1.5.10.1870

What's Changed

• merge stable - 1.5.10.1826 into dev by @fog-workflows[bot] in #814
• Stable Release PR For 1.5.10.1826 - 2026-05-15 by @fog-workflows[bot] in #822
• Stable Release PR For 1.5.10.1870 - 2026-06-15 by @fog-workflows[bot] in #829

Full Changelog: 1.5.10.1826...1.5.10.1870

Commits

• feat(api): add token-authenticated DB backup endpoint (abaae49e2)
• docs(contributing): fix broken TOC links and add missing sections (172dc35cd)
• fix(inventory): allowlist writable fields, block mass-assignment (7251c3c6b)
• Should fix issue with inventory mapping. (749d61e99)
• fix(multicast): clear sessions when udp-sender exits on its own (#820) (4b2ce25a2)
• fix(host): PHP 8 safety for mac handling on host creation/check-in (578cf5cfd)
• Should address 067 vuln on dev-branch (53144afdb)
• security(wol): authenticate the inter-node Wake-on-LAN relay (820e99690)
• fix(auth): drop ipxe from the no-auth allowlists (26f37fbbc)
• security(install): protect schema deploy with a per-install token (7a10a8c84)
• security(csp): harden Content-Security-Policy to script-src 'self' (2fd360483)
• fix(hostmanager): early-return getHostByMacAddresses on empty macs (7d7ea75f8)
• Add NULL sentinel to explicitly clear group-general fields on hosts (54334ae3c)
• Preserve per-host fields when updating group-general (fa14632df)
• Revert vuln 009 token check - breaks deployed FOG Client (04ee37464)
• Port /snapin/createwithfile and /storagegroup//uploadsnapinfiles to dev-branch (dd26efb95)
• Make santizeCronField public function (41ba0d882)
• Should switch private santizeCronField to protected (06284ec25)
• Fix vuln 023 again (f70a71470)
• Fix 021 vuln (46dd3ec78)
• Fix 020 vuln at progress insert (efc399b19)
• Fix 009 Vuln with expected (f2cc61b3b)
• Fix issue reported on forums (d7f6fa031)
• Fix 097 vuln (ed1a9d3b2)
• Fix 081 vuln (5123be197)
• Fix 078 vuln (c6b053c60)
• Fix 055 vuln properly (262a8bfa7)
• Fix 055 vuln (edbde2820)
• Fix 029 vuln (dd9c5ca95)
• Fix 023 vuln (dc1dc1c0d)
• Fix 022 vuln (876124eba)
• Fix 021 vuln (8b09fd9a2)
• Address 020 vuln (549b9d1cb)
• Address 020 vuln (fe9267d85)
• Fix 019 vuln (fe0c1938d)
• Remove 010 vuln, though not using proposed patch as we have a different method to obtain this information already baked in (aab1d32f0)
• Fix 137 vuln (6228cad5f)
• Fix security issues (64f7213f9)
• Fix another security thing (117a2722c)
• Should fix multiple noticed issues (e194c5deb)
• Should attempt to fix 3 broken elements at once for security reasons (05403ee09)
• fix(fogcontroller): write 0 for cleared optional *id fields instead of skipping (3ba8b766a)

1.5.10.1826

What's Changed

• merge stable - 1.5.10.1815 into dev by @fog-workflows[bot] in #807
• Update translation for zh_CN.UTF-8 by @BA4TMR in #809
• Stable Release PR For 1.5.10.1826 - 2026-04-15 by @fog-workflows[bot] in #813

New Contributors

• @BA4TMR made their first contribution in #809

Full Changelog: 1.5.10.1815...1.5.10.1826

1.5.10.1815

What's Changed

• merge stable - 1.5.10.1812 into dev by @fog-workflows[bot] in #805
• Persistent Groups Manager does not auto create snapin tasks, only assigns the snapins. by @PorygonPhD in #803
• Stable Release PR For 1.5.10.1815 - 2026-03-25 by @fog-workflows[bot] in #806

New Contributors

• @PorygonPhD made their first contribution in #803

Full Changelog: 1.5.10.1812...1.5.10.1815

1.5.10.1812

What's Changed

• merge stable - 1.5.10.1798 into dev by @fog-workflows[bot] in #800
• Remove hardcoded ftp port for storage node availability check by @CMQuah in #801
• Stable Release PR For 1.5.10.1812 - 2026-03-24 by @fog-workflows[bot] in #804

New Contributors

• @CMQuah made their first contribution in #801

Full Changelog: 1.5.10.1798...1.5.10.1812

1.5.10.1798

What's Changed

• merge stable - 1.5.10.1763 into dev by @fog-workflows[bot] in #787
• Update Portuguese translation by @eduardomozart in #782
• Change input sanitization to use FILTER_SANITIZE_SPECIAL_CHARS by @eduardomozart in #784
• External dB with new snmysqlexternal parameter by @geotsot in #793
• feat(ldap): Add Active Directory nested group matching and fix PHP LDAP auth errors by @eduardomozart in #791
• Refactor host validation and save logic by @eduardomozart in #785
• hostgetkey store token before save in db and return by @kbats183 in #748
• Stable Release PR For 1.5.10.1798 - 2026-03-15 by @fog-workflows[bot] in #799

New Contributors

• @eduardomozart made their first contribution in #782
• @kbats183 made their first contribution in #748

Full Changelog: 1.5.10.1763...1.5.10.1798

1.5.10.1763

What's Changed

• merge stable - 1.5.10.1754 into dev by @fog-workflows[bot] in #774
• Fix iPXE compilation error for HTTPS FOG Installs (dev-branch) by @rluzuriaga in #776
• Stable Release PR For 1.5.10.1763 - 2026-02-15 by @fog-workflows[bot] in #786

Full Changelog: 1.5.10.1754...1.5.10.1763

1.5.10.1754

What's Changed

• merge stable - 1.5.10.1751 into dev by @fog-workflows[bot] in #772
• Stable Release PR For 1.5.10.1754 - 2026-01-18 by @fog-workflows[bot] in #773

Full Changelog: 1.5.10.1751...1.5.10.1754

1.5.10.1751

What's Changed

• merge stable - 1.5.10.1734 into dev by @fog-workflows[bot] in #764
• Stable Release PR For 1.5.10.1751 - 2026-01-15 by @fog-workflows[bot] in #771

Full Changelog: 1.5.10.1734...1.5.10.1751

1.5.10.1734

What's Changed

• merge stable - 1.5.10.1733 into dev by @fog-workflows[bot] in #757
• installer add new documentation site by @geotsot in #758
• Minor grammar fix for multi-select delete. by @ggppjj in #759
• Stable Release PR For 1.5.10.1734 - 2025-12-15 by @fog-workflows[bot] in #763

New Contributors

• @ggppjj made their first contribution in #759

Full Changelog: 1.5.10.1733...1.5.10.1734

1.5.10.1733

What's Changed

• merge stable - 1.5.10.1721 into dev by @fog-workflows[bot] in #752
• Stable Release PR For 1.5.10.1733 - 2025-11-15 by @fog-workflows[bot] in #756

Full Changelog: 1.5.10.1721...1.5.10.1733