Shipped · Databases

What coollabsio/coolify shipped

The public repository of Coolify · github.com/coollabsio/coolify

Written by FoxPlug from the repository's own releases; not affiliated with Coolify. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/coollabsio/coolify; Coolify did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.

Get a weekly update like this for your product, free

Or Use it as a GitHub Action

See the update FoxPlug writes for coolify, free

Week of November 2, 2026

What shipped

Why it matters

This week brings a large release around scoped team access, update channels and API management alongside security work across SSH host keys and private key handling. It also adds image vulnerability scanning and more backup destinations, which change what teams can verify and where they can store backups. Users should note the SFTP, FTPS and WebDAV additions and the new security status per resource when planning upgrades.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: container image vulnerability scanning per resource, SFTP, FTPS and WebDAV backup destinations, encrypted database backups, GitHub Deployment status sync, and pinned SSH host keys.

Post for LinkedIn

This week in Coolify: container image vulnerability scanning is available as an opt-in per resource, running Syft and Grype in locked-down containers on the managed server with no third party involved. Backups gain SFTP, FTPS and WebDAV destinations, and database backups for MySQL, MariaDB, PostgreSQL and MongoDB can be encrypted with age. Deployment status now syncs to GitHub Deployments so branches and pull requests show what is deployed. SSH security is strengthened with pinned server and Git host keys and key change detection, scoped member access checks, and audit events persisted at commit.

Week of October 26, 2026

What shipped

Why it matters

This week the project gained instance update channels, a new semantic-version release process and scoped access grants for team members and API tokens. Private Git hosts can now be cloned with HTTP(S) credentials, and SSH keys can be rotated per server from the UI. Together these change how instances are updated and how access is limited and managed.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Added update channels (stable, preview, nightly, custom) in instance settings, a new semantic versioning release process, scoped grants for team members and API tokens, SSH key rotation, HTTPS credentials for private repos on custom Git hosts, and DNS, integration token and secre

Post for LinkedIn

This week Coolify added update channels to instance settings, so each instance can pick stable, preview, nightly or a custom image tag. Releases now follow a new semantic-version process covering stable, backport, preview, nightly and maintenance versions. Access control became more granular: owners and admins can limit team members and API tokens to specific projects, environments or resources. SSH keys can be rotated from the private key page with per-server verification and fallback. Applications cloning private repositories from custom Git hosts can use HTTP(S) credentials. New API endpoints cover Cloudflare DNS records, integration tokens and secret managers, and API tokens can now be edited and paused or resumed. The SQLite image was bumped to 3.54.1-v0.2.0.

Week of October 19, 2026

What shipped

Why it matters

This week centers on security: a critical dependency fix ships for every v4 line, so instances can patch without upgrading, and PHP-based service templates were pulled from the dashboard list until patched images exist. Alongside that, v4.5.0 adds Gitea App sources, server patching in beta and a fleet Metrics page. A set of targeted fixes also lands for proxy redirects, SSE streaming, terminal cleanup, compose parsing and scheduled tasks.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Security release out for every v4 line: 4.4.7 fixes critical dependency CVEs, with backports in 4.0.1, 4.1.3, 4.2.1 and 4.3.24 so you can patch without upgrading. PHP-based templates are paused until patched images land. Also out: v4.5.0 with Gitea App sources, server patching be

Post for LinkedIn

Security first this week. We released fixes for multiple critical CVEs in dependencies Coolify uses, shipping the same patches on every v4 line: 4.4.7, plus backports in 4.0.1, 4.1.3, 4.2.1 and 4.3.24, so instances that stay on an older line can patch without a full upgrade. We recommend moving to 4.4.7. PHP-based service templates are temporarily disabled in the dashboard template list until patched images are available, then they will return. Separately, v4.5.0 shipped with Gitea App sources for deploying private repositories, server patching in beta with automatic security updates and patch status, and a fleet Metrics page with server and container tables and trend charts. Smaller fixes this week cover permanent redirect options for domains, SSE streams excluded from Traefik compression

Week of October 12, 2026

What shipped

Why it matters

This week brought two large new views into Coolify: a native file browser and an interactive container console, plus a fleet-wide Metrics page. It also added passkey sign-in, city-level analytics, Cloudflare tunnel setup and stronger secret redaction. Alongside these, many fixes tightened API permissions, webhook cleanup for closed previews and environment value handling.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: a native Files tab and interactive container console, a fleet-wide Metrics page, city-level analytics, passkey sign-in, Cloudflare tunnel setup with API tokens, and stronger secret redaction across logs and API output.

Post for LinkedIn

This week in Coolify: a native Files tab lets you browse and edit files inside running containers over SSH, and a new interactive console mode attaches to containers running a program on their main process. There is a fleet-wide Metrics page with per-server disk, network and load charts, city-level traffic analytics, and sortable tables. Passkey sign-in is available, Cloudflare tunnels can be set up from stored API tokens, and secret redaction is stronger across deployment logs, remote commands, backups, notifications and API responses. Deployment emails can now optionally include commit details, and server transfer between instances is available as beta and runs as a queued job.

Week of October 5, 2026

What shipped

Why it matters

This week covers keeping your data and deployments safer: an automatic coolify-db backup before updates, account deletion, and Compose fixes that stop Coolify from rewriting your files. It also widens where things run, with Hostinger provisioning and GitHub runners on deployment servers, and makes the dashboard easier to navigate through settings search.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: optional coolify-db backup before updates, Hostinger VPS provisioning, settings search in the command palette, custom 503 pages and maintenance mode, self-service account deletion, and Compose variable and build helper fixes.

Post for LinkedIn

This week in Coolify: an option to automatically back up the coolify-db before an update, Hostinger token management and VPS provisioning through the UI and API, and settings search in the command palette. Standalone Traefik and Caddy proxies can now serve custom 503 error pages, and applications and services support a maintenance mode that shows a 503 page without stopping containers or redeploying. Accounts can be deleted from the profile page with subscription cancellation and safeguards for root accounts. Builds also got fixes: helper containers stay out of --add-host so Dockerfile builds stop repeating install steps, Compose variables without values or with defaults stay editable, and Railpack was updated to 0.40.1 with the idle BuildKit builder now stopped.

Week of September 28, 2026

What shipped

Why it matters

This week adds significant infrastructure visibility and control features: GitHub Actions runner support on build servers, detailed audit logging for compliance, and new pages to inspect Docker registries and images on servers. Security improvements include better authentication hashing and proxy consistency checks.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: ephemeral GitHub Actions runners on build servers, encrypted audit logs with field-level changes, Docker registry and image inspection pages, and better authentication hashing options.

Post for LinkedIn

Coolify ships ephemeral GitHub Actions runner support on build servers this week, letting workflows run in containers that are cleaned up automatically. New features include encrypted audit logs tracking field-level changes, pages to inspect Docker registries and images per server, improved HTTP authentication with Bcrypt cost factors and Argon2id support, and API improvements for cloud provider integration and log filtering.

Week of September 21, 2026

What shipped

Why it matters

Reverb consolidation reduces resource consumption for deployments. New service templates and SQLite support expand what users can run on Coolify. Multiple validation and safety fixes address edge cases in deployment, DNS handling, and resource configuration.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Replaced Soketi with bundled Reverb for less overhead. Added SQLite database. 15 new service templates. Fixed deployment queue races and DNS check staleness. Better validation across Docker configs.

Post for LinkedIn

This week's updates focus on efficiency and safety. We replaced the separate Soketi realtime container with Laravel Reverb running in the main container—reducing memory usage and complexity. Added SQLite as an experimental standalone database with backup support. Expanded service templates with 15 new options including OpenWA for self-hosted messaging. Fixed critical issues around deployment queue races, stale DNS results, and validation of Docker network names and container identifiers. These changes make Coolify more robust and resource-efficient for production deployments.

Week of September 14, 2026

What shipped

Why it matters

This week brought improvements to preview deployment management with new API endpoints and UI controls, fixed critical issues with domain routing and DNS resolution, and refined how deployment logs are handled to preserve formatting. These changes address both operational concerns for users running preview deployments and infrastructure stability issues.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

V4.3.20-23 shipped: preview deployment API logs, split compose domains for Traefik, DNS fallback, UI refinements, whitespace preservation in logs, and clarified restart messaging.

Post for LinkedIn

This week's releases improved preview deployment management with a new read-only API for runtime logs and pull request settings controls. We fixed DNS resolution fallback behavior, resolved issues with comma-separated preview domains in Docker Compose, and refined deployment log handling to preserve whitespace formatting. UI improvements and clearer restart notifications round out the updates.

Weeks with too little public activity are left out rather than filled in. Last updated 2026-11-09.

Is this your repo? Ask us to remove this page.