Uptime Kuma Versions Save

🐞 Bug Fixes

• #4692 Fixed language setting issues: Localisation-matching algorithm missing some edgecase (Thanks @CommanderStorm)
• #4700 Fixed TLS issues: Getting TLS certificate through proxy & prometheus update (Thanks @chakflying)

[!WARNING] The i18n detection mehanism which matches your languages and our languages introduced in #4244 was too basic (depending on your setup you might or might not be affected) See #4692 for further details.

[!WARNING] If you use proxys, please use 1.23.11 instead, as the more reliable events from #4630 don't take this part into consideration. If you want to prevent such breakages in the future, we would be very happy with increasing the test-coverage in general ^^

💇‍♀️ Improvements

• #4477 Improved helptext of how to send mail via the systems mail subsystem (Thanks @apio-sys)
• #4630 Feat: Use keylog event to obtain TLS certificate for better reliability [1.23.X] (Thanks @chakflying)

🐞 Bug Fixes

• #4326 Fix encodeBase64 for empty password or user in HTTP Basic Authentication (Thanks @Saibamen)
• #4244 made sure that the i18n does use navigator.languages instead of navigator.language for automatic language detection (Thanks @CommanderStorm)
• #3598 fix(notification-dingding): throw error when failed (Thanks @AnnAngela)
• #4417 Fix: Make sure browser is connected before returning (Thanks @chakflying)
• #4425 Fix: [JSON-Query] Prevent parsing string-only JSON (Thanks @chakflying)
• #4631 Fix: Add missing FK for monitor-tls-info table [1.23.X] (Thanks @chakflying)

⬆️ Security Fixes

• GHSA-23q2-5gf8-gjpp
• #4653 fix: Update nodemailer to fix GHSA-9h6g-pr28-7cqp [1.23.X] (Thanks @Saibamen)
• #4652 fix: Update axios, @actions/github and dompurify [1.23.X] (Thanks @Saibamen)
• Update all dependencies

🦎 Translation Contributions

Others

• #4633 Fix: Fix CI on Windows Runner [1.23.X] (Thanks @chakflying)
• Other small changes, code refactoring and comment/doc updates in this repo:

💇‍♀️ Improvements

• Update dependencies

🐞 Bug Fixes

• #4224 Fix: origin undefined on error handling (Thanks @chakflying)
• #4231 [Non-docker] Fixed the Tailscale monitor issue which was broken in 1.23.8

⬆️ Improvements

• #4216 Due to a security patch in 1.23.9, some Uptime Kuma setups behind a reverse proxy required re-configuration. It is no longer necessary now.
  • If you added UPTIME_KUMA_WS_ORIGIN_CHECK=bypass in the previous version, you should remove it to enhance protection, unless you are using some 3rd-party plugins/apps.

⬆️ Security Fixes

• #4213 https://github.com/louislam/uptime-kuma/security/advisories/GHSA-88j4-pcx8-q4q3 was not fully patched due to a careless mistake (Thanks @chakflying)

[!CAUTION] If you are using a reverse proxy, the security fix may cause connection issue to the WebSocket server. You should add ProxyPreserveHost on in your <VirtualHost> for Apache, and proxy_set_header Host $host; for Nginx. Read more: https://github.com/louislam/uptime-kuma/issues/4210#issuecomment-1849227424

[!WARNING] If you are using a 3rd-party frontend/tools this may be a breaking change, as the WebSocket Origin has to now match your server hostname. Set the environment variable UPTIME_KUMA_WS_ORIGIN_CHECK=bypass to skip this check. See GHSA-mj22-23ff-2hrr for further details.

⬆️ Improvements

• #4163 Add an aria-label to the monitor search box (Thanks @CommanderStorm)
• #4175 chore: added a helptext for ntfy's priority field (Thanks @CommanderStorm)

🐛 Bug Fixes

• #4186 Fix: Correct Maintenance Start/End Time Input to Use Explicitly Specified Timezone (Thanks @Ritik0102)
• #4162 Fixed the buttons of ActionsSelect and ActionsInput having a default type="submit" (Thanks @CommanderStorm)

⬆️ Security Fixes

• https://github.com/louislam/uptime-kuma/security/advisories/GHSA-88j4-pcx8-q4q3 Fix: Changing Password did not close all logged in socket connections immediately
• https://github.com/louislam/uptime-kuma/security/advisories/GHSA-mj22-23ff-2hrr WebSocket server can only be connected from the same origin only (Similar to the CORS policy)
• Added an environment variable UPTIME_KUMA_WS_ORIGIN_CHECK: cors-like (default) and bypass

Others

• Other small changes, code refactoring and comment/doc updates in this repo:
• #4158 (Thanks @Saibamen)

Please let me know if your username is missing, if your pull request has been merged in this version, or your commit has been included in one of the pull requests.

💇‍♀️ Improvements

• #4139 Default Retries values from 1 to 0
• #4132 #4133 Improved accessibility (Thanks @CommanderStorm)
• #4141 Added support for /snap/bin/chromium (Ubuntu's default Chromium path)

🐞 Bug Fixes

• #4123 Fixed an issue that Tailscale monitor could freeze Uptime Kuma, which is caused by the last Tailscale monitor security fix.

Dependencies

• #4136 Updated gamedig from ~4.1.0 to ^4.2.0
• #4140 Updated apprise from 1.4.5 to 1.6.0

💇‍♀️ Improvements

• #4053 Show the original timeout message again and +10 seconds for abort signal
• #4054 Improved error message on abort signal timeout (Thanks @chakflying)

🐞 Bug Fixes

• #4084 Fixed a memory leak issue. Close the client postgresql connection after rejection. (Thanks @mvaled)
• #4088 Reverted "Restart running monitors if no heartbeat", which causes some issues from 1.23.4 to 1.23.6.

⬆️ Security Fixes

• f28dccf4e11f041564293e4f407e69ab9ee2277f An XSS issue in the "Google Analytics ID" text field (Reported by @gtg2619) https://github.com/louislam/uptime-kuma/security/advisories/GHSA-v4v2-8h88-65qj
• #4095 Rewrite Tailscale ping using spawnSync (Reported by @vaadata-pascala) https://github.com/louislam/uptime-kuma/security/advisories/GHSA-hfxh-rjv7-2369
• b689733d59139f158de95b0017865c867d0c7159 getGameList, testChrome are no longer accessible without login

Others

• Other small changes, code refactoring and comment/doc updates in this repo:

[!WARNING] Update for Docker users: Since we updated the base image to Node.js 18 previously, the DNS resolver is a bit different for IPv6. Read more: https://github.com/louislam/uptime-kuma/issues/4027#issuecomment-1817783803

• 954e05b72f3c565957e88237270de176c4a219ca Fixed an TLS issue that only in Node.js <=16, which is caused by #4044

• #4032 Fixed an issue that paused monitors were being resumed automatically (Thanks @chakflying)
• #4044 Allow legacy TLS renegotion by default again
• #4043 Should be a final fix for the kafka migration script issue
• #4045 Should be a final fix for the timeout issue

Others

• Other small changes, code refactoring and comment/doc updates in this repo: @WilliamDavidHarrison

For testing timeout issue