Version history
From canasta
Canasta
Canasta version history:
- 1.0.0 - April 14, 2022 - Initial version
- 1.0.1 - April 14, 2022 - Update MediaWiki version to 1.35.6
- 1.1.0 - April 29, 2022 - Rename /user-extensions and /user-skins directories to /extensions and /skins
- 1.1.1 - June 16, 2022 - Disable sitemap generator by default; update CommentStreams extension; remove Favorites and MobileDetect extensions; add iputils-ping package
- 1.1.2 - July 12, 2022 - Update MediaWiki version to 1.35.7; add default setting of $wgServer; add CookieWarning extension; update CommentStreams, Echo and EmbedVideo extensions; remove HeadScript extension; add poppler-utils package for PDF rendering
- 1.2.0 - October 2, 2022 - Update MediaWiki version to 1.35.8; remove cfLoadExtension() and cfLoadSkin() functionality in favor of symlink-based approach; add displayWikiInfo.php script; make use of gateway.docker.internal to detect host address
- 1.2.1 - November 25, 2022 - Add AArch64 support; update SimpleBatchUpload extension
- 1.2.2 - December 22, 2022 - Fix installation of EmailAuthorization extension; fix web installer to also install Boostrap extension if Chameleon skin gets installed; add MW_MAP_DOMAIN_TO_DOCKER_GATEWAY as an environment variable (set to true by default); remove patches made unnecessary by cfLoad... removal
- 1.3.0 - February 17, 2023 - Update MediaWiki version to 1.39.0; update all extensions to a compatible version (in most cases, using the REL1_39 Git branch); add the extensions AbuseFilter, DeleteBatch, MediaUploader, Mermaid, SemanticDependencyUpdater, TemplateWizard, Title Icon, UserPageViewTracker, WatchAnalytics, WhosOnline; remove the extensions DiscussionTools, LocalisationUpdate; add the skin Vector 2022; add header warning to email-related special pages if $wgSMTP is not set
- 2.0.0 - December 11, 2023 - Add wiki farm support; add maintenance-scripts/ directory; add automated symlinking of local versions of extensions and skins; add AWS, EditAccount, GTag, JWTAuth, TemplateSandbox, Semantic Tasks and Semantic Watchlist extensions
- 2.0.1 - April 14, 2024 - Update MediaWiki version to 1.39.7; move extension installation settings from Dockerfile into extensions.yaml; rename run-apache.sh to run-all.sh; remove WikiForum extension
- 3.0.0 - June 23, 2025 - Move most functionality into CanastaBase repository (which currently uses MediaWiki 1.43), leaving only extension- and skin-specific code; place all extension and skin installation settings into a single file, contents.yaml, which in turn inherits from "Recommended Revisions" page; add the DiscussionTools, InlineComments, LoginNotify, OAuth, Page Schemas, QuickInstantCommons and Paragraph-based Edit Conflict Interface ("TwoColConflict") extensions; remove the Graph, RenameUser, Semantic Breadcrumb Links, Semantic Forms Select, Semantic Tasks and TinyMCE extensions
- 3.0.1 - June 30, 2025 - Update to CanastaBase 1.0.1, which uses MediaWiki 1.43.2
- 3.0.2 - July 1, 2025 - Update to CanastaBase 1.0.2, which uses MediaWiki 1.43.3; update Contribution Scores and WhosOnline extensions
- 3.0.3 - September 3, 2025 - Update to CanastaBase 1.0.3; get MediaWiki version from CanastaBase instead of hardcoding it; add Babel, CLDR, CreateRedirect, RandomSelection, RegexFunctions, RelatedArticles, RSS, TemplateStylesExtender and VariablesLua extensions; update Cargo, JWTAuth, Maps and WatchAnalytics extensions
- 3.0.4 - October 3, 2025 - Update to CanastaBase 1.0.4, which uses MediaWiki 1.43.4; update Admin Links, Cargo, EmbedVideo and Page Forms extensions
- 3.0.5 - October 8, 2025 - Update to CanastaBase 1.0.5, which uses MediaWiki 1.43.5
- 3.0.6 - December 2, 2025 - Update to CanastaBase 1.0.6; fix Chameleon skin error; update Approved Revs, Cargo, UserPageViewTracker and WatchAnalytics extensions
- 3.0.7 - December 17, 2025 - Update to CanastaBase 1.0.7, which uses MediaWiki 1.43.6; update Contribution Scores and WhosOnline extensions
- 3.1.0 - February 10, 2026 - Update to CanastaBase 1.1.0; update Approved Revs, Cargo, External Data, Flex Diagrams and WhosOnline extensions
- 3.2.0 - February 18, 2026 - Update to CanastaBase 1.2.0; remove special handling for Semantic MediaWiki
- 3.2.1 - February 24, 2026 - Update to CanastaBase 1.2.1; stabilize Canasta version tag to always point to the actual version commit; update SimpleMathJax and SubPageList extensions
- 3.3.1 - March 1, 2026 - Show Canasta version on Special:Version
- 3.3.2 - March 2, 2026 - Update to CanastaBase 1.3.1
- 3.4.0 - March 4, 2026 - Version alignment with Canasta-CLI 3.4.0
- 3.5.0 - March 8, 2026 - Version alignment with Canasta-CLI 3.5.0
- 3.5.1 - March 9, 2026 - Version alignment with Canasta-CLI 3.5.1
- 3.5.2 - March 22, 2026 - Update to CanastaBase 1.3.2; update WSOAuth extension
- 3.5.3 - April 7, 2026 - Update to CanastaBase 1.3.3, which uses MediaWiki 1.43.8; add the CrawlerProtection extension
- 3.5.4 - April 10, 2026 - Update to CanastaBase 1.3.4
- 3.5.5 - April 15, 2026 - Update to CanastaBase 1.3.5
- 3.5.6 - April 16, 2026 - Update to CanastaBase 1.3.6; fixes broken skin rendering and API access on wiki farms with sub-path wikis
- 3.5.7 - April 21, 2026 - Update to CanastaBase 1.3.7
- 3.5.8 - May 15, 2026 - Add DynamicSidebar extension; update Cargo and Mermaid extensions
- 3.5.9 - June 7, 2026 - Accidental release; no change
- 3.5.10 - June 8, 2026 - Update to CanastaBase 1.3.9; update PageForms extension
- 3.5.11 - June 29, 2026 - Update to CanastaBase 1.3.10, which uses MediaWiki 1.43.9 (security release); add the CreateUserPage extension; update the Cargo extension
- 3.5.12 - June 30, 2026 - Update to CanastaBase 1.3.11; update the TemplateStyles extension for css-sanitizer 6 compatibility, fixing the broken Composer build in 3.5.11
- 3.5.13 - July 1, 2026 - Update to CanastaBase 1.3.12; fix errors in downloading the EmbedVideo, WhosOnline and WSOAuth extensions (the latest code was accidentally downloaded); remove no-longer-used persistent directory for Semantic MediaWiki
- 3.5.14 - July 2, 2026 - Update to CanastaBase 1.3.14; remove dead CirrusSearch and SMW maintenance scripts (#652); remove a no-op CI test job (#654)
- 3.5.15 - July 3, 2026 - Update the Maps and OAuth extensions (security updates) and the Page Forms extension
- 3.5.16 - July 14, 2026 - Update the Cargo extension
CanastaBase
CanastaBase version history:
- 1.0.0 - June 18, 2025 - Initial version. Based on version 2.0.1 of Canasta, but with the following changes: MediaWiki upgraded to 1.43.0; extension and skin download and handling removed; Postfix added; Debian upgraded to 12.8; USE_EXTERNAL_DB handling fixed; MW_VOLUME mountpoint check removed
- 1.0.1 - June 30, 2025 - Upgrade to MediaWiki 1.43.2
- 1.0.2 - July 1, 2025 - Upgrade to MediaWiki 1.43.3
- 1.0.3 - September 3, 2025 - Fixes for the creation of extension/skin symlinks; removed the setting of $wgJobRunRate to 0; added 404 response for nonexistent URLs; renamed mail variables for consistency; added X-Forwarded-For information to log files
- 1.0.4 - October 3, 2025 - Upgrade to MediaWiki 1.43.4
- 1.0.5 - October 8, 2025 - Upgrade to MediaWiki 1.43.5
- 1.0.6 - November 27, 2025 - Added OCI labels exposing the bundled MediaWiki version and branch for easier image introspection
- 1.0.7 - December 16, 2025 - Upgrade to MediaWiki 1.43.6
- 1.0.8 - February 2, 2026 - Changed to new configuration directory structure; added MW_SECRET_KEY and DISABLE_DIRECTORY_MONITOR environment variables; fixes for extension and skin symlink generation; fixed job runner in non-farm mode; fixed handling of DB access in wait-for-it.sh; fixed handling of non-standard web server port; added php8.1-bcmath extension
- 1.1.0 - February 10, 2026 - Upgraded PHP version from 8.1 to 8.2, enabling the use of LuaSandbox for Scribunto; added public_assets/ directory for publicly accessible wiki files; moved Vector skin loading out of CanastaDefaultSettings.php; fixed MediaWiki purging to also purge Varnish cache; fixed running of maintenance scripts for wiki farm setup; added gitinfo.json files to restore correct Special:Version display, after removal of .git directories; changed health check to access /server-status instead of MediaWiki API
- 1.2.0 - February 18, 2026 - Replaced individual Composer installs with a single install (via composer.local.json) for all relevant extensions and skins; moved sitemap storage to public_assets/ directory; removed CanastaUtils.php; removed generated installedExtensions.txt and installedSkins.txt files; removed automatic call to Semantic MediaWiki's rebuildData.php; re-added warning if $wgSMTP is not set; fix for $wgMetaNamespace for wiki names containing spaces; permission fix for writing to log
- 1.2.1 - February 24, 2026 - Moved .composer-deps-hash and .smw.json to config/persistent/ directory
- 1.3.0 - March 1, 2026 - Removed Postfix; added YAML settings file loading for extensions/skins; added styled 404 page and optional wiki directory for wiki farms; derived $wgServer scheme from MW_SITE_SERVER instead of hardcoding HTTPS; added default MediaWiki error logging and log rotation
- 1.3.1 - March 1, 2026 - Show distribution version on Special:Version via SoftwareInfo hook
- 1.3.2 - March 22, 2026 - Removed default.vcl (now managed by CLI installation template); switched FarmConfigLoader from PECL yaml to Symfony YAML parser; fixed composer hash check to account for require and repositories sections; skip Varnish CDN settings when CANASTA_ENABLE_VARNISH is explicitly disabled (backward compatible: Varnish remains enabled by default)
- 1.3.3 - April 7, 2026 - Upgrade to MediaWiki 1.43.8; GitHub actions upgrades
- 1.3.4 - April 10, 2026 - Removed canasta_img.php in favor of upstream img_auth.php; removed public_assets.php so files are served directly from the filesystem; fixed composer hash mismatch and sourced-entry-point bugs at container startup; added opt-in CANASTA_ENABLE_VERY_SHORT_URLS env variable for root-relative short URLs
- 1.3.5 - April 15, 2026 - Fixed img_auth.php and rest.php for private wiki farms with sub-path wikis; subdirectory .htaccess no longer prefixes passthrough rules with wiki path and uses [END] flag to prevent catch-all re-entry
- 1.3.6 - April 16, 2026 - Fixed .htaccess to route sub-path wiki entry points (load.php, api.php, rest.php, index.php, img_auth.php) to the real PHP files instead of falling through to the catch-all rewrite; fixes broken skin rendering and API access on wiki farms with sub-path wikis
- 1.3.7 - April 20, 2026 - Added external database support: $wgDBserver, $wgDBuser, and $wgDBpassword now read from MYSQL_HOST, MYSQL_USER, and MYSQL_PASSWORD environment variables; non-standard database ports are appended to $wgDBserver as host:port; version tag publishing workflow now only fires on VERSION changes, making the published tag immutable
- 1.3.8 - June 7, 2026 - Added Ghostscript and Xpdfutils to support PDF rendering and thumbnailing
- 1.3.9 - June 8, 2026 - Removed (unnecessary) addition of Xpdfutils
- 1.3.10 - June 29, 2026 - Upgrade to MediaWiki 1.43.9 (security release); MW_VERSION and MW_CORE_VERSION are now build-time ARGs (overridable with docker build --build-arg) so a non-default MediaWiki version or branch can be built without editing the Dockerfile (#185); wait for LocalSettings.php with an external database to prevent startup exit 123 (#176); guard PHP-FPM log directory setup against an unset PHP_LOG_DIR (#177); detect host-side directory events without the inotify ISDIR flag so host-added extensions and skins are picked up (#179); heal config/persistent ownership before run_autoupdate (#180); guard canastaLoadConfigYaml against a null $wgSettings (#181)
- 1.3.11 - June 30, 2026 - Fail the image build when the unified Composer update fails to resolve or leaves a bundled extension's dependencies uninstalled, instead of silently shipping an image with an incomplete vendor/; added a build-time dependency self-test that aborts the build if any merged-in extension's required package is missing from vendor/ (#187)
- 1.3.12 - July 1, 2026 - Fail the image build if there are Git errors during extension and skin setup (#190)
- 1.3.13 - July 2, 2026 - Idempotent Apache/.htaccess generation (#197); fail the build on Composer and Git errors (#195); maintenance-script fixes (#194); Dockerfile hardening (#198)
- 1.3.14 - July 2, 2026 - Fix public_assets file serving (logo, favicon) for wikis.yaml with indented entries (#202)
Canasta CLI
Canasta CLI version history:
- 0.1.0-alpha - July 22, 2022 - initial version
- 1.0.0 - August 3, 2022 - add "skin" and "extension" commands; add restic "unlock", "list", "check" and "diff" commands; add ability to enable/disable multiple extensions or skins at the same time; many bug fixes
- 1.2.0 - October 25, 2022 - add install.sh and build.sh scripts; add "version" command; change default behavior from "keep" to "delete" on import error
- 3.3.1 - March 1, 2026 - Major rewrite. CLI version now aligned with Canasta image version via a single VERSION file. Added Kubernetes orchestrator support alongside Docker Compose; embedded all stack files and templates into the CLI binary; added wiki farm management (
canasta add,canasta remove); addedcanasta config get/set/unsetcommands; addedcanasta devmode enable/disablefor xdebug support; addedcanasta upgradewith--dry-runflag and self-update; addedcanasta exportcommand; addedcanasta maintenance execcommand; addedcanasta backup/canasta restorewith Restic (including Kubernetes support andrestic schedule); added optional Elasticsearch/CirrusSearch deployment; added OpenSearch observability support; switched extension/skin enable/disable to YAML-based config; added auto-generated CLI documentation via MkDocs; added database import support duringcanasta create; removed Postfix references; numerous bug fixes, security improvements (ShellQuote for shell commands), and code quality improvements - 3.4.0 - March 4, 2026 - Reject empty string in ValidateWikiID; add Special:Random cache bypass to Varnish config; fix install.sh directory collision on case-insensitive filesystems; backfill CANASTA_IMAGE in .env during upgrade; resolve installations from subdirectories; support CANASTA_CONFIG_DIR environment variable; add integration testing infrastructure; many new unit tests
- 3.5.0 - March 8, 2026 - Add
canasta gitopscommand for git-based configuration management (init, join, push, pull, status, diff); addcanasta backup purgecommand for retention-based cleanup with--older-than,--keep-last, and--dry-runflags; add--purge-older-thanflag tocanasta backup schedule setfor automatic post-backup purge - 3.5.1 - March 9, 2026 - Fix
gitops initto preserve extension/skin commit hashes during submodule conversion; fail early if extensions/skins have uncommitted changes; auto-detect backup credentials (RESTIC_, AWS_, AZURE_, B2_, etc.) as encrypted placeholders; remove legacy .gitignore files from extensions/, skins/, config/, and config/settings/ that blocked gitops tracking - 3.6.0 - March 13, 2026 - Add
wikis.yamltemplating for gitops (host-specific wiki URLs are extracted intowikis.yaml.templatewith placeholders, rendered per-host on join/pull); addgitops addandgitops rmcommands for managing tracked files; add--repairflag togitops initfor fixing broken gitlink detection; fixgitops statustruncating modified file paths; fix backup restore failing when files exist with different ownership; drop--userfrom backup restore to preserve file ownership; check gituser.nameanduser.emailbefore gitops operations; gitignoreconfig/backup/in gitops default template; fixcanasta upgradeto update outdatedCANASTA_IMAGEin.env(previously only backfilled when missing); decouple CLI and Canasta image version numbers (newCANASTA_VERSIONfile pins image tag independently from CLIVERSION); many new integration and unit tests - 3.6.1 - March 18, 2026 - Fix Varnish caching: remove 48h TTL override that ignored MediaWiki's
s-maxagesetting, addno-storeheader to prevent browser bfcache from serving stale content; markdefault.vclas non-user-editable so upgrades can update it; detect and report template file changes during upgrade with--dry-runsupport; move--wikiflag to maintenance subcommands and iterate over all wikis inmaintenance script; move documentation to wiki and add CI workflow for publishing CLI reference pages - 3.6.2 - March 22, 2026 - Make Varnish optional via
CANASTA_ENABLE_VARNISHenvironment variable using Docker Compose profiles; fix upgrade removing.gitdirectory used by gitops; make informational template files (READMEs,docker-compose.override.yml.example) no-clobber during upgrade; remove unused_initdbvolume mount; addcanasta gitops fix-submodulescommand for converting extensions/skins to proper git submodules after gitops init; improvecanasta gitops diffto show local vs remote changes separately with conflict detection; addDefaultSettings.phpto instance template for private-by-default wiki farms; fixcanasta add/canasta removeto syncwikis.yaml.templatewhen gitops is active; update default Canasta image to 3.5.2; standardize terminology: rename "installation" to "instance" across CLI and documentation - 3.6.3 - April 15, 2026 - Update default Canasta image to 3.5.5
- 3.7.0 - April 25, 2026 - End-of-life release of the Canasta-Go (legacy Go) CLI. Adds a deprecation warning printed to stderr from every command (suppressible with
CANASTA_SUPPRESS_DEPRECATION_WARNING=1), directing users to the Python/Ansible reimplementation now hosted at <a href="https://github.com/CanastaWiki/Canasta-CLI">https://github.com/CanastaWiki/Canasta-CLI</a>. Release artifacts are mirrored to CanastaWiki/Canasta-CLI so legacycanasta upgradeclients continue to self-update successfully. No other functional changes since 3.6.3. See <a href="https://canasta.wiki/wiki/Help:Upgrading" rel="nofollow">https://canasta.wiki/wiki/Help:Upgrading</a> for the migration path; further releases of this repo are not planned.
Canasta CLI version history (Ansible-based, 4.0.0+):
For earlier versions (0.1.0-alpha through 3.7.0, Go-based), see <a href="https://github.com/CanastaWiki/Canasta-Go/blob/main/RELEASE_NOTES.md">https://github.com/CanastaWiki/Canasta-Go/blob/main/RELEASE_NOTES.md</a>
- 4.0.0 - May 9, 2026 - Complete rewrite from Go to Ansible; replaces Canasta-Go 3.x (end-of-life as of 3.7.0). Existing
conf.jsonregistries and instance directories continue to work without modification; installer replaces the Go binary in place viaget-canasta.sh. New capabilities: SSH-based multi-host management (--hostflag,canasta host add/remove/list); multi-node Kubernetes withReadWriteManyPVCs for multi-replica web pods;canasta doctor,canasta install/uninstall,canasta storage setup nfs/efs; auto-generated CLI reference on canasta.wiki. Feature parity otherwise with 3.6.3. - 4.0.1 - May 9, 2026 - Fix
CANASTA_ENABLE_OBSERVABILITY=true: declarebcryptinrequirements.txtso the OpenSearch Dashboards basicauth password hash gets generated. - 4.0.2 - May 15, 2026 - Bump target Canasta version to 3.5.8. Operational improvements:
canasta doctorwarns when rootless Docker can't bind privileged ports belowip_unprivileged_port_start(#557); thewebandvarnishservices declareuser: rootin the bundled compose stack so podman-compose runs them correctly under rootless Podman (#558);canasta maintenance scriptandcanasta maintenance extensioninvoke through MediaWiki'srun.phpso the.phpsuffix is optional and extension scripts use theExtName:scriptNameprefix syntax (#559);canasta createrefuses to enter a non-empty target directory and no longer deletes pre-existing directories on rescue cleanup, preventing operator-data loss (#561);canasta upgraderebuilds buildable services on any image change rather than only the pull-skipped path, and detects buildable services dynamically from the merged compose config (#563); newcanasta rebuildcommand for standalone custom-image rebuilds without going through upgrade (#564). - 4.0.3 - June 8, 2026 - Bump target Canasta version to 3.5.10. Backup: align
canasta backup purgewith restic's native retention flags and drop the canasta-specific--older-than, fixing scheduled-purge failures on Compose (#601); validate RESTIC settings on Compose and warn on quoted/CRLF.envvalues (#587); preflight a runnablecanastaon the host and use an absolute path in the scheduled-backup cron (#591). Gitops: keep domain/port/scheme changes durable across pulls (#577); block port changes on Kubernetes (#581); ignore generated sitemaps,backup.log, and editor.bakfiles (#599). Reliability and fixes:status/doctordetect the instance from any subdirectory (#597); fix acanasta installcrash resolving the operator user without facts (#589); list subcommands for bare nested groups instead of erroring (#586); fall back tocertifiwhen the interpreter has no usable system CA store (#584);canasta doctorreports whether a runnablecanastais on the host (#593); fix Ansible callback signature warnings (#573). - 4.0.4 - June 8, 2026 - Re-exec after self-update, fixing intermittent
canasta upgradefailures (#607). - 4.1.0 - June 11, 2026 - Optional CrowdSec support for Docker Compose (opt-in via
CANASTA_ENABLE_CROWDSEC=true): a CrowdSec engine and Caddy bouncer with trusted-proxy handling, managed by the newcanasta crowdseccommand group, with CAPI and the bouncer auto-enrolled so the community blocklist works out of the box (#603, #620, #633, #637, #639, #641, #643, #646, #647). Also includes backup andcanasta upgradeimprovements (#611, #615, #617, #627, #629, #631),canasta-groupmembership hardening (#612),gitops diffpatch output (#622), and quieter ignored-failure output (#624, #625). See #650 for the full changelog. - 4.1.1 - June 12, 2026 - Bug fixes:
canasta upgradeno longer aborts on a stopped Compose instance during the MySQL-to-MariaDB probe (#655);canasta config set CANASTA_ENABLE_CROWDSEC=trueno longer loops forever auto-enrolling the Caddy bouncer (#653). - 4.2.0 - June 18, 2026 - CrowdSec support for Kubernetes (opt-in via
CANASTA_ENABLE_CROWDSEC=true): the CrowdSec engine and Caddy bouncer (a sidecar in the Caddy pod) now run on Kubernetes with CAPI and Console auto-enrollment, plus newcanasta crowdsec scenarios/alerts/metricsinspection andreload --purge-blocklist(s)(#604, #659, #660, #662, #700, #709). Multi-node Kubernetes hardening: real client IP via TraefikexternalTrafficPolicy=Local(#688), reliable worker joins (#690), pinned k3s/helm versions (#721), and long remote operations (install, deploy, backup, restore, delete, maintenance) now survive transient SSH resets (#743, #751, #752, #754, #756, #763). Backup/restore correctness: K8s restore fails loudly instead of silently when restic fails (#748), local-path restic repos pin to the control plane on multi-node (#749), anddeleteno longer orphans the Compose backup staging volume (#761). Also a large internal orchestrator-dispatch refactor (#696) and many gitops, create, and config fixes. See #765 for the full changelog. - 4.3.0 - June 22, 2026 - Orchestrator-agnostic application sidecars: the new
canasta sidecarcommand group (add/list/remove/migrate) declares companion services inconfig/sidecars.yamland renders them to both Docker Compose and Kubernetes, includingbuild:image delivery and a web-to-sidecar environment bridge (#810, #814, #817, #819, #820, #823, #824, #827, #831, #832). Kubernetes backups now capture the fullconfig/directory, with orchestrator-agnostic host-crontab scheduling (#826, #813, #834).canasta create --build-fromworks on Kubernetes via an in-cluster registry, with a disk-space preflight (#791, #801, #795). Newcanasta config refresh-templateadopts updated template-seeded config files (#859, #861, #863). GitOps gains non-interactive Kubernetesinit/join, self-hosted Argo CD repo trust, and richergitops status/add/upgradehandling (#846, #849, #851, #852, #853, #855, #867, #868, #869, #871, #873, #875, #877, #879). Plusmaintenance exec --stdin-file(#768, #771) and many Kubernetes, backup, and gitops fixes. See #856 for the full changelog. - 4.4.0 - June 29, 2026 - Bump target Canasta version to 3.5.11 (MediaWiki 1.43.9 security release). New capabilities: override the Elasticsearch image on both orchestrators via
CANASTA_ELASTICSEARCH_IMAGE(#888); Kubernetes secrets now come from a per-instance Secret, withenvSecretfor sidecars,envPrivateto withhold sidecar keys from the web bridge, andappSecretEnvfor the web and jobrunner pods (#890, #892, #894). Fixes:maintenance execfalls back toshwhen a container has nobash(#896); the generated CLI: wiki reference uses MediaWiki list markup, unwraps hard-wrapped descriptions, and retries rate-limited edits (#898, #901, #902). Also dead-code removal,canastainstall-package docs, full sidecar teardown on restart and delete, and added test coverage (#883, #884, #885, #886). - 4.4.1 - June 30, 2026 - Bump target Canasta version to 3.5.12, which fixes the broken Composer build in 3.5.11 that left bundled extension dependencies (Elastica, Semantic MediaWiki, and others) uninstalled.
- 4.5.0 - July 1, 2026 - Bump target Canasta version to 3.5.13. New
canasta reconcilecommand andcanasta doctorconfig/runtime drift checks (#920, #924, #931, #937, #944); upgrade and GitOps durability fixes (#909, #914, #915, #917, #922, #925, #927, #930, #933, #935, #939, #954); atomicconf.jsonwrites (#945); a CrowdSec auto-enroll loop fix (#919); acanasta sidecar migratecrash fix (#943); and test, CI, and docs hardening (#946, #947, #948, #949, #950, #952, #953). See #957 for the full changelog. - 4.5.1 - July 1, 2026 - Bug fixes:
canasta upgradenow migrates a MySQL 8.0 instance to MariaDB instead of skipping the migration and leaving the database unable to start (#960). - 4.5.2 - July 2, 2026 - Bump target Canasta version to 3.5.14.
canasta create --build-fromforwards--build-argto the image build (#982); plus bug fixes and hardening across upgrade, gitops, sidecars, Kubernetes, and validation (#968, #969, #970, #971, #972, #973, #974, #975, #976, #977, #978, #979, #980, #981, #985, #987, #988, #990, #992, #994). - 4.5.3 - July 3, 2026 - Bump target Canasta version to 3.5.15, which updates the Maps and OAuth extensions (security updates) and the Page Forms extension.
- 4.6.0 - July 3, 2026 - New
--imagesoption oncanasta createandcanasta addto restore a wiki's uploaded media alongside--database(#1003). Kubernetes backup/restore fixes:canasta backup restorenow brings back uploaded media and custom extensions, skins, and public assets that were previously dropped (#1002, #1005);public_assetsnow syncs into its PVC on start (#1000);canasta createandcanasta addcreate the per-wikipublic_assets/<wiki-id>/directory (#1008). - 4.7.0 - July 4, 2026 - New
--skip-installoption oncanasta createandcanasta addconnects a wiki to a pre-provisioned external database without runninginstall.php(#1014). Kubernetes fixes:canasta doctordetects un-appliedconfig setedits on non-GitOps instances (#1018); NFS-backed PVCs reclaim their storage on delete by defaulting the StorageClass toDelete(#1017); GitOps push prunes deleted settings files from the rendered config (#1016). Also points users tocanasta reconcilefor applying config changes without a full restart (#1013). - 4.8.0 - July 4, 2026 - New
canasta image pushandcanasta image prunecommands for the Kubernetes in-cluster image registry (#1022, #1028, #1029); Kubernetes Elasticsearch no longer crash-loops on slow starts (#1030); CI YAML lint matchesmake lint(#1024). - 4.8.1 - July 4, 2026 - Kubernetes Elasticsearch pins 7.10.2, matching Docker Compose and the version CirrusSearch supports (#1034).
- 4.9.0 - July 4, 2026 -
canasta image pushsupports--build-arg KEY=VALUE, enabling web overlay images to be pushed to the in-cluster registry (#1038). - 4.9.1 - July 4, 2026 - Bug fixes: enabling Elasticsearch on Kubernetes pulls its image again (#1042); the Kubernetes jobrunner runs localisation-dependent jobs such as CirrusSearch indexing (#1045);
canasta maintenancecommands reach remote Kubernetes instances (#1046, #1048). - 4.10.0 - July 7, 2026 - New
canasta wiki-checkcommand reports which wikis are reachable (#570, #1076); Kubernetes GitOps encrypts committed secrets with SOPS+age (#1064). Bug fixes:canasta restore -wrestores a single wiki (#1056);ignore_errorshonored on included restore/remove tasks (#1058); Compose restore file ownership (#1059); restore clears its staging volume (#1060); safety backup skips absent databases (#1062);gitops statusmarks non-GitOps instances unmanaged (#1066); unpushed GitOps commit retried (#1068); backup schedule crontab entries deduplicated (#1070); Kubernetes jobrunner runs aswww-data(#1072);gitops initfailure message printed once (#1074). - 4.11.0 - July 7, 2026 - New
canasta upgrade --purgereclaims disk by removing the images an upgrade supersedes (#1081). Bug fixes:canasta versionno longer reports Kubernetes instances as not running (#1084);canasta gitops init --encrypt-secrets --reinitno longer strands the Argo CD Application with two source types (#1085); Kubernetescanasta gitops statussurfaces uncommitted and untracked changes (#1087); the untrackedwikis.yaml.templateadvisory points tocanasta gitops add config/wikis.yaml(#1089). - 4.12.0 - July 8, 2026 - Kubernetes Ingress domains auto-derived from the farm's wiki URLs, with an
extraDomainsescape hatch (#1099). Bug fixes: Caddy renders http-only behind the Kubernetes Ingress (#1093);canasta config set CADDY_AUTO_HTTPSblocked on Kubernetes (#1095); full Kubernetes restore exactly matches the snapshot (#1097). - 4.12.1 - July 10, 2026 - Kubernetes GitOps source-directory tracking (#1113); special characters in
maintenance script/extensionarguments (#1115);gitops statusdeletion labeling (#1111);gitops statusmanaged-file handling (#1110);config setenv.templatestaging (#1109);upgradehosts.yamlstaging (#1108).