v0.5.0

Changelog/v0.5.0

v0.5.0
October 23, 2026
Latest
Security release: Next.js 16.4.2 fixes a critical remote code execution in the image optimizer (GHSA-2464-fhr4-w9xw) and a denial of service (GHSA-p3m5-59mp-jv5r). Update as soon as you can.
- Features54
- wizardsKeep the step in the addresseb0b55a0
- domainsLock the Cloudflare certificate6688078a
- IPv6-only servers and IPv6 generated addresses@PixelFederico#106
- cliFollow the canary switch on update651bf3bd
- updatesWarn before stranding a server94281372
- settingsOne line when everything is current0a2b6dac
- serversShow unusable agents and retryf0a508df
- serversRetry agent updates with backoff3ef2aa28
- serversTrack agent update attempts32156b21
- agentGate calls on the minimum agente3b78309
- agentBind the panel to one agent version5e6125cf
- uiImprove domains and migration flows82559cc1
- proxyAllow custom traefik labels2ea8aa2a
- envAdd bulk variable actionsd451e872
- serversMove access into overviewe7cc906a
- uiPolish cleanup and animate selectorsd1697811
- monitoringShow server apps81602344
- uiGrow the selection ring instead of snapping it onaaffcebb
- networkDismiss the network isolation notice38308f5f
- updatesOne canary switch for the fleetea3fb1b7
- migrationsKeep the grid on every screend04386b1
- monitoringClean up a server's disk823d0d17
- logsA bigger chooser scene on the grid9c5c5908
- settingsLay the updates scene on a grid0660e9aa
- mcpAgents around Deplo replace the robotb0a82412
- filtersShow each team's avatar960fa909
- templatesA hero with the compose launchercc58f21f
- migrationsLay the first screen on a grid2632db38
- settingsList Deplo last under system82f1338b
- mcpAntigravity, a claude code mark, gated steps1646b477
- mcpManage your own connected agents81297e2e
- mcpRedraw the robot rounder and friendlierc54786d6
- filtersFilter by several teams at once4cfa0c6b
- appsRoll back past the kept buildsf32a5afb
- domainsSecurity headers and cors origins6e46be36
- composeKeep a service's own middlewares67970ce9
- domainsDual-stack servers and AAAA recordsf7397925
- serversShip the live apps table2df93610
- serversLive table of a server's apps71b06e5e
- serversList a server's running apps in a tab0508418f
- appsMove servers from a General dialog88aa6637
- layoutSlide the team name width on a switch57e24f7b
- uiBlink the logo cursor on hover3d8f9fb3
- layoutSlide breadcrumb crumbs in and outf2530d0e
- envConfirm before replacing existing variables4b2dbd50
- deployA fuller console while a build waits7a48881a
- uiSlide the active step along the stepper91c66ae0
- appsFold several deploy warnings into onefdc29457
- mcpOne-column wizard and a tools tabe0c3b2cf
- uiEnlarge illustrated empty statesaefda0f2
- uiRedraw every illustration isometric0ddd2b8a
- appsName everything an app transfer costs195c93d0
- storageTransfer a database from the UIdc6d5e8e
- databasesTransfer a database to a team4ed85c9a
- Interface11
- domainsRestore the cloudflare note look01f6d71d
- domainsFade the cloudflare note vertically338e1427
- domainsFade the cloudflare note into the cardaef8c7a8
- serversFlatten the team access card6cd6a6ca
- updatesA large title for the update status14b1759b
- overviewSix cards in the loading skeleton0618da48
- updatesStatus card beside the illustration12e427f0
- updatesOne update hero for panel and servers9cc6a8aa
- updatesRead release notes like the changelog5e301026
- appsThree cards a row from 1280px wide7c1e6a99
- mcpDrop the per-machine note from Antigravity58f13179
- Fixes110
- depsUpdate next to 16.4.2 and all packagesf443ecb1
- dockerPatch node to 26.12.160546865
- migrationCopy into an app never deployed@PixelFederico#109
- deployRedeploy the deployment you clickedb722a16c
- releaseCredit commits past the 250th7300c964
- settingsA skeleton of its own on every pageea858ab4
- navShow the skeleton of the page you openf119674b
- mcpRefuse an agent token while MCP is off95726c7b
- uploadAccept a tar that stops reading earlye93103b1
- depsBump MCP server SDK past two advisoriesf9b76680
- storageDrop the mounts footnotea5762dac
- deployGive the build log a fixed height4d603012
- agentJudge every connection on a live hello4c9bc3d5
- cleanupSkip leftover scopes with nothing livea7201760
- deployRun the image sweep off the queuedd641f6d
- serversKeep the update fields out of doc checks6c5c8e49
- domainsAlign primary notice actions344ac34d
- migrationsSkip empty people steps70b7c80f
- domainsSimplify overview notices701bfb5f
- cleanupReport partial and skipped scopes06a15cd5
- logsShow console skeleton while loadinge92f6b12
- envBalance secret helper textb9eae7da
- envUse floating bulk action pilld8d49721
- monitoringShow stats before appse898ca78
- uiKeep font weight stable across states2295cc13
- notifyName the app on more alerts for push76d29021
- liveEnd streams when the sign-in is gone0cb5bf66
- agentKeep install tokens out of argvdedfee17
- authKey address limits on the proxy's own hop61212a45
- securityHash rate-limit keys a row cannot hold333121d3
- importKeep only declared domain services7bb00f30
- previewsBuild a fork at its approved commit41cf1fca
- uploadCount real bytes and files in a zip9ddeed19
- appsCheck repo address with a credential1405c959
- notifyKeep push alerts inside a member's reach0fdfeb10
- graphqlRe-check access on three live feeds80579ac9
- liveRe-check access on log and console streams2480755a
- appsRecheck server and domains on transfer9fa1f825
- usersLog account deletion only per own team384437ef
- serversHide other tenants from Server.teams80950889
- breadcrumbList only apps the member reaches6bd76b70
- projectsGate writes on the whole projectf89e462c
- deployAllowlist the compose up flagsf92e70a3
- cronsRefuse reserved env names in a job62638171
- cronsTreat every uid 0 spelling as root9e488663
- databasesKeep $ out of config file pathsb233c782
- compose-lintCount a ~ bind source as host reach8bb618fc
- compose-lintGate api socket, provider, build neta5259da0
- backupsGive restores a 2h deadlined206c505
- backupsName a database's owner to the agent57eae5d8
- deployLet the agent check files mounts566eab9e
- capabilitiesSay the key needs reveal_secretsee9551ac
- backupsDelete a target's backups with it1f1a3738
- destinationsRecovery key needs reveal_secretsdb8b93d7
- backupsReveal check for a deleted app's archive7f360e94
- backupsNeed delete_backups to delete them all26af3800
- composeMask secrets on the parsed yaml6730974b
- oauthShow the redirect origin actually requested2a6b9d39
- foldersKeep folder sharing inside token scope8d9a36f5
- mcpCap the request body before reading it2ed04b96
- notificationsMask webhook urls for api tokensb1b9a1fe
- mcpRefuse passthrough roots by what they return43b8233a
- tokensRefuse minting from a connected client90867575
- migrationRefuse Deplo's own source volumes1be18a82
- databasesCheck stack name on server movec162fbb6
- dataOne owner per volume and stack name8bf3a6a2
- domainsCap Let's Encrypt on every writer7b11b6e1
- domainsOne claim check for every writerd085cfff
- routingEscape a $ in a path prefix label757a7c6c
- uiMatch the team page skeletons 1:1a2f62fb0
- mcpSet agents up machine-wide, not per repo04d69243
- appsGive every app section its own skeletonc6af2a3d
- templatesKeep the hero intro across loading4ec9868d
- tokensRefuse a suspended user's token9c978246
- installStop cutting slow uploads off at 60sa2232815
- fleetRoll the agents on the instance's channel55c8329b
- deployRead the data dir at call timebf3b3b58
- testRemove the temp dirs a worker leaves5ea128ef
- uiKeep the modal scrim under the dialog6d10e47a
- uiLeave a selected card its own surface5f3b0240
- routingSay an app is down instead of 4044ec3294f
- migrationKey the export cache with an hmace9e84184
- updatesOffer canaries over a withdrawn stable97876b51
- deployStop reattaching to an agent gone darkf43e9c0d
- templatesPixel-match the store skeleton8c76c5b8
- templatesUnclip focus rings on the storef9269542
- monitoringA quiet inline clean up linkea203b3e
- monitoringKeep the page put on a pick79d5acb5
- templatesSix chips and a smoother compose3d466049
- isoSeat each illustration on its gridf579f826
- domainsLet cors preflights carry authorization63609237
- composeApply a domain's middlewaresbd9a5966
- gitJudge a bracketed scp clone addressdf7d3379
- composeGate every published port form30d4aecf
- testKeep the end of every worker's reporteb1370a8
- serversFit the apps table on any width00ca3748
- appsRefresh app pages when a deploy changes787c90e3
- serversRound the apps table cornersed10423d
- depsPick up the patched multipart parser31c290ea
- appsHide the redeploy notice once one is queued74c5a234
- uiBlink the logo cursor at a terminal pace5d74b975
- layoutLet breadcrumb crumbs settle after sliding6de91d20
- deployApply domain edits made mid-builde6200d5f
- deployShow the commit while a deploy builds275d5e44
- uiPoint transfer help at its docs page54b9cea7
- uiAgree transfer copy in number and restarteeaae249
- databasesSanitize the default database name15d46b22
- databasesRecreate a database on every reroute215ba4ce
- mcpState what transfer_app really needs3f43a1a4
- appsShorten the team transfer copy99fe9919
- Performance1
- passwordOne random fill per generated password17a1f564
Contributors
Compare on GitHub

Ten minutes from now,
it's live.

Answer three questions and pick a host, or install Deplo on a server you already have. It's free, and leaving is as easy as arriving. What you do with the money you save is your business.

Docs Get started

Ten minutes from now, it's live.

Ten minutes from now,
it's live.