Tags

[Telemetry] apply extension upgrade on package update. Reapply optimizations as well. [telemetry]unless [telemetry] => autotune is disabled.
[multiPHP] resolve various edge cases
[Web Apps] prefer stable releases. Backport MaxMind CCPA compliance changes
[PowerDNS] fix Bootstrapper failure when enabled and firewalld disabled
[sysctl] raise fs.inotify.max_user_instances. A high count of crond processes create an excessive number of watchers
[auth] set_temp_password() fails to reapply previous password
[PowerDNS] module update. Do not follow API redirections.
[apnscpd] truncate logfile if size exceeds RLIMIT_FSIZE
[PHP-FPM] DOCUMENT_ROOT no longer reflects unjailed path
[admin] edit_site(), add_site(), delete_site()- support flags (--since=now --force is '[since:now,force:true]', -n --reset '[n:true,reset:true]', etc)
[EditDomain] -c siteinfo,plan=NEWPLAN without --reset applies plan differences retaining any overrides. Plan switch with --reset resets all modified values - except lists such as aliases,aliases - with the plan settings. --backup backs up metadata prior to edit.
[Migrations] various improvements to cPanel migrations. Apply secondary migration check on invalid home locations for email. Import SquirrelMail when --unsafe-sources provided. Convert incompatible responders to local delivery. Apply o+x on all document roots to allow initial reading.

[multiPHP] extension directory may incorrectly pickup ApisCP extensions
[Rampart] fail2ban prefix overwritten
[Databases] clone() copies MySQL, PostgreSQL databases
[Auth] forward Cloudflare IP
[Discourse] disable mini profiler

[PHP] Remi + native multiPHP builds. Remi is simpler package-based at the cost of performance. Native builds have similar throughput to system PHP version (+10-15% over Remi) at the added cost of compilation. apache.php-multi Scope facilitates native builds. See PHP-FPM.md in release documentation.
[PHP] correct PHP 7.4 configuration flag for GD
[SpamAssassin] add X-Envelope-From header for SPF/DKIM checks which occur after SRS rewrite
[CLI] errors always report to STDERR
[Scopes] info() includes default Scope value
[License] add support for network restrictions, domain limits

[Scopes] system.kernel sets kernel type (system, stable, experimental)
[Branding] rename APNSCP to ApisCP
[mysql] recover-innodb-from-disk(), given a directory import all data files (.ibd) for which database lacks but has .frm
[CLI] EditDomain new flags: --all applies edit operation to all sites, previous "--all" flag (edit all services) renamed to "--reconfig". --dry-run shows proposed changes. --reset resets the account to plan defaults.
[Scopes] apache.ports sets HTTP/HTTPS ports for Apache to facilitate placing other services upstream. A non-SSL instance must always be active.
[PowerDNS] update module, add "native" support (lithiumhosting/apnscp-powerdns@6ba5681)
[CloudFlare] update module, trim certain RRs in accordance with API formatting. URI formatting (apisnetworks/apnscp-dns-cloudflare@65132b3)
[AWS] update module, fix condition where an empty RR set on modificaiton fails (apisnetworks/apnscp-dns-aws@6b99a0f)
[Laravel] fix installer version reference, misc installation bugs
[Web Apps] update look and feel
[CLI] YAML_INLINE environment var controls folding depth (default: 2)
[PHP-FPM] correct cyclic socket dependency
[Debugging] add documentation. common:purge-preferences() deletes user prefs in debug. misc:debug-session() enables debugging for named session
[misc] jobify() enqueues an API command as a job. Optional third argument binds to a Site Administrator role, which could be possible to call pman_run() as a secondary user
[artisan] opcenter:plan accepts --base and -c svc,var=val flags to optionally derive from an existing plan and service overrides
[Scopes] apache.strict-directives controls how Apache treats unrecognized directives - 550 (default, strict enabled) or ignores (strict disabled)
[Web Apps] installer errors do not bubble up in try/catch if ER messages upconverted to exceptions

[DAPHNIE] passive metrics collection when [telemetry] => enabled = 1
[apnscpd] resolve when waitpid() syscalls in housekeeping fail to collect exit code
[Bootstrapper] resolve conditions in which Mitogen cannot activate. FLARE prematurely checks for /etc/sysconfig/apnscp

[Logs] fix condition in which xfs-based mounts can trigger an Apache reload failure if a site goes over quota due to idiosyncrasies in how quota enforcement operates compared to ext4
[Scopes] cp.flare-check, cp.update-schedule
[UI] job runner status now available as admin
[scripts] htrebuild implies systemctl reload httpd
[Metrics] materialized views properly refresh
[Opcenter] fix condition where editing all attributes of a domain results in dropping the domain from mapping and subequently fails to regenerate session

[UI] Toolbox domain clones within Manage Mailboxes, Subdomains, and DNS Manager
[PHP] drop dentry/inode cache on PHP-FPM update
[Opcenter] invalidating metacache on certain service reconfigurations triggers session ghost
[UI] update styles
[SSL] AcmePHP supports GET-as-POST
[Opcenter] DeleteDomain, EditDomain support invoice grouping

[System] force-update mod_security package; optionally require module configuration

[Migrations] update cPanel shadow location
[Scopes] ftp.enabled toggles FTP on server
[Web Apps] restrict .git/

[Migration] --late-quota flag applies storage amnesty during migration (see Migrations.md)
[Settings] blank page on full name change
[Migration] transform symlink'd docroot to their platform equivalent
[auth] set_temp_password() now works as site administrator. First parameter becomes target user, e.g. cpcmd -d site1 auth:set-temp-password foobar 480 (assign random password to user foobar, valid for 480 seconds)
[Web Apps] early enrollment to snapshots

[Hooks] new! Copy bin/hooks to config/custom/hooks to get started
[Web Apps] version sort breaks next version upgrade
[apnscpd] fix "php_version insufficient privileges to call" error
[Impersonation] restore session on app that initiated impersonation

[admin] get_site_storage()- list storage for all domains
[user] getpwnam cache clobbers non-system user list

[Migrations] --apply-fortification=MODE applies Fortification profile to detected Web Apps
[cpcmd] cpcmd --help command:name invokes introspection
[mod_security] update baseline configuration, use Lua for filtering
[File Manager] add "Date Modified" column
[web] status() method reports mod_systemd on Apache 2.4.41-7+ releases

[Migrations] multiple improvements to cPanel imports
[Apps] new PHP Pool management
[Apps] application manifest accepts Yamlf ormat
[SSL] wait 5 seconds to confirm TXT record during DNS validations
[Rampart] flush() allows for emergency flushing of all or named jails. whitelist() assumes authenticated address when $ip omitted

[Metrics] preview release, cpcmd scope:set cp.config telemetry enabled 1
[API] misc:command-info()/misc:i() dumps introspection on a command, similar in usage to misc:list-commands()
[Nexus] multi-selection on domains, scope support to periodically purge suspended domains via opcenter.account-cleanup
[DNS] add_record_conditionally()- honor RFC 1912 § 2.4 CNAME rules
[Web Apps] search function
[Artisan] new make:scope command
[Databases] properly remap definers on views/triggers/events/procedures through "best-effort" target user or account admin
[Web Apps] Release Fortification mode now always available

[Bootstrapper] improvements to unsafe text handling in Ansible 2.9
[Core] DEBUG=1 environment variable enables debugging for the life of the request
[Postfix] disable deep protocol inspection tests, reduce bad SASL cache duration to 30 minutes
[Migrations] read "documentroot" metadata to determine addon/subdomain locations. Follow historic "shell" paths for user mail in cPanel backups.
[apnscpd] disable realpath cache
[rspamd] package dependency relocation
[wordpress] report database credentials in the presence of custom error handlers
[config] support vanity nameserver configuration in [dns] => vanity_ns
[dns] import_from_domain() clones DNS records from hosted domain
[dns] export()/import() visibility opened to admin

[Bootstrapper] Ansible 2.9 compatibility changes. IPv4, IPv6 detection checks routable interface for accessibility. Use Mitogen where available. MySQL password recovery now attempted as needed.
[upcp] switching from edge to major/minor resumes from last known branch deviation
[php] migrate_directives()- move PHP directives between ISAPI/FPM environments
[cgroups] resolve higher order devices (> 255 such as NVMe) generate exception

[Bootstrapper] Mitogen, Ansible 2.9 compatibility changes
[Bootstrapper] add abbreviated playbook for prebuilt images
[AJAX] disallow user function invocation outside webapp path
[DNS Manager] Toolbox feature now works with admin
[cpcmd] -l/--list-commands feature to display all commands for role
[Migrations] ensure html/ has public accessibility

[Bootstrapper] prefer EDGE builds on install to improve responsiveness in resolving installer issues. Switch back to preferred update policy after install
[Security] always ensure FST/etc/sudoers is broken from system version
[Bootstrapper] fix urllib3 warning

[MySQL] MDEV-20987 mitigation