Sync the self-hosting stack

This commit is contained in:
2026-10-04 16:45:34 +02:00
parent 1b21f29825
commit 0c1a866c72
+25
View File
@@ -9,6 +9,31 @@ one of them changed. An entry says which artefact and which version, so `web 0.1
Every version published to a channel appears here. Nothing is written from memory afterwards: a build
cannot be published without its entry.
## 2026-10-04 — Sign in with a passkey alone `api 0.119.0` `web 0.145.0`
The sign-in page now offers **Sign in with a passkey** and passkey suggestions in the email field.
Your fingerprint, face or device PIN releases the key; no email or password is needed. Cancelling
the prompt leaves the form ready to use.
In **Settings → Security**, register a key with **Use it to sign in without a password** enabled.
Existing discoverable passkeys can work too; if yours is not offered, register a new one with that
switch enabled. Passwords and passkeys used as a second factor continue to work.
**Settings → Platform → Sign-in** has a **Passkey sign-in** switch, on by default. The option appears
only on a secure page using the instance's configured public hostname. Turning the switch off
refuses new passwordless sign-ins, including prompts opened before it was turned off.
Successful passkey sign-ins and key enrolment/removal are recorded in the audit log. Removing a key
ends the other sessions it opened, including their live connections; the session removing it stays
signed in after confirming the password. The first key enrolment also closes other sessions.
Challenge budgets now count unanswered attempts correctly, and anonymous passkey answers are checked
against the failure budget even when their challenges were opened in advance. IPv6 addresses in the
same /64 share a budget. Expired suggestions refresh quietly and do not count as failed signatures.
Update the API and web console together. The schema update adds three columns with compatible
defaults; no new environment variable is required.
## 2026-10-01 — Remote desktop keeps up, a smaller notice, a simpler viewer `api 0.118.0` `web 0.144.0` `agent 0.30.0`
**The picture keeps up.** On a large screen the agent managed 3 or 4 frames a second while anything