v2.12 2.5.4
caddyserver/caddySep 9, 2026 → Sep 11, 20262 days between releases
What's New
Adds new notification providers and SFTP monitor while fixing critical JSONata security vulnerability
New Features
- Signalgrid notification provider
- Notify! notification provider
- Amoot SMS notification provider
- SFTP monitor type
- Password toggle in login page
Improvements
- Security fix for JSONata vulnerability (CVE-2026-77415)
- Dependency bump for jsonata to 2.2.2
- UX improvement: password visibility toggle in login
Bug Fixes
- Always close browser context in real-browser
- Fix iOS PWA icon black background
- Correct ping timeout ceilings in monitor form
- Move afterCreate to initial mariadb pool config
- Fix accepted status codes custom range handling
Upgrade Notes
No breaking configuration syntax changes expected. The jsonata dependency has been bumped to address CVE-2026-77415. New SFTP monitor types require configuration updates if monitoring SFTP servers.
The Two Releases
v2.12
Sep 9, 2026· 1 month ago
A major update focusing on hardening connector and transport protocols with atomic file transfers, unifying the editor experience with syntax highlighting, and improving the Responses API for native tool calls.
Full release notes2.5.4
Sep 11, 2026· 1 month ago
A feature and security update adding new notification providers (Signalgrid, Notify!, Amoot SMS) and a new SFTP monitor type, while addressing critical security vulnerabilities.
Full release notes