Version history

From canasta

Canasta

Canasta version history:

  • 1.0.0 - April 14, 2022 - Initial version
  • 1.0.1 - April 14, 2022 - Update MediaWiki version to 1.35.6
  • 1.1.0 - April 29, 2022 - Rename /user-extensions and /user-skins directories to /extensions and /skins
  • 1.1.1 - June 16, 2022 - Disable sitemap generator by default; update CommentStreams extension; remove Favorites and MobileDetect extensions; add iputils-ping package
  • 1.1.2 - July 12, 2022 - Update MediaWiki version to 1.35.7; add default setting of $wgServer; add CookieWarning extension; update CommentStreams, Echo and EmbedVideo extensions; remove HeadScript extension; add poppler-utils package for PDF rendering
  • 1.2.0 - October 2, 2022 - Update MediaWiki version to 1.35.8; remove cfLoadExtension() and cfLoadSkin() functionality in favor of symlink-based approach; add displayWikiInfo.php script; make use of gateway.docker.internal to detect host address
  • 1.2.1 - November 25, 2022 - Add AArch64 support; update SimpleBatchUpload extension
  • 1.2.2 - December 22, 2022 - Fix installation of EmailAuthorization extension; fix web installer to also install Boostrap extension if Chameleon skin gets installed; add MW_MAP_DOMAIN_TO_DOCKER_GATEWAY as an environment variable (set to true by default); remove patches made unnecessary by cfLoad... removal
  • 1.3.0 - February 17, 2023 - Update MediaWiki version to 1.39.0; update all extensions to a compatible version (in most cases, using the REL1_39 Git branch); add the extensions AbuseFilter, DeleteBatch, MediaUploader, Mermaid, SemanticDependencyUpdater, TemplateWizard, Title Icon, UserPageViewTracker, WatchAnalytics, WhosOnline; remove the extensions DiscussionTools, LocalisationUpdate; add the skin Vector 2022; add header warning to email-related special pages if $wgSMTP is not set
  • 2.0.0 - December 11, 2023 - Add wiki farm support; add maintenance-scripts/ directory; add automated symlinking of local versions of extensions and skins; add AWS, EditAccount, GTag, JWTAuth, TemplateSandbox, Semantic Tasks and Semantic Watchlist extensions
  • 2.0.1 - April 14, 2024 - Update MediaWiki version to 1.39.7; move extension installation settings from Dockerfile into extensions.yaml; rename run-apache.sh to run-all.sh; remove WikiForum extension
  • 3.0.0 - June 23, 2025 - Move most functionality into CanastaBase repository (which currently uses MediaWiki 1.43), leaving only extension- and skin-specific code; place all extension and skin installation settings into a single file, contents.yaml, which in turn inherits from "Recommended Revisions" page; add the DiscussionTools, InlineComments, LoginNotify, OAuth, Page Schemas, QuickInstantCommons and Paragraph-based Edit Conflict Interface ("TwoColConflict") extensions; remove the Graph, RenameUser, Semantic Breadcrumb Links, Semantic Forms Select, Semantic Tasks and TinyMCE extensions
  • 3.0.1 - June 30, 2025 - Update to CanastaBase 1.0.1, which uses MediaWiki 1.43.2
  • 3.0.2 - July 1, 2025 - Update to CanastaBase 1.0.2, which uses MediaWiki 1.43.3; update Contribution Scores and WhosOnline extensions
  • 3.0.3 - September 3, 2025 - Update to CanastaBase 1.0.3; get MediaWiki version from CanastaBase instead of hardcoding it; add Babel, CLDR, CreateRedirect, RandomSelection, RegexFunctions, RelatedArticles, RSS, TemplateStylesExtender and VariablesLua extensions; update Cargo, JWTAuth, Maps and WatchAnalytics extensions
  • 3.0.4 - October 3, 2025 - Update to CanastaBase 1.0.4, which uses MediaWiki 1.43.4; update Admin Links, Cargo, EmbedVideo and Page Forms extensions
  • 3.0.5 - October 8, 2025 - Update to CanastaBase 1.0.5, which uses MediaWiki 1.43.5
  • 3.0.6 - December 2, 2025 - Update to CanastaBase 1.0.6; fix Chameleon skin error; update Approved Revs, Cargo, UserPageViewTracker and WatchAnalytics extensions
  • 3.0.7 - December 17, 2025 - Update to CanastaBase 1.0.7, which uses MediaWiki 1.43.6; update Contribution Scores and WhosOnline extensions
  • 3.1.0 - February 10, 2026 - Update to CanastaBase 1.1.0; update Approved Revs, Cargo, External Data, Flex Diagrams and WhosOnline extensions
  • 3.2.0 - February 18, 2026 - Update to CanastaBase 1.2.0; remove special handling for Semantic MediaWiki
  • 3.2.1 - February 24, 2026 - Update to CanastaBase 1.2.1; stabilize Canasta version tag to always point to the actual version commit; update SimpleMathJax and SubPageList extensions
  • 3.3.1 - March 1, 2026 - Show Canasta version on Special:Version
  • 3.3.2 - March 2, 2026 - Update to CanastaBase 1.3.1
  • 3.4.0 - March 4, 2026 - Version alignment with Canasta-CLI 3.4.0
  • 3.5.0 - March 8, 2026 - Version alignment with Canasta-CLI 3.5.0
  • 3.5.1 - March 9, 2026 - Version alignment with Canasta-CLI 3.5.1
  • 3.5.2 - March 22, 2026 - Update to CanastaBase 1.3.2; update WSOAuth extension
  • 3.5.3 - April 7, 2026 - Update to CanastaBase 1.3.3, which uses MediaWiki 1.43.8; add the CrawlerProtection extension
  • 3.5.4 - April 10, 2026 - Update to CanastaBase 1.3.4
  • 3.5.5 - April 15, 2026 - Update to CanastaBase 1.3.5
  • 3.5.6 - April 16, 2026 - Update to CanastaBase 1.3.6; fixes broken skin rendering and API access on wiki farms with sub-path wikis
  • 3.5.7 - April 21, 2026 - Update to CanastaBase 1.3.7
  • 3.5.8 - May 15, 2026 - Add DynamicSidebar extension; update Cargo and Mermaid extensions
  • 3.5.9 - June 7, 2026 - Accidental release; no change
  • 3.5.10 - June 8, 2026 - Update to CanastaBase 1.3.9; update PageForms extension
  • 3.5.11 - June 29, 2026 - Update to CanastaBase 1.3.10, which uses MediaWiki 1.43.9 (security release); add the CreateUserPage extension; update the Cargo extension
  • 3.5.12 - June 30, 2026 - Update to CanastaBase 1.3.11; update the TemplateStyles extension for css-sanitizer 6 compatibility, fixing the broken Composer build in 3.5.11
  • 3.5.13 - July 1, 2026 - Update to CanastaBase 1.3.12; fix errors in downloading the EmbedVideo, WhosOnline and WSOAuth extensions (the latest code was accidentally downloaded); remove no-longer-used persistent directory for Semantic MediaWiki
  • 3.5.14 - July 2, 2026 - Update to CanastaBase 1.3.14; remove dead CirrusSearch and SMW maintenance scripts (#652); remove a no-op CI test job (#654)
  • 3.5.15 - July 3, 2026 - Update the Maps and OAuth extensions (security updates) and the Page Forms extension
  • 3.5.16 - July 14, 2026 - Update the Cargo extension


CanastaBase

CanastaBase version history:

  • 1.0.0 - June 18, 2025 - Initial version. Based on version 2.0.1 of Canasta, but with the following changes: MediaWiki upgraded to 1.43.0; extension and skin download and handling removed; Postfix added; Debian upgraded to 12.8; USE_EXTERNAL_DB handling fixed; MW_VOLUME mountpoint check removed
  • 1.0.1 - June 30, 2025 - Upgrade to MediaWiki 1.43.2
  • 1.0.2 - July 1, 2025 - Upgrade to MediaWiki 1.43.3
  • 1.0.3 - September 3, 2025 - Fixes for the creation of extension/skin symlinks; removed the setting of $wgJobRunRate to 0; added 404 response for nonexistent URLs; renamed mail variables for consistency; added X-Forwarded-For information to log files
  • 1.0.4 - October 3, 2025 - Upgrade to MediaWiki 1.43.4
  • 1.0.5 - October 8, 2025 - Upgrade to MediaWiki 1.43.5
  • 1.0.6 - November 27, 2025 - Added OCI labels exposing the bundled MediaWiki version and branch for easier image introspection
  • 1.0.7 - December 16, 2025 - Upgrade to MediaWiki 1.43.6
  • 1.0.8 - February 2, 2026 - Changed to new configuration directory structure; added MW_SECRET_KEY and DISABLE_DIRECTORY_MONITOR environment variables; fixes for extension and skin symlink generation; fixed job runner in non-farm mode; fixed handling of DB access in wait-for-it.sh; fixed handling of non-standard web server port; added php8.1-bcmath extension
  • 1.1.0 - February 10, 2026 - Upgraded PHP version from 8.1 to 8.2, enabling the use of LuaSandbox for Scribunto; added public_assets/ directory for publicly accessible wiki files; moved Vector skin loading out of CanastaDefaultSettings.php; fixed MediaWiki purging to also purge Varnish cache; fixed running of maintenance scripts for wiki farm setup; added gitinfo.json files to restore correct Special:Version display, after removal of .git directories; changed health check to access /server-status instead of MediaWiki API
  • 1.2.0 - February 18, 2026 - Replaced individual Composer installs with a single install (via composer.local.json) for all relevant extensions and skins; moved sitemap storage to public_assets/ directory; removed CanastaUtils.php; removed generated installedExtensions.txt and installedSkins.txt files; removed automatic call to Semantic MediaWiki's rebuildData.php; re-added warning if $wgSMTP is not set; fix for $wgMetaNamespace for wiki names containing spaces; permission fix for writing to log
  • 1.2.1 - February 24, 2026 - Moved .composer-deps-hash and .smw.json to config/persistent/ directory
  • 1.3.0 - March 1, 2026 - Removed Postfix; added YAML settings file loading for extensions/skins; added styled 404 page and optional wiki directory for wiki farms; derived $wgServer scheme from MW_SITE_SERVER instead of hardcoding HTTPS; added default MediaWiki error logging and log rotation
  • 1.3.1 - March 1, 2026 - Show distribution version on Special:Version via SoftwareInfo hook
  • 1.3.2 - March 22, 2026 - Removed default.vcl (now managed by CLI installation template); switched FarmConfigLoader from PECL yaml to Symfony YAML parser; fixed composer hash check to account for require and repositories sections; skip Varnish CDN settings when CANASTA_ENABLE_VARNISH is explicitly disabled (backward compatible: Varnish remains enabled by default)
  • 1.3.3 - April 7, 2026 - Upgrade to MediaWiki 1.43.8; GitHub actions upgrades
  • 1.3.4 - April 10, 2026 - Removed canasta_img.php in favor of upstream img_auth.php; removed public_assets.php so files are served directly from the filesystem; fixed composer hash mismatch and sourced-entry-point bugs at container startup; added opt-in CANASTA_ENABLE_VERY_SHORT_URLS env variable for root-relative short URLs
  • 1.3.5 - April 15, 2026 - Fixed img_auth.php and rest.php for private wiki farms with sub-path wikis; subdirectory .htaccess no longer prefixes passthrough rules with wiki path and uses [END] flag to prevent catch-all re-entry
  • 1.3.6 - April 16, 2026 - Fixed .htaccess to route sub-path wiki entry points (load.php, api.php, rest.php, index.php, img_auth.php) to the real PHP files instead of falling through to the catch-all rewrite; fixes broken skin rendering and API access on wiki farms with sub-path wikis
  • 1.3.7 - April 20, 2026 - Added external database support: $wgDBserver, $wgDBuser, and $wgDBpassword now read from MYSQL_HOST, MYSQL_USER, and MYSQL_PASSWORD environment variables; non-standard database ports are appended to $wgDBserver as host:port; version tag publishing workflow now only fires on VERSION changes, making the published tag immutable
  • 1.3.8 - June 7, 2026 - Added Ghostscript and Xpdfutils to support PDF rendering and thumbnailing
  • 1.3.9 - June 8, 2026 - Removed (unnecessary) addition of Xpdfutils
  • 1.3.10 - June 29, 2026 - Upgrade to MediaWiki 1.43.9 (security release); MW_VERSION and MW_CORE_VERSION are now build-time ARGs (overridable with docker build --build-arg) so a non-default MediaWiki version or branch can be built without editing the Dockerfile (#185); wait for LocalSettings.php with an external database to prevent startup exit 123 (#176); guard PHP-FPM log directory setup against an unset PHP_LOG_DIR (#177); detect host-side directory events without the inotify ISDIR flag so host-added extensions and skins are picked up (#179); heal config/persistent ownership before run_autoupdate (#180); guard canastaLoadConfigYaml against a null $wgSettings (#181)
  • 1.3.11 - June 30, 2026 - Fail the image build when the unified Composer update fails to resolve or leaves a bundled extension's dependencies uninstalled, instead of silently shipping an image with an incomplete vendor/; added a build-time dependency self-test that aborts the build if any merged-in extension's required package is missing from vendor/ (#187)
  • 1.3.12 - July 1, 2026 - Fail the image build if there are Git errors during extension and skin setup (#190)
  • 1.3.13 - July 2, 2026 - Idempotent Apache/.htaccess generation (#197); fail the build on Composer and Git errors (#195); maintenance-script fixes (#194); Dockerfile hardening (#198)
  • 1.3.14 - July 2, 2026 - Fix public_assets file serving (logo, favicon) for wikis.yaml with indented entries (#202)


Canasta CLI

Canasta CLI version history:

  • 0.1.0-alpha - July 22, 2022 - initial version
  • 1.0.0 - August 3, 2022 - add "skin" and "extension" commands; add restic "unlock", "list", "check" and "diff" commands; add ability to enable/disable multiple extensions or skins at the same time; many bug fixes
  • 1.2.0 - October 25, 2022 - add install.sh and build.sh scripts; add "version" command; change default behavior from "keep" to "delete" on import error
  • 3.3.1 - March 1, 2026 - Major rewrite. CLI version now aligned with Canasta image version via a single VERSION file. Added Kubernetes orchestrator support alongside Docker Compose; embedded all stack files and templates into the CLI binary; added wiki farm management (canasta add, canasta remove); added canasta config get/set/unset commands; added canasta devmode enable/disable for xdebug support; added canasta upgrade with --dry-run flag and self-update; added canasta export command; added canasta maintenance exec command; added canasta backup/canasta restore with Restic (including Kubernetes support and restic schedule); added optional Elasticsearch/CirrusSearch deployment; added OpenSearch observability support; switched extension/skin enable/disable to YAML-based config; added auto-generated CLI documentation via MkDocs; added database import support during canasta create; removed Postfix references; numerous bug fixes, security improvements (ShellQuote for shell commands), and code quality improvements
  • 3.4.0 - March 4, 2026 - Reject empty string in ValidateWikiID; add Special:Random cache bypass to Varnish config; fix install.sh directory collision on case-insensitive filesystems; backfill CANASTA_IMAGE in .env during upgrade; resolve installations from subdirectories; support CANASTA_CONFIG_DIR environment variable; add integration testing infrastructure; many new unit tests
  • 3.5.0 - March 8, 2026 - Add canasta gitops command for git-based configuration management (init, join, push, pull, status, diff); add canasta backup purge command for retention-based cleanup with --older-than, --keep-last, and --dry-run flags; add --purge-older-than flag to canasta backup schedule set for automatic post-backup purge
  • 3.5.1 - March 9, 2026 - Fix gitops init to preserve extension/skin commit hashes during submodule conversion; fail early if extensions/skins have uncommitted changes; auto-detect backup credentials (RESTIC_, AWS_, AZURE_, B2_, etc.) as encrypted placeholders; remove legacy .gitignore files from extensions/, skins/, config/, and config/settings/ that blocked gitops tracking
  • 3.6.0 - March 13, 2026 - Add wikis.yaml templating for gitops (host-specific wiki URLs are extracted into wikis.yaml.template with placeholders, rendered per-host on join/pull); add gitops add and gitops rm commands for managing tracked files; add --repair flag to gitops init for fixing broken gitlink detection; fix gitops status truncating modified file paths; fix backup restore failing when files exist with different ownership; drop --user from backup restore to preserve file ownership; check git user.name and user.email before gitops operations; gitignore config/backup/ in gitops default template; fix canasta upgrade to update outdated CANASTA_IMAGE in .env (previously only backfilled when missing); decouple CLI and Canasta image version numbers (new CANASTA_VERSION file pins image tag independently from CLI VERSION); many new integration and unit tests
  • 3.6.1 - March 18, 2026 - Fix Varnish caching: remove 48h TTL override that ignored MediaWiki's s-maxage setting, add no-store header to prevent browser bfcache from serving stale content; mark default.vcl as non-user-editable so upgrades can update it; detect and report template file changes during upgrade with --dry-run support; move --wiki flag to maintenance subcommands and iterate over all wikis in maintenance script; move documentation to wiki and add CI workflow for publishing CLI reference pages
  • 3.6.2 - March 22, 2026 - Make Varnish optional via CANASTA_ENABLE_VARNISH environment variable using Docker Compose profiles; fix upgrade removing .git directory used by gitops; make informational template files (READMEs, docker-compose.override.yml.example) no-clobber during upgrade; remove unused _initdb volume mount; add canasta gitops fix-submodules command for converting extensions/skins to proper git submodules after gitops init; improve canasta gitops diff to show local vs remote changes separately with conflict detection; add DefaultSettings.php to instance template for private-by-default wiki farms; fix canasta add/canasta remove to sync wikis.yaml.template when gitops is active; update default Canasta image to 3.5.2; standardize terminology: rename "installation" to "instance" across CLI and documentation
  • 3.6.3 - April 15, 2026 - Update default Canasta image to 3.5.5
  • 3.7.0 - April 25, 2026 - End-of-life release of the Canasta-Go (legacy Go) CLI. Adds a deprecation warning printed to stderr from every command (suppressible with CANASTA_SUPPRESS_DEPRECATION_WARNING=1), directing users to the Python/Ansible reimplementation now hosted at <a href="https://github.com/CanastaWiki/Canasta-CLI">https://github.com/CanastaWiki/Canasta-CLI</a>. Release artifacts are mirrored to CanastaWiki/Canasta-CLI so legacy canasta upgrade clients continue to self-update successfully. No other functional changes since 3.6.3. See <a href="https://canasta.wiki/wiki/Help:Upgrading" rel="nofollow">https://canasta.wiki/wiki/Help:Upgrading</a> for the migration path; further releases of this repo are not planned.



Canasta CLI version history (Ansible-based, 4.0.0+):

For earlier versions (0.1.0-alpha through 3.7.0, Go-based), see <a href="https://github.com/CanastaWiki/Canasta-Go/blob/main/RELEASE_NOTES.md">https://github.com/CanastaWiki/Canasta-Go/blob/main/RELEASE_NOTES.md</a>

  • 4.0.0 - May 9, 2026 - Complete rewrite from Go to Ansible; replaces Canasta-Go 3.x (end-of-life as of 3.7.0). Existing conf.json registries and instance directories continue to work without modification; installer replaces the Go binary in place via get-canasta.sh. New capabilities: SSH-based multi-host management (--host flag, canasta host add/remove/list); multi-node Kubernetes with ReadWriteMany PVCs for multi-replica web pods; canasta doctor, canasta install/uninstall, canasta storage setup nfs/efs; auto-generated CLI reference on canasta.wiki. Feature parity otherwise with 3.6.3.
  • 4.0.1 - May 9, 2026 - Fix CANASTA_ENABLE_OBSERVABILITY=true: declare bcrypt in requirements.txt so the OpenSearch Dashboards basicauth password hash gets generated.
  • 4.0.2 - May 15, 2026 - Bump target Canasta version to 3.5.8. Operational improvements: canasta doctor warns when rootless Docker can't bind privileged ports below ip_unprivileged_port_start (#557); the web and varnish services declare user: root in the bundled compose stack so podman-compose runs them correctly under rootless Podman (#558); canasta maintenance script and canasta maintenance extension invoke through MediaWiki's run.php so the .php suffix is optional and extension scripts use the ExtName:scriptName prefix syntax (#559); canasta create refuses to enter a non-empty target directory and no longer deletes pre-existing directories on rescue cleanup, preventing operator-data loss (#561); canasta upgrade rebuilds buildable services on any image change rather than only the pull-skipped path, and detects buildable services dynamically from the merged compose config (#563); new canasta rebuild command for standalone custom-image rebuilds without going through upgrade (#564).
  • 4.0.3 - June 8, 2026 - Bump target Canasta version to 3.5.10. Backup: align canasta backup purge with restic's native retention flags and drop the canasta-specific --older-than, fixing scheduled-purge failures on Compose (#601); validate RESTIC settings on Compose and warn on quoted/CRLF .env values (#587); preflight a runnable canasta on the host and use an absolute path in the scheduled-backup cron (#591). Gitops: keep domain/port/scheme changes durable across pulls (#577); block port changes on Kubernetes (#581); ignore generated sitemaps, backup.log, and editor .bak files (#599). Reliability and fixes: status/doctor detect the instance from any subdirectory (#597); fix a canasta install crash resolving the operator user without facts (#589); list subcommands for bare nested groups instead of erroring (#586); fall back to certifi when the interpreter has no usable system CA store (#584); canasta doctor reports whether a runnable canasta is on the host (#593); fix Ansible callback signature warnings (#573).
  • 4.0.4 - June 8, 2026 - Re-exec after self-update, fixing intermittent canasta upgrade failures (#607).
  • 4.1.0 - June 11, 2026 - Optional CrowdSec support for Docker Compose (opt-in via CANASTA_ENABLE_CROWDSEC=true): a CrowdSec engine and Caddy bouncer with trusted-proxy handling, managed by the new canasta crowdsec command group, with CAPI and the bouncer auto-enrolled so the community blocklist works out of the box (#603, #620, #633, #637, #639, #641, #643, #646, #647). Also includes backup and canasta upgrade improvements (#611, #615, #617, #627, #629, #631), canasta-group membership hardening (#612), gitops diff patch output (#622), and quieter ignored-failure output (#624, #625). See #650 for the full changelog.
  • 4.1.1 - June 12, 2026 - Bug fixes: canasta upgrade no longer aborts on a stopped Compose instance during the MySQL-to-MariaDB probe (#655); canasta config set CANASTA_ENABLE_CROWDSEC=true no longer loops forever auto-enrolling the Caddy bouncer (#653).
  • 4.2.0 - June 18, 2026 - CrowdSec support for Kubernetes (opt-in via CANASTA_ENABLE_CROWDSEC=true): the CrowdSec engine and Caddy bouncer (a sidecar in the Caddy pod) now run on Kubernetes with CAPI and Console auto-enrollment, plus new canasta crowdsec scenarios/alerts/metrics inspection and reload --purge-blocklist(s) (#604, #659, #660, #662, #700, #709). Multi-node Kubernetes hardening: real client IP via Traefik externalTrafficPolicy=Local (#688), reliable worker joins (#690), pinned k3s/helm versions (#721), and long remote operations (install, deploy, backup, restore, delete, maintenance) now survive transient SSH resets (#743, #751, #752, #754, #756, #763). Backup/restore correctness: K8s restore fails loudly instead of silently when restic fails (#748), local-path restic repos pin to the control plane on multi-node (#749), and delete no longer orphans the Compose backup staging volume (#761). Also a large internal orchestrator-dispatch refactor (#696) and many gitops, create, and config fixes. See #765 for the full changelog.
  • 4.3.0 - June 22, 2026 - Orchestrator-agnostic application sidecars: the new canasta sidecar command group (add/list/remove/migrate) declares companion services in config/sidecars.yaml and renders them to both Docker Compose and Kubernetes, including build: image delivery and a web-to-sidecar environment bridge (#810, #814, #817, #819, #820, #823, #824, #827, #831, #832). Kubernetes backups now capture the full config/ directory, with orchestrator-agnostic host-crontab scheduling (#826, #813, #834). canasta create --build-from works on Kubernetes via an in-cluster registry, with a disk-space preflight (#791, #801, #795). New canasta config refresh-template adopts updated template-seeded config files (#859, #861, #863). GitOps gains non-interactive Kubernetes init/join, self-hosted Argo CD repo trust, and richer gitops status/add/upgrade handling (#846, #849, #851, #852, #853, #855, #867, #868, #869, #871, #873, #875, #877, #879). Plus maintenance exec --stdin-file (#768, #771) and many Kubernetes, backup, and gitops fixes. See #856 for the full changelog.
  • 4.4.0 - June 29, 2026 - Bump target Canasta version to 3.5.11 (MediaWiki 1.43.9 security release). New capabilities: override the Elasticsearch image on both orchestrators via CANASTA_ELASTICSEARCH_IMAGE (#888); Kubernetes secrets now come from a per-instance Secret, with envSecret for sidecars, envPrivate to withhold sidecar keys from the web bridge, and appSecretEnv for the web and jobrunner pods (#890, #892, #894). Fixes: maintenance exec falls back to sh when a container has no bash (#896); the generated CLI: wiki reference uses MediaWiki list markup, unwraps hard-wrapped descriptions, and retries rate-limited edits (#898, #901, #902). Also dead-code removal, canasta install-package docs, full sidecar teardown on restart and delete, and added test coverage (#883, #884, #885, #886).
  • 4.4.1 - June 30, 2026 - Bump target Canasta version to 3.5.12, which fixes the broken Composer build in 3.5.11 that left bundled extension dependencies (Elastica, Semantic MediaWiki, and others) uninstalled.
  • 4.5.0 - July 1, 2026 - Bump target Canasta version to 3.5.13. New canasta reconcile command and canasta doctor config/runtime drift checks (#920, #924, #931, #937, #944); upgrade and GitOps durability fixes (#909, #914, #915, #917, #922, #925, #927, #930, #933, #935, #939, #954); atomic conf.json writes (#945); a CrowdSec auto-enroll loop fix (#919); a canasta sidecar migrate crash fix (#943); and test, CI, and docs hardening (#946, #947, #948, #949, #950, #952, #953). See #957 for the full changelog.
  • 4.5.1 - July 1, 2026 - Bug fixes: canasta upgrade now migrates a MySQL 8.0 instance to MariaDB instead of skipping the migration and leaving the database unable to start (#960).
  • 4.5.2 - July 2, 2026 - Bump target Canasta version to 3.5.14. canasta create --build-from forwards --build-arg to the image build (#982); plus bug fixes and hardening across upgrade, gitops, sidecars, Kubernetes, and validation (#968, #969, #970, #971, #972, #973, #974, #975, #976, #977, #978, #979, #980, #981, #985, #987, #988, #990, #992, #994).
  • 4.5.3 - July 3, 2026 - Bump target Canasta version to 3.5.15, which updates the Maps and OAuth extensions (security updates) and the Page Forms extension.
  • 4.6.0 - July 3, 2026 - New --images option on canasta create and canasta add to restore a wiki's uploaded media alongside --database (#1003). Kubernetes backup/restore fixes: canasta backup restore now brings back uploaded media and custom extensions, skins, and public assets that were previously dropped (#1002, #1005); public_assets now syncs into its PVC on start (#1000); canasta create and canasta add create the per-wiki public_assets/<wiki-id>/ directory (#1008).
  • 4.7.0 - July 4, 2026 - New --skip-install option on canasta create and canasta add connects a wiki to a pre-provisioned external database without running install.php (#1014). Kubernetes fixes: canasta doctor detects un-applied config set edits on non-GitOps instances (#1018); NFS-backed PVCs reclaim their storage on delete by defaulting the StorageClass to Delete (#1017); GitOps push prunes deleted settings files from the rendered config (#1016). Also points users to canasta reconcile for applying config changes without a full restart (#1013).
  • 4.8.0 - July 4, 2026 - New canasta image push and canasta image prune commands for the Kubernetes in-cluster image registry (#1022, #1028, #1029); Kubernetes Elasticsearch no longer crash-loops on slow starts (#1030); CI YAML lint matches make lint (#1024).
  • 4.8.1 - July 4, 2026 - Kubernetes Elasticsearch pins 7.10.2, matching Docker Compose and the version CirrusSearch supports (#1034).
  • 4.9.0 - July 4, 2026 - canasta image push supports --build-arg KEY=VALUE, enabling web overlay images to be pushed to the in-cluster registry (#1038).
  • 4.9.1 - July 4, 2026 - Bug fixes: enabling Elasticsearch on Kubernetes pulls its image again (#1042); the Kubernetes jobrunner runs localisation-dependent jobs such as CirrusSearch indexing (#1045); canasta maintenance commands reach remote Kubernetes instances (#1046, #1048).
  • 4.10.0 - July 7, 2026 - New canasta wiki-check command reports which wikis are reachable (#570, #1076); Kubernetes GitOps encrypts committed secrets with SOPS+age (#1064). Bug fixes: canasta restore -w restores a single wiki (#1056); ignore_errors honored on included restore/remove tasks (#1058); Compose restore file ownership (#1059); restore clears its staging volume (#1060); safety backup skips absent databases (#1062); gitops status marks non-GitOps instances unmanaged (#1066); unpushed GitOps commit retried (#1068); backup schedule crontab entries deduplicated (#1070); Kubernetes jobrunner runs as www-data (#1072); gitops init failure message printed once (#1074).
  • 4.11.0 - July 7, 2026 - New canasta upgrade --purge reclaims disk by removing the images an upgrade supersedes (#1081). Bug fixes: canasta version no longer reports Kubernetes instances as not running (#1084); canasta gitops init --encrypt-secrets --reinit no longer strands the Argo CD Application with two source types (#1085); Kubernetes canasta gitops status surfaces uncommitted and untracked changes (#1087); the untracked wikis.yaml.template advisory points to canasta gitops add config/wikis.yaml (#1089).
  • 4.12.0 - July 8, 2026 - Kubernetes Ingress domains auto-derived from the farm's wiki URLs, with an extraDomains escape hatch (#1099). Bug fixes: Caddy renders http-only behind the Kubernetes Ingress (#1093); canasta config set CADDY_AUTO_HTTPS blocked on Kubernetes (#1095); full Kubernetes restore exactly matches the snapshot (#1097).
  • 4.12.1 - July 10, 2026 - Kubernetes GitOps source-directory tracking (#1113); special characters in maintenance script/extension arguments (#1115); gitops status deletion labeling (#1111); gitops status managed-file handling (#1110); config set env.template staging (#1109); upgrade hosts.yaml staging (#1108).