v1.19.1

getarcaneapp/arcanev1.19.1May 13, 2026by kmendell

AI Summary

A bug fix release addressing UI overlapping issues, build history updates, and security improvements including rate limiting.

Key Highlights

Migrates backend router from Gin to Echo
Adds rate limiting to webhooks and auth endpoints
Fixes incorrect backend arguments for trivy on 32-bit hosts
Fixes build history not updating after completion

Full Release Notes


### Bug fixes

* show archived switch overlapping projects search bar([d02a05c](https://github.com/getarcaneapp/arcane/commit/d02a05c6314d634302d4453c0378335d1599e578) by @kmendell)
* show correct environments types in filter ([#2578](https://github.com/getarcaneapp/arcane/pull/2578) by @kmendell)
* build history not being updated after builds are completed ([#2586](https://github.com/getarcaneapp/arcane/pull/2586) by @kmendell)
* incorrect backend arg used for trivy on 32bit hosts ([#2587](https://github.com/getarcaneapp/arcane/pull/2587) by @kmendell)
* updater api authorization checks ([#2588](https://github.com/getarcaneapp/arcane/pull/2588) by @kmendell)
* deny non hmac jwt requests([d568d03](https://github.com/getarcaneapp/arcane/commit/d568d03bd5683ba838a55d3b34f9d65564788609) by @kmendell)
* add rate limiting to webhooks and auth endpoints, and add caching to user session ([#2591](https://github.com/getarcaneapp/arcane/pull/2591) by @kmendell)

### Other

* add mobile device custom redirect url for oidc ([#2580](https://github.com/getarcaneapp/arcane/pull/2580) by @kmendell)
* migrate off gin to use echo for backend router ([#2582](https://github.com/getarcaneapp/arcane/pull/2582) by @kmendell)
* store user sessions in database with proper jti ([#2590](https://github.com/getarcaneapp/arcane/pull/2590) by @kmendell)



**Full Changelog**: https://github.com/getarcaneapp/arcane/compare/v1.19.0...v1.19.1