v3.0.0

Notable features:

• Add OIDC login support. See OIDC Docs (#433 via #941, #977, #982, #1003)
  • Thanks to @KovachVL and @alanturing881 for reporting security issues for this feature.
• Add session elevation for sensitive actions in the web UI. Session Elevation Docs (GHSA-3hcj-9m7p-wwm9, #944 via #952, #954).
• Automatically delete inactive clients/sessions (#943 via #959)

Breaking changes:

• The config.yml file is no longer supported, convert it to the new env format with migrate-config.
• If you set list or map environment variables, their syntax changed, see List and map syntax.
• API tokens are no longer returned in the GET endpoints and are only exposed on creation or rotation. See Tokens are only shown once.
• If you have scripts hitting client-token endpoints, they may now need elevation.
• The paging.next URL in message list responses is now a relative path. See Paging next URL is relative.

Miscellaneous changes:

• Rework configuration (#366, #392 via #967)
• Don't store tokens in plain text (#325 via #971 by @eternal-flame-AD)
• Publish a gotify/server:master docker image for testing unreleased changes. Docs: Testing master (#953, #956)
• Allow sending messages with a client token (#964)
• Allow refreshing application tokens (#985 via #986 by @eternal-flame-AD)
• Increase token keyspace to >128 bits (#936 via #939 by @eternal-flame-AD)
• Switch logging to zerolog (#962)
• Add OCI labels to docker images (#924 via #927 by @eternal-flame-AD)
• Use use HTTP-only session cookies instead of local storage for UI sessions (#941)
• Add createdAt to users, clients, applications and plugins (#959)
• Add a CLI with gotify serve, gotify version and gotify migrate-config commands (#967)
• Fix Messenger plugins that are added after init (#653 via #998 by @TowyTowy)
• Update dependencies

v2.9.1

• Fix crash at startup for MySQL (#920 via #923)
• Fix sorting of applications for MySQL & Postgres (#923)
• Update to go1.26

v2.9.0

• Add "push message" dialog to UI (#276 via #897 by @AlliotTech)
• Use system theme for default UI theme (#851 via #902 by @AlliotTech)
• Allow undo for delete message (#791 via #903 by @AlliotTech)
• Add drag&drop reordering for applications (#358 via #909 by @xavier-GitHub76)
• Fix UI warnings (#906 by @eternal-flame-AD)

v2.8.0

• Allow deleting application image (#448 via #855, #873) by @xavier-GitHub76, @LaurenceJJones
• Fix rendering of embedded images in markdown (#857) by @ggqshr
• Upgrade to gorm.io/gorm (#862 via #863) by @eternal-flame-AD
• Add file type restriction to application image upload (#872) by @LaurenceJJones
• Throttle audio notification (#850 via #869) by @LaurenceJJones
• Normalize paths for better support with reverse proxies (#533 via #875) by @TrungNNg
• Fix negative "time ago" in messages overview (#893 via #894) by @eternal-flame-AD
• Update dependencies

v2.7.3

• Add logging to lets encrypt certificate operations (#843)
• Fix TLS challenge for lets encrypt (#845 via #843)
• Allow configuring staging endpoint for lets encrypt (#843)
• Fix read-more message detection (read-more button not showing) (#846 via #848)

v2.7.2

Fix serving web ui on a subpath (#839 via #840)

v2.7.1

• consistent app ordering (#802) by @ldidry
• collapse big messages (#790 via #810) by @jeremygooch
• improve UI accessibility and consistency (#815) by @martinfrancois
• skip dotfiles and directories when loading plugins (#811 via #812) by @eternal-flame-AD
• compact message layout (#824)
• allow setting _target in markdown (#762 via #818)

internal:

• update UI dependencies (#574,#695 via #818) by @mfechner
  • migration from unmaintained libraries
  • upgrade react, typescript
  • move to vite for building the ui
• update backend dependencies
• update to go1.25.1

v2.7.0

(broken build)

Version 2.6.3

Fix release build.

Version 2.6.2

• Set umask=0 when creating unix sockets (#741 via #743) by @eternal-flame-AD
• Update dependencies