---
title: "v0.5.0 - Deplo"
description: "What changed in Deplo v0.5.0: 176 changes."
url: "https://deplo.build/changelog/v0.5.0"
image: "https://deplo.build/api/media/file/og_cover.png"
updated: "2026-10-23"
---

# v0.5.0

2026-10-23

> Security release: Next.js 16.4.2 fixes a critical remote code execution in the image optimizer ([GHSA-2464-fhr4-w9xw](https://github.com/advisories/GHSA-2464-fhr4-w9xw)) and a denial of service ([GHSA-p3m5-59mp-jv5r](https://github.com/advisories/GHSA-p3m5-59mp-jv5r)). Update as soon as you can.

**Features**

- wizards: Keep the step in the address ([eb0b55a0](https://github.com/DeploCloud/deplo/commit/eb0b55a0))
- domains: Lock the Cloudflare certificate ([6688078a](https://github.com/DeploCloud/deplo/commit/6688078a))
- IPv6-only servers and IPv6 generated addresses, by @PixelFederico ([#106](https://github.com/DeploCloud/deplo/pull/106))
- cli: Follow the canary switch on update ([651bf3bd](https://github.com/DeploCloud/deplo/commit/651bf3bd))
- updates: Warn before stranding a server ([94281372](https://github.com/DeploCloud/deplo/commit/94281372))
- settings: One line when everything is current ([0a2b6dac](https://github.com/DeploCloud/deplo/commit/0a2b6dac))
- servers: Show unusable agents and retry ([f0a508df](https://github.com/DeploCloud/deplo/commit/f0a508df))
- servers: Retry agent updates with backoff ([3ef2aa28](https://github.com/DeploCloud/deplo/commit/3ef2aa28))
- servers: Track agent update attempts ([32156b21](https://github.com/DeploCloud/deplo/commit/32156b21))
- agent: Gate calls on the minimum agent ([e3b78309](https://github.com/DeploCloud/deplo/commit/e3b78309))
- agent: Bind the panel to one agent version ([5e6125cf](https://github.com/DeploCloud/deplo/commit/5e6125cf))
- ui: Improve domains and migration flows ([82559cc1](https://github.com/DeploCloud/deplo/commit/82559cc1))
- proxy: Allow custom traefik labels ([2ea8aa2a](https://github.com/DeploCloud/deplo/commit/2ea8aa2a))
- env: Add bulk variable actions ([d451e872](https://github.com/DeploCloud/deplo/commit/d451e872))
- servers: Move access into overview ([e7cc906a](https://github.com/DeploCloud/deplo/commit/e7cc906a))
- ui: Polish cleanup and animate selectors ([d1697811](https://github.com/DeploCloud/deplo/commit/d1697811))
- monitoring: Show server apps ([81602344](https://github.com/DeploCloud/deplo/commit/81602344))
- ui: Grow the selection ring instead of snapping it on ([aaffcebb](https://github.com/DeploCloud/deplo/commit/aaffcebb))
- network: Dismiss the network isolation notice ([38308f5f](https://github.com/DeploCloud/deplo/commit/38308f5f))
- updates: One canary switch for the fleet ([ea3fb1b7](https://github.com/DeploCloud/deplo/commit/ea3fb1b7))
- migrations: Keep the grid on every screen ([d04386b1](https://github.com/DeploCloud/deplo/commit/d04386b1))
- monitoring: Clean up a server's disk ([823d0d17](https://github.com/DeploCloud/deplo/commit/823d0d17))
- logs: A bigger chooser scene on the grid ([9c5c5908](https://github.com/DeploCloud/deplo/commit/9c5c5908))
- settings: Lay the updates scene on a grid ([0660e9aa](https://github.com/DeploCloud/deplo/commit/0660e9aa))
- mcp: Agents around Deplo replace the robot ([b0a82412](https://github.com/DeploCloud/deplo/commit/b0a82412))
- filters: Show each team's avatar ([960fa909](https://github.com/DeploCloud/deplo/commit/960fa909))
- templates: A hero with the compose launcher ([cc58f21f](https://github.com/DeploCloud/deplo/commit/cc58f21f))
- migrations: Lay the first screen on a grid ([2632db38](https://github.com/DeploCloud/deplo/commit/2632db38))
- settings: List Deplo last under system ([82f1338b](https://github.com/DeploCloud/deplo/commit/82f1338b))
- mcp: Antigravity, a claude code mark, gated steps ([1646b477](https://github.com/DeploCloud/deplo/commit/1646b477))
- mcp: Manage your own connected agents ([81297e2e](https://github.com/DeploCloud/deplo/commit/81297e2e))
- mcp: Redraw the robot rounder and friendlier ([c54786d6](https://github.com/DeploCloud/deplo/commit/c54786d6))
- filters: Filter by several teams at once ([4cfa0c6b](https://github.com/DeploCloud/deplo/commit/4cfa0c6b))
- apps: Roll back past the kept builds ([f32a5afb](https://github.com/DeploCloud/deplo/commit/f32a5afb))
- domains: Security headers and cors origins ([6e46be36](https://github.com/DeploCloud/deplo/commit/6e46be36))
- compose: Keep a service's own middlewares ([67970ce9](https://github.com/DeploCloud/deplo/commit/67970ce9))
- domains: Dual-stack servers and AAAA records ([f7397925](https://github.com/DeploCloud/deplo/commit/f7397925))
- servers: Ship the live apps table ([2df93610](https://github.com/DeploCloud/deplo/commit/2df93610))
- servers: Live table of a server's apps ([71b06e5e](https://github.com/DeploCloud/deplo/commit/71b06e5e))
- servers: List a server's running apps in a tab ([0508418f](https://github.com/DeploCloud/deplo/commit/0508418f))
- apps: Move servers from a General dialog ([88aa6637](https://github.com/DeploCloud/deplo/commit/88aa6637))
- layout: Slide the team name width on a switch ([57e24f7b](https://github.com/DeploCloud/deplo/commit/57e24f7b))
- ui: Blink the logo cursor on hover ([3d8f9fb3](https://github.com/DeploCloud/deplo/commit/3d8f9fb3))
- layout: Slide breadcrumb crumbs in and out ([f2530d0e](https://github.com/DeploCloud/deplo/commit/f2530d0e))
- env: Confirm before replacing existing variables ([4b2dbd50](https://github.com/DeploCloud/deplo/commit/4b2dbd50))
- deploy: A fuller console while a build waits ([7a48881a](https://github.com/DeploCloud/deplo/commit/7a48881a))
- ui: Slide the active step along the stepper ([91c66ae0](https://github.com/DeploCloud/deplo/commit/91c66ae0))
- apps: Fold several deploy warnings into one ([fdc29457](https://github.com/DeploCloud/deplo/commit/fdc29457))
- mcp: One-column wizard and a tools tab ([e0c3b2cf](https://github.com/DeploCloud/deplo/commit/e0c3b2cf))
- ui: Enlarge illustrated empty states ([aefda0f2](https://github.com/DeploCloud/deplo/commit/aefda0f2))
- ui: Redraw every illustration isometric ([0ddd2b8a](https://github.com/DeploCloud/deplo/commit/0ddd2b8a))
- apps: Name everything an app transfer costs ([195c93d0](https://github.com/DeploCloud/deplo/commit/195c93d0))
- storage: Transfer a database from the UI ([dc6d5e8e](https://github.com/DeploCloud/deplo/commit/dc6d5e8e))
- databases: Transfer a database to a team ([4ed85c9a](https://github.com/DeploCloud/deplo/commit/4ed85c9a))

**Interface**

- domains: Restore the cloudflare note look ([01f6d71d](https://github.com/DeploCloud/deplo/commit/01f6d71d))
- domains: Fade the cloudflare note vertically ([338e1427](https://github.com/DeploCloud/deplo/commit/338e1427))
- domains: Fade the cloudflare note into the card ([aef8c7a8](https://github.com/DeploCloud/deplo/commit/aef8c7a8))
- servers: Flatten the team access card ([6cd6a6ca](https://github.com/DeploCloud/deplo/commit/6cd6a6ca))
- updates: A large title for the update status ([14b1759b](https://github.com/DeploCloud/deplo/commit/14b1759b))
- overview: Six cards in the loading skeleton ([0618da48](https://github.com/DeploCloud/deplo/commit/0618da48))
- updates: Status card beside the illustration ([12e427f0](https://github.com/DeploCloud/deplo/commit/12e427f0))
- updates: One update hero for panel and servers ([9cc6a8aa](https://github.com/DeploCloud/deplo/commit/9cc6a8aa))
- updates: Read release notes like the changelog ([5e301026](https://github.com/DeploCloud/deplo/commit/5e301026))
- apps: Three cards a row from 1280px wide ([7c1e6a99](https://github.com/DeploCloud/deplo/commit/7c1e6a99))
- mcp: Drop the per-machine note from Antigravity ([58f13179](https://github.com/DeploCloud/deplo/commit/58f13179))

**Fixes**

- deps: Update next to 16.4.2 and all packages ([f443ecb1](https://github.com/DeploCloud/deplo/commit/f443ecb1))
- docker: Patch node to 26.12.1 ([60546865](https://github.com/DeploCloud/deplo/commit/60546865))
- migration: Copy into an app never deployed, by @PixelFederico ([#109](https://github.com/DeploCloud/deplo/pull/109))
- deploy: Redeploy the deployment you clicked ([b722a16c](https://github.com/DeploCloud/deplo/commit/b722a16c))
- release: Credit commits past the 250th ([7300c964](https://github.com/DeploCloud/deplo/commit/7300c964))
- settings: A skeleton of its own on every page ([ea858ab4](https://github.com/DeploCloud/deplo/commit/ea858ab4))
- nav: Show the skeleton of the page you open ([f119674b](https://github.com/DeploCloud/deplo/commit/f119674b))
- mcp: Refuse an agent token while MCP is off ([95726c7b](https://github.com/DeploCloud/deplo/commit/95726c7b))
- upload: Accept a tar that stops reading early ([e93103b1](https://github.com/DeploCloud/deplo/commit/e93103b1))
- deps: Bump MCP server SDK past two advisories ([f9b76680](https://github.com/DeploCloud/deplo/commit/f9b76680))
- storage: Drop the mounts footnote ([a5762dac](https://github.com/DeploCloud/deplo/commit/a5762dac))
- deploy: Give the build log a fixed height ([4d603012](https://github.com/DeploCloud/deplo/commit/4d603012))
- agent: Judge every connection on a live hello ([4c9bc3d5](https://github.com/DeploCloud/deplo/commit/4c9bc3d5))
- cleanup: Skip leftover scopes with nothing live ([a7201760](https://github.com/DeploCloud/deplo/commit/a7201760))
- deploy: Run the image sweep off the queue ([dd641f6d](https://github.com/DeploCloud/deplo/commit/dd641f6d))
- servers: Keep the update fields out of doc checks ([6c5c8e49](https://github.com/DeploCloud/deplo/commit/6c5c8e49))
- domains: Align primary notice actions ([344ac34d](https://github.com/DeploCloud/deplo/commit/344ac34d))
- migrations: Skip empty people steps ([70b7c80f](https://github.com/DeploCloud/deplo/commit/70b7c80f))
- domains: Simplify overview notices ([701bfb5f](https://github.com/DeploCloud/deplo/commit/701bfb5f))
- cleanup: Report partial and skipped scopes ([06a15cd5](https://github.com/DeploCloud/deplo/commit/06a15cd5))
- logs: Show console skeleton while loading ([e92f6b12](https://github.com/DeploCloud/deplo/commit/e92f6b12))
- env: Balance secret helper text ([b9eae7da](https://github.com/DeploCloud/deplo/commit/b9eae7da))
- env: Use floating bulk action pill ([d8d49721](https://github.com/DeploCloud/deplo/commit/d8d49721))
- monitoring: Show stats before apps ([e898ca78](https://github.com/DeploCloud/deplo/commit/e898ca78))
- ui: Keep font weight stable across states ([2295cc13](https://github.com/DeploCloud/deplo/commit/2295cc13))
- notify: Name the app on more alerts for push ([76d29021](https://github.com/DeploCloud/deplo/commit/76d29021))
- live: End streams when the sign-in is gone ([0cb5bf66](https://github.com/DeploCloud/deplo/commit/0cb5bf66))
- agent: Keep install tokens out of argv ([dedfee17](https://github.com/DeploCloud/deplo/commit/dedfee17))
- auth: Key address limits on the proxy's own hop ([61212a45](https://github.com/DeploCloud/deplo/commit/61212a45))
- security: Hash rate-limit keys a row cannot hold ([333121d3](https://github.com/DeploCloud/deplo/commit/333121d3))
- import: Keep only declared domain services ([7bb00f30](https://github.com/DeploCloud/deplo/commit/7bb00f30))
- previews: Build a fork at its approved commit ([41cf1fca](https://github.com/DeploCloud/deplo/commit/41cf1fca))
- upload: Count real bytes and files in a zip ([9ddeed19](https://github.com/DeploCloud/deplo/commit/9ddeed19))
- apps: Check repo address with a credential ([1405c959](https://github.com/DeploCloud/deplo/commit/1405c959))
- notify: Keep push alerts inside a member's reach ([0fdfeb10](https://github.com/DeploCloud/deplo/commit/0fdfeb10))
- graphql: Re-check access on three live feeds ([80579ac9](https://github.com/DeploCloud/deplo/commit/80579ac9))
- live: Re-check access on log and console streams ([2480755a](https://github.com/DeploCloud/deplo/commit/2480755a))
- apps: Recheck server and domains on transfer ([9fa1f825](https://github.com/DeploCloud/deplo/commit/9fa1f825))
- users: Log account deletion only per own team ([384437ef](https://github.com/DeploCloud/deplo/commit/384437ef))
- servers: Hide other tenants from Server.teams ([80950889](https://github.com/DeploCloud/deplo/commit/80950889))
- breadcrumb: List only apps the member reaches ([6bd76b70](https://github.com/DeploCloud/deplo/commit/6bd76b70))
- projects: Gate writes on the whole project ([f89e462c](https://github.com/DeploCloud/deplo/commit/f89e462c))
- deploy: Allowlist the compose up flags ([f92e70a3](https://github.com/DeploCloud/deplo/commit/f92e70a3))
- crons: Refuse reserved env names in a job ([62638171](https://github.com/DeploCloud/deplo/commit/62638171))
- crons: Treat every uid 0 spelling as root ([9e488663](https://github.com/DeploCloud/deplo/commit/9e488663))
- databases: Keep $ out of config file paths ([b233c782](https://github.com/DeploCloud/deplo/commit/b233c782))
- compose-lint: Count a ~ bind source as host reach ([8bb618fc](https://github.com/DeploCloud/deplo/commit/8bb618fc))
- compose-lint: Gate api socket, provider, build net ([a5259da0](https://github.com/DeploCloud/deplo/commit/a5259da0))
- backups: Give restores a 2h deadline ([d206c505](https://github.com/DeploCloud/deplo/commit/d206c505))
- backups: Name a database's owner to the agent ([57eae5d8](https://github.com/DeploCloud/deplo/commit/57eae5d8))
- deploy: Let the agent check files mounts ([566eab9e](https://github.com/DeploCloud/deplo/commit/566eab9e))
- capabilities: Say the key needs reveal_secrets ([ee9551ac](https://github.com/DeploCloud/deplo/commit/ee9551ac))
- backups: Delete a target's backups with it ([1f1a3738](https://github.com/DeploCloud/deplo/commit/1f1a3738))
- destinations: Recovery key needs reveal_secrets ([db8b93d7](https://github.com/DeploCloud/deplo/commit/db8b93d7))
- backups: Reveal check for a deleted app's archive ([7f360e94](https://github.com/DeploCloud/deplo/commit/7f360e94))
- backups: Need delete_backups to delete them all ([26af3800](https://github.com/DeploCloud/deplo/commit/26af3800))
- compose: Mask secrets on the parsed yaml ([6730974b](https://github.com/DeploCloud/deplo/commit/6730974b))
- oauth: Show the redirect origin actually requested ([2a6b9d39](https://github.com/DeploCloud/deplo/commit/2a6b9d39))
- folders: Keep folder sharing inside token scope ([8d9a36f5](https://github.com/DeploCloud/deplo/commit/8d9a36f5))
- mcp: Cap the request body before reading it ([2ed04b96](https://github.com/DeploCloud/deplo/commit/2ed04b96))
- notifications: Mask webhook urls for api tokens ([b1b9a1fe](https://github.com/DeploCloud/deplo/commit/b1b9a1fe))
- mcp: Refuse passthrough roots by what they return ([43b8233a](https://github.com/DeploCloud/deplo/commit/43b8233a))
- tokens: Refuse minting from a connected client ([90867575](https://github.com/DeploCloud/deplo/commit/90867575))
- migration: Refuse Deplo's own source volumes ([1be18a82](https://github.com/DeploCloud/deplo/commit/1be18a82))
- databases: Check stack name on server move ([c162fbb6](https://github.com/DeploCloud/deplo/commit/c162fbb6))
- data: One owner per volume and stack name ([8bf3a6a2](https://github.com/DeploCloud/deplo/commit/8bf3a6a2))
- domains: Cap Let's Encrypt on every writer ([7b11b6e1](https://github.com/DeploCloud/deplo/commit/7b11b6e1))
- domains: One claim check for every writer ([d085cfff](https://github.com/DeploCloud/deplo/commit/d085cfff))
- routing: Escape a $ in a path prefix label ([757a7c6c](https://github.com/DeploCloud/deplo/commit/757a7c6c))
- ui: Match the team page skeletons 1:1 ([a2f62fb0](https://github.com/DeploCloud/deplo/commit/a2f62fb0))
- mcp: Set agents up machine-wide, not per repo ([04d69243](https://github.com/DeploCloud/deplo/commit/04d69243))
- apps: Give every app section its own skeleton ([c6af2a3d](https://github.com/DeploCloud/deplo/commit/c6af2a3d))
- templates: Keep the hero intro across loading ([4ec9868d](https://github.com/DeploCloud/deplo/commit/4ec9868d))
- tokens: Refuse a suspended user's token ([9c978246](https://github.com/DeploCloud/deplo/commit/9c978246))
- install: Stop cutting slow uploads off at 60s ([a2232815](https://github.com/DeploCloud/deplo/commit/a2232815))
- fleet: Roll the agents on the instance's channel ([55c8329b](https://github.com/DeploCloud/deplo/commit/55c8329b))
- deploy: Read the data dir at call time ([bf3b3b58](https://github.com/DeploCloud/deplo/commit/bf3b3b58))
- test: Remove the temp dirs a worker leaves ([5ea128ef](https://github.com/DeploCloud/deplo/commit/5ea128ef))
- ui: Keep the modal scrim under the dialog ([6d10e47a](https://github.com/DeploCloud/deplo/commit/6d10e47a))
- ui: Leave a selected card its own surface ([5f3b0240](https://github.com/DeploCloud/deplo/commit/5f3b0240))
- routing: Say an app is down instead of 404 ([4ec3294f](https://github.com/DeploCloud/deplo/commit/4ec3294f))
- migration: Key the export cache with an hmac ([e9e84184](https://github.com/DeploCloud/deplo/commit/e9e84184))
- updates: Offer canaries over a withdrawn stable ([97876b51](https://github.com/DeploCloud/deplo/commit/97876b51))
- deploy: Stop reattaching to an agent gone dark ([f43e9c0d](https://github.com/DeploCloud/deplo/commit/f43e9c0d))
- templates: Pixel-match the store skeleton ([8c76c5b8](https://github.com/DeploCloud/deplo/commit/8c76c5b8))
- templates: Unclip focus rings on the store ([f9269542](https://github.com/DeploCloud/deplo/commit/f9269542))
- monitoring: A quiet inline clean up link ([ea203b3e](https://github.com/DeploCloud/deplo/commit/ea203b3e))
- monitoring: Keep the page put on a pick ([79d5acb5](https://github.com/DeploCloud/deplo/commit/79d5acb5))
- templates: Six chips and a smoother compose ([3d466049](https://github.com/DeploCloud/deplo/commit/3d466049))
- iso: Seat each illustration on its grid ([f579f826](https://github.com/DeploCloud/deplo/commit/f579f826))
- domains: Let cors preflights carry authorization ([63609237](https://github.com/DeploCloud/deplo/commit/63609237))
- compose: Apply a domain's middlewares ([bd9a5966](https://github.com/DeploCloud/deplo/commit/bd9a5966))
- git: Judge a bracketed scp clone address ([df7d3379](https://github.com/DeploCloud/deplo/commit/df7d3379))
- compose: Gate every published port form ([30d4aecf](https://github.com/DeploCloud/deplo/commit/30d4aecf))
- test: Keep the end of every worker's report ([eb1370a8](https://github.com/DeploCloud/deplo/commit/eb1370a8))
- servers: Fit the apps table on any width ([00ca3748](https://github.com/DeploCloud/deplo/commit/00ca3748))
- apps: Refresh app pages when a deploy changes ([787c90e3](https://github.com/DeploCloud/deplo/commit/787c90e3))
- servers: Round the apps table corners ([ed10423d](https://github.com/DeploCloud/deplo/commit/ed10423d))
- deps: Pick up the patched multipart parser ([31c290ea](https://github.com/DeploCloud/deplo/commit/31c290ea))
- apps: Hide the redeploy notice once one is queued ([74c5a234](https://github.com/DeploCloud/deplo/commit/74c5a234))
- ui: Blink the logo cursor at a terminal pace ([5d74b975](https://github.com/DeploCloud/deplo/commit/5d74b975))
- layout: Let breadcrumb crumbs settle after sliding ([6de91d20](https://github.com/DeploCloud/deplo/commit/6de91d20))
- deploy: Apply domain edits made mid-build ([e6200d5f](https://github.com/DeploCloud/deplo/commit/e6200d5f))
- deploy: Show the commit while a deploy builds ([275d5e44](https://github.com/DeploCloud/deplo/commit/275d5e44))
- ui: Point transfer help at its docs page ([54b9cea7](https://github.com/DeploCloud/deplo/commit/54b9cea7))
- ui: Agree transfer copy in number and restart ([eeaae249](https://github.com/DeploCloud/deplo/commit/eeaae249))
- databases: Sanitize the default database name ([15d46b22](https://github.com/DeploCloud/deplo/commit/15d46b22))
- databases: Recreate a database on every reroute ([215ba4ce](https://github.com/DeploCloud/deplo/commit/215ba4ce))
- mcp: State what transfer_app really needs ([3f43a1a4](https://github.com/DeploCloud/deplo/commit/3f43a1a4))
- apps: Shorten the team transfer copy ([99fe9919](https://github.com/DeploCloud/deplo/commit/99fe9919))

**Performance**

- password: One random fill per generated password ([17a1f564](https://github.com/DeploCloud/deplo/commit/17a1f564))

[Compare on GitHub](https://github.com/DeploCloud/deplo/compare/v0.4.0...v0.5.0)

```json
{
  "@context": "https://schema.org",
  "@graph": [
    {
      "@type": "Organization",
      "@id": "https://deplo.build/#organization",
      "name": "Deplo",
      "url": "https://deplo.build",
      "description": "Deploy apps from Git, Docker images or Compose on your own servers with Deplo. Open source, automatic HTTPS, backups and no per-seat fees.",
      "logo": {
        "@type": "ImageObject",
        "url": "https://deplo.build/api/media/file/og_logo.png",
        "width": 824,
        "height": 824
      },
      "sameAs": [
        "https://ds.deplo.build",
        "https://x.com/deplocloud",
        "https://www.instagram.com/deplocloud",
        "https://github.com/DeploCloud/deplo"
      ]
    },
    {
      "@type": "WebSite",
      "@id": "https://deplo.build/#website",
      "name": "Deplo",
      "url": "https://deplo.build",
      "description": "Deploy apps from Git, Docker images or Compose on your own servers with Deplo. Open source, automatic HTTPS, backups and no per-seat fees.",
      "publisher": {
        "@id": "https://deplo.build/#organization"
      }
    }
  ]
}
```