1.17.0

Read the Announcement

Read the full announcement with discussion of new features: Pangolin 1.17 - Multiple roles per user, site provisioning keys, log streaming, and more

What's Changed

• Add multiple role assignment for users (full RBAC)
• Add improved role mapping handling during auto-provisioning for identity providers
• Add built-in templates for Google and Azure to global identity providers
• Add region blocking within the rulesets to restrict or allow traffic based on geographic location
• Add site provisioning keys to create sites on first start without pre-generating IDs/Secrets
• Add pending sites page, where new sites created with a provisioning key must be manually approved
• Add editing the identifier of private resources
• Add connection logging of every TCP and UDP session through private resources (requires Newt ^1.11.0)
• Add SSH sessions to access logs
• Add log/event streaming (SIEM)
• Add domain CRUD endpoints to integration API
• Add endpoint to reset bandwidth to integration API
• Improve persist user locale preference to database
• Fix display actual values for WireGuard site credentials
• General UI improvements
• Various other bug fixes

Full Changelog: 1.16.2...1.17.0

New Contributors

• @Fizza-Mukhtar made their first contribution in #2573
• @ChanningHe made their first contribution in #2432
• @shreyaspapi made their first contribution in #2524
• @noe-charmet made their first contribution in #2695
• @shleeable made their first contribution in #2653
• @infiniteWays made their first contribution in #2149
• @jaydeep-pipaliya made their first contribution in #2748

How to Update

Important

Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.

View documentation

1.17.0-rc.0

RC

A Release Candidate (RC) is a near-final software version, stable but undergoing last tests before official release. It has all features and no known bugs.

• Users: Use cautiously due to potential undiscovered bugs. Not for critical systems unless prepared for issues. Report bugs.
• Developers/Testers: Perform crucial final validation and thorough testing, especially of recent changes, to catch last-minute major issues.
• Backup: Always back up data before installing an RC to allow rollback if problems arise.
• Feedback: Provide feedback; it's vital for a robust final release.

What's Changed

• Add multiple role assignment for users
• Add improved role mapping handling during auto-provisioning for identity providers
• Add built-in templates for Google and Azure to global identity providers
• Add region blocking within the rulesets to restrict or allow traffic based on geographic location
• Add site provisioning keys to create sites on first start without pre-generating IDs/Secrets
• Add pending sites page, where new sites created with a provisioning key must be manually approved
• Add editing the identifier of private resources
• Add connection logging of every TCP and UDP session through private resources
• Add SSH sessions to access logs
• Add log/event streaming (SIEM)
• Add domain CRUD endpoints to integration API
• Adding an organization sites bandwidth reset API
• Fix display actual values for WireGuard site credentials
• Improve persist user locale preference to database
• General UI improvements
• Various other bug fixes

Full Changelog: 1.16.2...1.17.0-rc.0

New Contributors

• @Fizza-Mukhtar made their first contribution in #2573
• @ChanningHe made their first contribution in #2432
• @shreyaspapi made their first contribution in #2524
• @noe-charmet made their first contribution in #2695
• @shleeable made their first contribution in #2653
• @infiniteWays made their first contribution in #2149
• @jaydeep-pipaliya made their first contribution in #2748

How to Update

Important

Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.

View documentation

1.16.2

What's Changed

• Fix site, resource drop downs limited to 20 options due to pagination
• Fix swagger UI not showing for the API

Full Changelog: 1.16.1...1.16.2

How to Update

Important

Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.

View documentation

1.16.1

What's Changed

• Fix machine client pagination
• Add sort to name columns

Full Changelog: 1.16.0...1.16.1

How to Update

Important

Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.

View documentation

1.16.0

Read the Announcement

Read the full announcement with discussion of new features: Pangolin 1.16 - SSH with certificate-based authentication, PAM integration, and seamless terminal access

What's Changed

• Add Pangolin SSH auth-daemon support: https://docs.pangolin.net/manage/ssh
• Add list of accessible private resources to non-admin/member landing page
• Add server side pagination, filter, sort, and search to major tables
• Add support pathname in logo URL for branding
• Add delete account from profile
• Add improved user prompt dialogs to installer script
• Other minor bug fixes and visual enhancements

New Contributors

• @Abhinav-kodes made their first contribution in #2535
• @rodneyosodo made their first contribution in #2491

Full Changelog: 1.15.4...1.16.0

How to Update

Important

Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.

View documentation

1.16.0-rc.0

RC

A Release Candidate (RC) is a near-final software version, stable but undergoing last tests before official release. It has all features and no known bugs.

• Users: Use cautiously due to potential undiscovered bugs. Not for critical systems unless prepared for issues. Report bugs.
• Developers/Testers: Perform crucial final validation and thorough testing, especially of recent changes, to catch last-minute major issues.
• Backup: Always back up data before installing an RC to allow rollback if problems arise.
• Feedback: Provide feedback; it's vital for a robust final release.

What's Changed

• Add Pangolin SSH auth-daemon support: https://docs.pangolin.net/manage/ssh
• Add list of accessible private resources to non-admin/member landing page
• Add server side pagination, filter, sort, and search to major tables
• Add support pathname in logo URL for branding
• Add delete account from profile
• Add improved user prompt dialogs to installer script
• Other minor bug fixes and visual enhancements

New Contributors

• @Abhinav-kodes made their first contribution in #2535
• @rodneyosodo made their first contribution in #2491

Full Changelog: 1.15.4...1.16.0-rc.0

How to Update

Important

Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.

View documentation

1.15.4

What's Changed

• Use fosrl/pangolin-cli container in Machine Client install commands
• Fix newly created site not showing in private resource site dropdown

Full Changelog: 1.15.3...1.15.4

How to Update

Important

Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.

View documentation

1.15.3

What's Changed

• Add use Pangolin CLI for machine clients install commands
• Add default org and role mapping when creating an identity provider
• Add app.identity_provider_mode for toggling between global and org scoped identity providers (EE)
• Add flags.disable_enterprise_features to hide Enterprise Edition features in Community Edition
• Fix machine clients being fingerprinted
• Fix machine clients name being overriden
• Various other small bug fixes and improvements

Full Changelog: 1.15.2...1.15.3

How to Update

Important

Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.

View documentation

1.15.2

What's Changed

• Add show user display name on user device
• Add --network host to Newt Docker Run install method
• Other minor bug fixes and improvements

Full Changelog: 1.15.1...1.15.2

How to Update

Important

Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.

View documentation

1.15.1

What's Changed

• Fix orphan device on archive (client fails to connect when archived from the user view)
• Fix logo url not saving

Full Changelog: 1.15.0...1.15.1

Warning

For the clients feature to work you need to have updated Gerbil to 1.3.0 and have UDP port 21820 open on the VPS firewall and in the docker compose file.

How to Update

Important

Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise.

View documentation