release notes to ensure compatibility. The release also fixes security vulnerabilities and updates dependencies.
The Two Releases
v4.1.4
v4.1.4
Sep 4, 2026· 2 months ago
Updates the user interface and documentation, including adding a RepoCloud deploy button and fixing outdated documentation links.
Full release notesv3.7.13
v3.7.13
Sep 4, 2026· 2 months ago
This release focuses on security by fixing multiple CVEs and updating dependencies for ACME, HTTP/3, and QUIC libraries. It includes various bug fixes for middleware, authentication, and server configuration handling.
Full release notes