Skip to main content

42 posts tagged with "Release Note"

View All Tags

· One min read
moonrailgun
  • Added per-IP rate limiting for account registration (guest registration included) to curb bulk sign-ups.
    • Defaults to 3 attempts per hour and 10 per day for each IP, configurable via the REGISTER_IP_LIMIT_PER_HOUR and REGISTER_IP_LIMIT_PER_DAY environment variables.
    • Quotas are shared across all instances through Redis. If you run behind a reverse proxy, make sure it forwards the real client IP, see the environment variables documentation for details.
  • Socket.IO connections now record the client IP with the same rules as HTTP requests, so IP-based features such as login IP history behave consistently regardless of how a client connects.
  • Improved the new admin panel:
    • The sidebar can be collapsed into an icon-only mode.
    • User search supports the nickname#discriminator format.
    • Table columns can be resized by dragging.
    • Fixed image URLs that failed to resolve against the backend, and fixed misaligned items in the user action menu.
  • Security: friend.buildFriendRelation is now an internal-only action and can no longer be called directly through HTTP or Socket.IO. Friend relations must go through the request / accept flow.
  • Removed the com.msgbyte.ai-assistant plugin.
  • The Docker image now uses a multi-stage build, which noticeably shrinks the runtime image.

· One min read
moonrailgun
  • Introduced the new admin panel (Admin Next), a rewrite of the management backend (#311).
  • Added slow mode for group text panels: limit how many messages each member can send within an interval.
    • Quotas are tracked per member; system messages and bots are exempt.
    • Members see the remaining quota and a countdown once the limit is reached.
  • Multi-person conversations now enforce membership on the server (#318).
    • You can leave a multi-person conversation.
    • Added the setting "Only allow friends to invite me to conversations".
    • Closing a conversation hides it until a new message arrives.
  • OpenAPI: adding a bot to a group now requires the manageUser permission.
  • The sample nginx config now preserves the client IP and websocket headers.
  • Admin: the user table can scroll horizontally.
  • Build: pinned the pnpm version.

· One min read
moonrailgun
  • Docker: upgraded Traefik in the docker-compose files and the Kubernetes manifests for API compatibility.
  • Added AGENTS.md with repository guidance for coding agents.

· One min read
moonrailgun
  • Login IP history is now recorded. The admin panel shows each user's last login IP, time and user agent, and provides a login log page.
  • Images uploaded from the markdown editor and markdown panel are now tagged with their usage.
  • Admin: the file page gained a page size selector, the usage filter can be cleared, and the maximum number of rows was raised.
  • Docs: added a ClawCloud Run one-click deploy button.