Crafty Controller

Refactor · Remove Unused Exceptions (Merge Request) · Refactor the Player Management Tab (Merge Request) New features · Add Run Now button to scheduled tasks (Merge Request) Bug fixes · Fix Bedrock Update Failures (Merge Request) · Fix directory downloads in the file manager (Merge Request) · Fix backup exclusions on unix based OSes (Merge Request) · Fix cache refresh button on the creation and update pages (Merge Request) · Fix support logs failing to download due to a typing error (Merge Request) · Fix reaction schedules being removed on edit (Merge Request) · [CVE-2026-13716] Security: Harden Upload Handler (Merge Request | Merge Request) · Fix uncaught exception in update manager during server version check (Merge Request) · Fix update failures caused by backup was_running value was null (Merge Request) · Fix Hytale player tab 'unban' (Merge Request) Tweaks · Add max 1gb for session.log file for noisy installs (Merge Request) · Read Hytale bans.json for the banned player list (Merge Request) · Reduce number of allowed image types (Merge Request)

Bug fixes · Fix python 3.13+ specific notation to add support back for 3.10-12 (Merge Request) · Fix Bedrock server creation and updates due to static FileHelpers.ssl_file_get() call (Merge Request) · Fix Java server updates due to static FileHelpers.ssl_file_get() call (Merge Request) · Fix modded server installs failing on non-windows environments (Merge Request) · Fix Hytale server creation hanging on "Importing..." (Merge Request) · Fix CPU pinned at 100% after terminal buffer changes (Merge Request)

Bug fixes · Readd packaging to requirements (Merge Request)

Refactor · Sonar refactor: server.py (Merge Request | Merge Request) · Sonar refactor: File Helpers (Merge Request) · Refactor repeated broadcast logic into new Websocket Manager function (Merge Request) New features · Add API method to list backup files (Merge Request) · Add "Stop All Servers" button (Merge Request) Bug fixes · Fix general users not being able to edit themselves (Merge Request) · Improve upload progress bar consistency (Merge Request) · Improve terminal performance for noizy servers (Merge Request) · Allow users to access terminal buffer without log perms (Merge Request) · Fix headers for remote requests agents (Merge Request) · Fix command watcher thread crash when sending command to offline server (Merge Request) · Fix permission checkbox behavior during horizontal scroll (Merge Request) · Fix server control nav not collapsing to dropdown on small screens (Merge Request) · Rework Validate Read Perms to Fail-Shut by Default (Merge Request) Tweaks · Bump cryptography for CVE-2026-26007 (Merge Request) · Fallback code block to automatically parse Java Versions on Arch Linux (Merge Request) · Show total system RAM in dashboard memory tooltip (Merge Request) · Add busy timeout to sqlite connections (Merge Request) · Use exception instead of error in exception handlers (Merge Request)

Bug fixes · Fix servers with registered webhooks failing to start (Merge Request)

Refactor · Sonar refactor: tasks.py (Merge Request) · Sonar refactor: Roles Controller (Merge Request) Bug fixes · Fix dashboard table width to fix (Merge Request) · [CVE-2026-5652] Security: Improve Authentication #705 (closed) (Merge Request) · Fix bad typing import for py3.10 installs (Merge Request)

Bug fixes · Fix bug where roles selection on server creation page did not show any available roles (Merge Request) · Fix bug where server creation page would stack trace if system did not have internet (Merge Request) · Fix graphical differences between steamCMD roles selection and the rest of the offerings (Merge Request) · Add server backup location verification (Merge Request) · Fix issue where (neo)forge installations would have improper targeting on execution commands (Merge Request) · Fix frontend bug where schedules could not be deleted after a Phosphor refactor (Merge Request) · Fix crash when jarfile does not exist on startup (Merge Request) Tweaks · Change login error message style to use bootstrap classes (Merge Request)

Bug fixes · Fix stack-trace on non-super user server nav when without config perms (Merge Request)

Refactor · Switch from Font Awesome to Phosphor Icons (open source) (Merge Request) · Overhaul Server Metrics (Frontend) (Merge Request) · Customizable Dashboard Columns (Merge Request) New features · Experimental SteamCMD Alpha (Merge Request) Bug fixes · Adds missing time variables in static test webhook (Merge Request) · Fix bug where zip imports would get stuck after selecting root (Merge Request) · Fix type error on json encode for backup exclusions (Merge Request) · Fix New Backup Exclusions being ignored (Merge Request) · Select default backup when no ID is provided (Merge Request) · Fix UI for vanilla java version OP and DeOp commands for Vanilla Java (Merge Request) Tweaks · Add Hytale Port Ranges to Docker related stack templates & documentation (Merge Request) · File Browser Permissions Indicators (Merge Request) · Add update center and compartmentalize big bucket (Merge Request)

New features · Add Support For Hytale Servers (Merge Request) Bug fixes · Add error data to servers running global dir (Merge Request) · Fix bug where directories could not be selected (Merge Request) · Add try except to unzip extract to avoid failure over missing files (Merge Request) Tweaks · Add Java 25 support to Docker image (Merge Request)

New features · Passkey Authentication Support (Merge Request) Bug fixes · Fix crash on startup due to big bucket cache refresh (Merge Request) · Fix issue where files would incorrectly be classified as not able to be opened by missing mimetypes (Merge Request) · Fix issue where filter list size would change during iteration causing the program to halt silently (Merge Request) · [CVE-2026-0963] Security: Add validate_traversal calls to ServerFilesOperationHandler (Merge Request) · Remove HTML encoding on files return (Merge Request) · [CVE-2026-0805] Security: Snapshot Backup Traversal (Merge Request) · Catch backup dispatch errors crashing command_watcher (Merge Request) Tweaks · Change the way MFA warning is displayed on front end (Merge Request) · Allow middle mouse new tab and ctrl + click new tab (Merge Request) · Add permission error to exceptions for can_open_files (Merge Request) Regressions · Remove local file imports (Merge Request)

Refactor · Overhaul/Replace Server Files panel to be more feature complete and user friendly (Merge Request | Merge Request) Tweaks · Bump tornado for CVE-2025-67725 (Merge Request)

NOTE From this version onwards, Python 3.9 will no longer work with Crafty Bug fixes · Refactor translation parsing on creation pages (Merge Request) · [CVE-2025-14700] Security: Prevent users being able to access unsafe builtin attributes w/ jinja expressions (Merge Request) · [CVE-2025-14701] Security: Prevent MOTDs from being able to inject HTML (Merge Request) · Fix functionality of the webhook test button (Merge Request) Tweaks · Update documentation reference url in API index (Merge Request) · Bump Orjson to 3.11.4 to resolve support for Python 3.14 (Merge Request)

New features · Jinja2 Dynamic Variables for Webhook Notifications (Merge Request) Bug fixes · Change hour and minute intervals in APScheudler to fix incorrect triggers (Merge Request) · Use asyncio locks to limit upload handler race condition (Merge Request) · Fix static fonts not working on some browsers (Merge Request) · Fix import directory cleanup was not pointing to the proper directory (Merge Request) · Fix survey not appearing on first login (Merge Request) · Fix failue deleting server's DB files on server delete (Merge Request) · Fix server.properties overwritten in bedrock update (Merge Request | Merge Request) · Fix zip backup download button always downloading the most recent, not the selected backup (Merge Request) · Fix download button showing for snapshot backups (Merge Request) Tweaks · Provide better feedback on restore failures (Merge Request)

Bug fixes · Fix MFA login failure when the totp dict's attempted codes list changes size while being processed (Merge Request) · Resolve additional json being appended to downloaded files (Merge Request) · Fix certain users not showing up following a change made in 4.5.0 (Merge Request) · Fix password dialogue closing with no indicator the password did not change when the passwords did not match (Merge Request) · Fix empty 'Reason' when banning user from crafty UI (Merge Request) Tweaks · Remove triple option for validation and use sole robust error (Merge Request) · Allow numeric passwords (Merge Request) · Enable use of <enter> key for password form submission (Merge Request) · Add extended debug logging to help troubleshoot MFA issues (Merge Request) · Change upload progress bar to monitor chunk processing (Merge Request) Lang · Consolidate "passLength" & "numbericPassword" to single "passProp" translation for validators (Merge Request)

Bug fixes · Refactor upload chunk removal to ensure file operations are asynchronous (Merge Request) Tweaks · Remove all 3rd party font requests (Merge Request)

Bug fixes · Refactor Bedrock update to use import_helper download_threaded_bedrock_server fixing bedrock update (Merge Request) · Fix GC logic deleting downloaded files instead of only temp directories (Merge Request)

Bug fixes · Bedrock Builder | Utilize self call instead of static call for unzipping bedrock archives (Merge Request) · Fix Human Readable Sizes on Dashboard (Merge Request) · Correct Builder to support new Neoforge versioning scheme (Merge Request)

Bug fixes · Fix bug where all file methods that were not GET methods, were returning "method not allowed" (Merge Request)

Refactor · Modularize helpers (file / crypto) (Merge Request) · Refactor Downloads for API-v2 (Merge Request) New features · Snapshot Style Backups (Merge Request) · Adds functionality for directory downloads (Merge Request) Bug fixes · Fixed inconsistent password schema error handling (Merge Request) · Fix validation to stop users being able to disable their own account (Merge Request) · Fix annoucements not showing after 4.4.10 (Merge Request) · Fix use of 'Enter' Key on Username Form (Merge Request) · Disable player stats collection when servers are offline (Merge Request) · Fix display issues of local zip import modal following CSS refactor (Merge Request) Lang · Fixed grammar, spelling/capitalization, and sentence structure issues (Merge Request) · Removed 2 unused statements (Merge Request)

Bug fixes · Fix issue causing some server creations to silently fail (Merge Request) · Check if servers/ dir exists before attempting to migrate server stats db(s) (Merge Request)

Bug fixes · Revert min length of username from 4 > 3 (Merge Request) · Remove unnecessary poll for player information on server_details page load (Merge Request) · [CVE-2025-5990] Security fix: resolve stored XSS vulnerabilities in 2x input forms (Merge Request) Tweaks · Add border around QR code to improve scanning (Merge Request) · Add error when user does not provide a valid username (Merge Request) · Moves db_stats directory from the servers directories to the db directory in config (Merge Request) · Bump tornado for CVE-2025-47287 (Merge Request) · Bump requests for CVE-2024-47081 (Merge Request) · Update Bedrock Server binary download url (Merge Request) Lang · Correct spelling of login.accountDisabled on English localization (Merge Request)

Tweaks · Remove default SuperUser MFA Requirement (Merge Request)

Refactor · Refactor backups for efficiency and in-place backup restores (Merge Request) · Refactor self-signed cert creation from OpenSSL.crypto.X509 to pyca/cryptography's X.509 APIs (Merge Request) · Refactor 'config.json' tab to include settings sections (Merge Request) New features · Add TOTP to allow for added authentication security (Merge Request | !838 | !841) Bug fixes · Bump cryptography for CVE-2024-12797 (Merge Request) · Fix problematic MOTDs on bedrock servers breaking stats collection (Merge Request) · Fix caching issue on upload imports (Merge Request) · Fix server-name not showing after CSS refactor (Merge Request) · Fix overall player count on dashboard after CSS refactor (Merge Request) · Fix ignored names being ignored on all unzips and not just server updates (Merge Request) · Fix unzipping archive with db_stats would cause system crash (Merge Request) · Remove stats scheduling when monitored server is offline (Merge Request) · Force user logout when account is disabled (Merge Request) Tweaks · Add neoforge support in server builder (Merge Request) · Add lightweight health check endpoint (Merge Request)

Bug fixes · Docker Repair | Remove ubuntu user to replace with crafty user (Merge Request) Resolves #521

Bug fixes · Fix traceback on stats page for data missing data.get (Merge Request) OTE Version effected by non-root docker issue if you installed from this version see RCA document

Refactor · Refactor and standardize all JSON validator errors returning human readable translations (Merge Request) · Improve docker-build CI/CD, supporting nightly builds (Merge Request) · Standardize and centralize CSS throughout front end, Allows for easier management of themes (Merge Request) Bug fixes · Bump requests to resolve yank for CVE-2024-35195 (Merge Request) · Better handle malformed mcping data (Merge Request) · Resolve type issue when posting no keywords in the "keyword" field in config.json tab (Merge Request) · Resolve issue where sometimes backup migration 20240308_multi-backup would run twice (Merge Request) Tweaks · Dyamically change child action translation for backups (Merge Request) · Remove EXIF image data on app Background Photos (Merge Request) · Bump Docker base image 22.04 -> 24.04 (Merge Request) · Bump python pip 2.0.3 -> 24.3.1 (Merge Request) · Bump python setuptools 50.3.2 -> 75.6.0 (Merge Request) · Bump tornado for CVE-2024-52804 (Merge Request) Lang · Weblate Translation Platform Integration · Remove incomplete labels from translation files to better support new translation workflow (Merge Request) · New langs added ja_JP, ko_KR (Merge Request)

Bug fixes · Migrations | Fix orphan schedule configurations crashing migration operation (Merge Request) · Fix logic issue causing bedrock wizard's root files buttons to not respond to user click events (Merge Request) · Reset crash detection counter after crash detection process detects successful start (Merge Request) · Update new bedrock DL url and correctly bubble up exception on DL fail - Thanks @sarcastron (Merge Request) · Bump cryptography for GHSA-h4gh-qq45-vh27 (Merge Request)

Bug fixes · Fix schedules creation fail due to missing action ID (Merge Request)

Bug fixes · Migrations | Fix exception message on file not found for backups migration (Merge Request) · UploadAPI | Upload chunks in batches to avoid overloading browser cache (Merge Request)

Patch Fixes · Migrations | Fix orphan backup configurations crashing migration operation (Merge Request) · Migrations | Fix missing default configuration if no server backup config exists during the migration (Merge Request) · Migrations | Fix extended runtime on move procedure during migration (Merge Request) ----------------------------------------------------------------------------- Initial release was reverted for patching (See Merge Request: !784) 2024/07/28 ----------------------------------------------------------------------------- Refactor · Backups | Allow multiple backup configurations (Merge Request) · UploadAPI | Use Crafty's JWT authentication for file uploads (Merge Request) · UploadAPI | Splice files on the frontend to allow chunked uploads as well as bulk uploads (Merge Request) · UploadAPI | Enhance upload progress feedback on all upload pages (Merge Request) · UploadAPI | Consolidate and improve speed on uploads, supporting 100mb+ uploads through Cloudflare(Free) (Merge Request) Bug fixes · Fix zip imports so the root dir selection is functional (Merge Request) · Fix bug where full access gives minimal access (Merge Request) · Bump tornado & requests for sec advisories (Merge Request) · Ensure audit.log exists or create it on Crafty startup (Merge Request) · Fix typing issue on ID comparison causing general users to not be able to delete their own API keys (Merge Request) · Fix user creation bug where it would fail when a role was selected (Merge Request) · Security improvements for general user creations on roles page (Merge Request) · Security improvements for general user creations on user page (Merge Request) · Use UTC for tokens_valid_from in user config, to resolve token invalidation on instance TZ change (Merge Request) · Remove unused and problematic "dropdown-menu" ident from !722 CSS (Merge Request) Tweaks · Add info note to default creds file (Merge Request) · Remove navigation label from sidebar (Merge Request) · Do not allow slashes in server names (Merge Request) · Add a thread dump to support logs (Merge Request) · Remove text from status page and use symbols (Merge Request) · Add better feedback on when errors appear on user creation (Merge Request) · Workaround cpu_freq call catching on obscure cpu architectures (Merge Request) · Change Role selector in server wizard to be a filter list (Merge Request) Lang · Show natural language name instead of country code in User Config Lang select list (Merge Request) · Add remaining he_IL, th_TH translations from 4.4.0 Release (Merge Request | Merge Request) · Fix fr_FR syntax issues (Merge Request | Merge Request) · Add ru_RU Translation (Merge Request) · Add th_TH translations for !772 (Merge Request)

Refactor · Refactor API keys "super user" to "full access" (Merge Request | Merge Request) · Refactor SBuilder to use Big Bucket Svc (Merge Request) Bug fixes · Reset query arguments on login if ?next is not available (Merge Request) · Fix child schedule failing to load after del parent (Merge Request) Tweaks · Add link to go back to dashboard on error page (Merge Request) · Set audit logging to logfile instead of DB (Merge Request) Lang · Changes of phrase in cs_CS translation (Merge Request)

Refactor · Refactor ServerJars caching and move to api.serverjars.com (Merge Request | Merge Request) Bug fixes · Fix migrator issue when jumping versions (Merge Request) · Fix backend issue causing error when restoring backups in 4.3.x (Merge Request) · Fix backend issue causing error when cloning servers in 4.3.x (Merge Request) · Bump orjson for CVE-2024-27454 (Merge Request) · Fix calling of orjson JSONDecodeError class (Merge Request) · Fix stack on Crafty permissions route request in API (Merge Request) Tweaks · Clean up remaining http handler references (Merge Request) · Remove version disclosure on login page (Merge Request) · Add openjdk-21 for recent versions of MC (Commit) Lang · Update it_IT, cs_CS (Merge Request | Merge Request)

Breaking Changes · This release includes database migrations that are not revertable. Once you update to this version you will not be able to rollback to a previous version. · In this release, we've implemented a breaking change to enhance server identification within Crafty: instead of relying on numerical integers (1, 2, 3, etc.), Servers are now uniquely identified by their UUIDs. Please adapt your API clients accordingly. Refactor · Refactor remote file downloads (Merge Request) Bug fixes · Fix Bedrock cert issues (Merge Request) · Make sure default.json is read from correct location (Merge Request) · Do not allow users at server limit to clone servers (Merge Request) · Fix bug where you cannot get to config with unloaded server (Commit) · Fix forge install v1.20, 1.20.1 and 1.20.2 (Merge Request) · Fix Sanitisation on Passwords (Merge Request | Merge Request) · Fix Upload Imports on unix systems, that have a space in the root dir name (Merge Request) · Fix Bedrock downloads, add www to download URL (Merge Request) · Fire backup webhook 'after' backup has finished (Merge Request) Tweaks · Bump pyOpenSSL & cryptography for CVE-2024-0727, CVE-2023-50782 (Merge Request) · Bump cryptography for CVE-2024-26130 (Merge Request) Lang · Update de_DE, en_EN, es_ES, fr_FR, he_IL, lol_EN, lv_LV, nl_BE pl_PL, th_TH, tr_TR, uk_UA, zh_CN translations for 4.3.0 (Merge Request)

New features · Use Papermc Group's API for paper & folia builds in server builder (Merge Request) · Allow omission of player count from Dashboard (e.g. for proxy servers) (Merge Request) · Add lockout user for forgot password (Merge Request | Merge Request) Refactor · Refactor subpage perm checks (Merge Request) Bug fixes · [CVE-2024-1064] Security-related fix to resolve an issue with the HTTP listener (Merge Request) · Fix bukkit and downstream fork MOTD crash (Merge Request) · Fix bug where invalid server Id leads to stack (Merge Request) · Fix indent on public status check box (Merge Request) · Fix unicode chars in terminal & logs w/ textiowrapper (Merge Request) · Provide feedback on file delete failure (Merge Request) · Fix bug where audit log would show 0 for any stdin sent to the server (Merge Request) Tweaks · Refactor Forge server initialisation flow for newer versions (Merge Request) · Remove scroll bars from player management (Merge Request) · Add warning to wizard for unsupported mc (Merge Request) · Improve display for th-TH characters (Merge Request) · Improve display of white text on wssErrors (Merge Request | 50e65f6) · Improve display of white text on Buttons (Merge Request) · Fix dashboard motd issue #322 (Merge Request) Lang · Update zh_CN, pl_PL, nl_BE, lv_LV, he_IL, fr_FR, de_DE, lol_EN translations for 4.2.3 (Merge Request) · New uk_UA, tr_TR, th_TH translations for 4.2.3 (Merge Request)

New features · Loading Screen for Crafty during startup (Merge Request) Refactor · Remove deprecated API V1 (Merge Request) · Tidy up main.py to be more comprehensive (Merge Request) · Force random password on first run. Stop using common default password (Merge Request | Merge Request) Bug fixes · Remove webhook custom option from webook provider list as it's not currently an option (Merge Request) · Bump cryptography for CVE-2023-49083 (Merge Request) · Fix bug where su cannot edit general user password (Merge Request) · Fix bug where no file error on import root dir (Merge Request) · Fix Unban button failing to pardon users (Merge Request) · Fix stack in API error handling (Merge Request) · Fix bug where you cannot select "do not monitor mounts" from config.json (Merge Request) · Fix support log 'x' button still downloading logs (Merge Request) · Fix bug where servers are created without bu dir (Merge Request) Tweaks · Homogenize Panel logos/branding (Merge Request) · Retain previous tab when revisiting server details page (#272)(Merge Request) · Add server name tag in panel header (#272)(Merge Request) · Setup logging for panel authentication attempts (Merge Request) · Update minimum password length from 6 to 8, and unrestrict maximum password length (Merge Request) · Give better feedback when backup delete fails (Merge Request) · Add user queue debug logging (Merge Request) Lang · Update de_DE, en_EN, fr_FR, lol_EN, lv_LV, nl_BE, pl_PL, zh_CN translations for 4.2.2 (Merge Request) · Mark es_ES as incomplete (Merge Request) · Mark he_IL as active (Merge Request) · pl_PL Minor fixes (Merge Request)

New features · Finish and Activate Arcadia notification backend (Merge Request | Merge Request | Merge Request) · Add initial Webhook Notification (Discord, Mattermost, Slack, Teams) (Merge Request) · Implementation of OpenMetrics endpoints, for use with services such as Prometheus (Merge Request) Bug fixes · PWA: Removed the custom offline page in favour of browser default (Merge Request) · Fix hidden servers appearing visible on public mobile status page (Merge Request) · Correctly handle if a server returns a string instead of json data on socket ping (Merge Request) · Bump tornado to resolve #269 (Merge Request) · Bump crypto to resolve #267 & #268 (Merge Request) · Fix select installs failing to start, returning missing python package packaging (Merge Request) · Fix public status page not updating #255 (Merge Request) · Fix service worker vulrn and CQ raised by SonarQ (Merge Request) · Fix Backup Restore/Schedules, Backup button function on remote-comms2 (Merge Request) · Add a wait to the call for the directory so we can make sure the wait dialogue has time to show up first (Merge Request) · Fix bug where a reaction loop could be created, but would be cut short by an error when the loop occurred (Merge Request) · Use controller on update user call (Merge Request) · Move imports to import/upload in bind mount to better serve users on unraid with limited vdisk storage (Merge Request) · Fix bug where everytime a page was loaded user settings would be reset #286 (Merge Request) · Fix tooltip info icon on server config page (Merge Request) · Fix quick disable toggle on schedules list (Merge Request) Refactor · Consolidate remaining frontend functions into API V2, and remove ajax internal API (Merge Request) · Replace bleach with nh3 (Merge Request) · Add API route for historical server stats (Merge Request) · Add API route for host stats (Merge Request) Tweaks · Polish/Enhance display for InApp Documentation (Merge Request) · Add get_users command to Crafty's console (Merge Request) · Make files hover cursor pointer (Merge Request) · Use Jar class naming for jar refresh to make room for steamCMD naming in the future (Merge Request) · Improve ui visibility of Build Wizard selection tabs (Merge Request) · Add additional logging for server bootstrap & moves unnecessary logging to debug for improved log clarity (Merge Request) · Bump orjson to 3.9.7 for python 3.12 support (Merge Request) · Bump all Crafty required python dependancies, maintaining minimum 3.9 support (Merge Request) Revert peewee bump (Merge Request) · Better optimize and refactor docker launcher sh (Merge Request) · Improve pop-up notifications with Toasts (Merge Request) · Move username and password settings to buttons on panel config (Merge Request) · Remove external references from front end deps (Merge Request) Lang · fr_FR Translation Updated to latest en_EN (Merge Request) · de_DE, fr_FR, lol_EN, lv_LV, nl_BE, pl_PL Translations Updated to latest en_EN (Merge Request)

Bug fixes · Include tzdata in Docker image (Merge Request) · Fix text/formatting issue on server config page (Merge Request) · Bump required version of PyYAML to 6.0.1 (Merge Request) · Fix enable/disable schedule toggles on schedule list (Merge Request) · Fix formatting on Creation page when server jars is unavailable (Merge Request) Refactor · Replace "in_file" helper method (Merge Request) Tweaks · Add public status link to login (Merge Request)

Bug fixes · Fix upload root files being hidden (Merge Request) · Send empty json for no banned/cached players (Merge Request) · Bump Tornado from 6.0 to 6.3.2 in response to CVE-2023-28370 (Merge Request) · Fix bug where commands would show "command_server" when initially created (Merge Request) · Add ID autofield to management CraftySettings class (Merge Request) Refactor · Optimize player management page (Merge Request) Tweaks · Remove bedrock servers in serverjars options (Merge Request) · Bump cryptography & pyOpenSSL (Merge Request) · Bump requests (Merge Request) Lang · Update es_ES & pl_PL lang, thank you .lucyy_ & terrariadlc (Merge Request)

Bug fixes · Fix task scheduling where a command was not sent to the DB (Merge Request) Tweaks · Improve the UI on several areas of the Crafty Panel (Merge Request) · Improve creation page errors / Server Jars Credit (Merge Request)

New features · Mobile PWA App (beta) | Ability to add a Crafty icon to your mobile's home screen (Merge Request) · New Crafty Documentation release Refactor · Frontend Ajax Refactor | Start using API to send Remote Comms to Server (Merge Request) · MKDocs Release | Replace wiki names with docs (Merge Request) Bug fixes · Fix pipelines failing to build from gitlab pre-defined variable deprecation (Merge Request) · Fix incompatible buildx provenance meta, causing digest issues on GL/DH container registries (Merge Request) · Fix Auth'd servers in roles | Refine server ordering (Merge Request) · Fix import loop detection (Merge Request) · Fix Cargo errors on Ubuntu 23.04 installs (Merge Request) · Fix project root error on first start (Merge Request) Tweaks · Check for python version so we don't just fail out on unsupported python versions (Merge Request) · Show warning for serverjars API connection issues (Merge Request) · Retain pathing in execution command on backup restore (Merge Request)

New features · Add better feedback for uploads with a progress bar (Merge Request) · Add ignored exit codes for crash detection (Merge Request) · Allow users to change the directory where Crafty Stores Servers (Merge Request) (Only for non-docker, docker users should change host volume mount) · Add host storage display option to the dashboard (Merge Request) Bug fixes · Fix exception related to page data on server start (Merge Request) · Fix logical issue with uploading dynamic files (Merge Request) · Fix backups failing by correctly using tz objects (Merge Request) · Bump Cryptography/pyOpenSSL for CVE-2023-23931 (Merge Request) · Fix debug logging to only display with the -v (verbose) flag (Merge Request) · Optimize world size calculation (Merge Request) · Only copy bedrock_server executable on update (Merge Request) · Fix bug where unloaded servers could not be deleted (Merge Request) · Fix bug where "servers" was not appended (Merge Request) Tweaks · Cleanup authentication helpers (Merge Request) · Optimize file upload progress WS (Merge Request) · Truncate sidebar servers to a max of 10 (Merge Request) · Upgrade to FA 6. Add Translations (Merge Request)(Merge Request) · Forge installer and Java Detection improvements (Merge Request) · Crafty log clean up -config option (Merge Request) Lang · Add additional translations to backups page strings (Merge Request) · Add additional missing translations (Merge Request)

New features · Add option to run command before backup. (Merge Request) · Make Config.json editable from panel. (Merge Request) · Managed config.json refector (See MR for details). (Merge Request) Bug fixes · Fix local java server imports. (Merge Request) · Fix Schedule Restore | Add Backup Config Preservation. (Merge Request) · Rework /public Route. (Merge Request) Tweaks · Hide stats DB directory from files tree. (Merge Request) · Make it so file tree doesn't reload on upload/delete. (Merge Request) · Add upload completed feedback to file upload. (Merge Request) · Added further login screen customisation settings. (Merge Request) · Set backup filename to use same time as schedule. (Merge Request) · Move Schedules to from DB to Queue Datatype. (Merge Request) · Move raknet icon failure to a debug log. (Merge Request) · Add Default redirection to Dashboard if the user is connected. (Merge Request)

Bug fixes · Fix port tooltip not showing on dash while server online. (Merge Request) · Fix '+' char in path causing any file operation to fail. (Merge Request) · Fix colours on public pages. (Merge Request) · Fix bug where public background was not sent to public pages...like the error page resulting in an error...ironic...I know. (Merge Request) · Be sure a user cannot server import crafty dir. (Merge Request) · Remove Pathlib from sub path check (Merge Request) · Fix root dir selection in Upload Zip Import (Merge Request) · Fix stats error on mac M1 chips (Merge Request) · Fix window path escape on java override (Merge Request) · Fix Forge import stalling on 1.17 Forge servers (Merge Request) · Fix issue with server config for SU Accounts (Merge Request) · Fix Nested reaction tasks (Merge Request) · Remove legacy unzip code causing issues with single file zip files (Merge Request) Tweaks · Make server directories non-configurable (Merge Request) · Add popover to server port to detail it's purpose (Merge Request) · Add server start timeout w/ WS Warning (Merge Request) · Replace google ping for ntp for internet checks in locked-down countries (Merge Request) · Add pushing to DockerHub registry (arcadiatechnology/crafty-4) (Merge Request) Lang · Added Czech translation (Merge Request)

New features · Automate forge install process through Crafty server creation for Forge server version 1.16 and greater. (Merge Request) · Tooltip for server port on dashboard. (Merge Request) · Custom login image backgrounds. (Merge Request) Bug fixes · Fix no port on bedrock server creation. (Merge Request) Tweaks · Docker | Update image base to Ubuntu 22.04 Jammy. (Merge Request) (OpenJDK16 Removed, no jammy backport) Hotfix (4.0.18) · Apply custom login backgrounds on all public pages. (Merge Request)

New features · Base Theme Switching (Dark, Light, Default) (Merge Request) · Upload Zip functionality for server imports ️ (Merge Request) Bug fixes · Fix traceback on basic schedule with "days" interval (Merge Request) · Fix bad method call with API stdin (Merge Request) (Thank you 'IWant2Tryhard' for catching that ) · Fix clients variable as static to prevent crash if client list changed while sending a websocket (Merge Request)

New features · Automatically set update url for (new) server creation (Merge Request) · Add filter to logs panel (Merge Request) Bug fixes · Fix conditional issue with zip imports/uploads (Merge Request) · Fix API Schedule updates (Merge Request) · Add port constraint for all server creation & api (Merge Request) · Clean up backup configs when deleting servers (Merge Request) · Add timeout to socket for servers with incorrect port selection (Merge Request) · Fix server_stats db file when deleting server (Merge Request) · Fix "cannot render after finish" from backup_now (Merge Request) · Fix Support Logs on windows by changing the way we declare projects working directory (Merge Request | Commit) Tweaks · Fix sidebar to not move when scrolling (Merge Request) · Add the rest of CSS predefined colors to themes (Merge Request) · Only send realtime stats when clients connected (Merge Request)

HOTFIX - Rollback breaking websockets change !461 (self.clients was already a set and we tried to subscript a set of a set) ( Merge Request)

Bug fixes · Fix bug where trying to reconfigure unloaded server would stack (Commit | Merge Request) · Fix traceback error when a user click the roles config tab while already on the roles config page; this is for new role creation only (Merge Request) · Fix logic issue when removing items from backup exclusions (Merge Request) · Cleanup various JS errors (Merge Request) · Temp fix for &amp; issue in pathing and minecraft colour codes (Merge Request) · Cache Gravatar pfp's as to not query every page load (Merge Request) · Fix crash on client list changing while sending websockets (Merge Request) · Set default parent option on edit of reaction schedule (Merge Request) · Fix wtol Nonetype error on server start when 'which java' returns none (Merge Request) Tweaks · Add button to scroll to bottom of vterm (Merge Request) · Persist schedules and execution commands across backup restores (Merge Request) Release Testing- Bug fixes · Fix bug with logical issues surrounding gravatar caching (Merge Request) · Fix bug where server terminal would not scroll on startup (Merge Request) · Fix issue on post with adding users when no email is included (this also affected editing users) (Merge Request) · Fix issue with schedules allowing days to be more than 30 (Merge Request) · Fix issue with schedules when trying to edit a cron task (Merge Request)

New features · Win Portable Updater will now be included in Windows Package (Merge Request) · Bedrock Server Creator (Merge Request) Bug fixes · Fix performance issues on server metrics panels 'with metrics range' (Merge Request) (Merge Request) · Fix no id on import3 servers (Merge Request) · Fix functionality of bedrock update (Merge Request) · Fix mc-ping Traceback (Merge Request) Tweaks · Flatten input on password resets (Merge Request)

--- [4.0.11] - 2022/08/28 New features · Add server import status indicators (Merge Request) · Users can now be assigned as manager of other users/roles (Merge Request) · Add variable shutdown timeouts (Merge Request) · Add server metrics graph (Merge Request) Bug fixes · Fix creation quota not refilling after server delete (Merge Request) · Add missing bedrock dependency (libcurl.so.4) (Merge Request) Tweaks · Make imports threaded (Merge Request) · Add 'Created By' Field to servers (Merge Request) · Add Zip comments to support archives (Merge Request)

Bug fixes · Fix reaction tasks not firing (Merge Request) · QOL task delay offset not following over on task edit (Merge Request) · Fix Fresh Install Detection Logic issues (Merge Request) · Fix reload issue on backup panel - on certain browsers (Merge Request) · Fix '&' in backup paths (Merge Request) Tweaks · Session Handling | Logout on browser close (Merge Request) · Backups Panel | Only display zips (Merge Request) · User creation | Fix page browser title (Merge Request)

Bug fixes · Fix Schedules Traceback Bug (Merge Request | Commit | Commit) · Fix handling of missing servers (Merge Request) · Fix offline credits panel stack (Commit) Tweaks · credits-v2| Translator status (Merge Request) · Use Names in Schedules (Merge Request) Lang · Make Schedules panel translatable (Merge Request)

New features · Task toggle (Merge Request) · Basic API for modifying tasks (Merge Request) · Toggle Visible servers on status page (Merge Request) Bug fixes · Fixes stats recording for Oracle hosts (Merge Request) · Improve use of object oriented architecture (Merge Request) · Fix issue with API Server Instance is not serializable (Merge Request) · Fix issue where the motd was not displayed properly on small screens (Merge Request) · Fix log file path issues caused by using relative paths (Merge Request) · Fix servers order on creation page (Merge Request) Tweaks · Remove server.props requirement (Merge Request) · Add platform & crafty version info to support logs (Merge Request) Lang · Updated fi_FI, fr_FR, he_IL, lv_LV, nl_BE, zh_CN, id_ID, lol_EN (Merge Request) · Added pt_BR (Merge Request) · Sorted/Corrected en_EN (Merge Request)

Crafty has updated to version 4.0.6 for bug fixes, major security updates from 4.0.0-Beta.

Crafty Controller has just been rebuilt from the ground up. Come check out our new and improved server management panel. A number of bugs have been patched from version 3 including, but not limited to: · Crafty losing the process of the server and losing all control of your server. · Schedules breaking by pressing the restart button. · Viewing your server as crashed by typing stop in the terminal · Crash detection · Case sensitive usernames. · Having to pave and rebuild databases upon updates Crafty 4 offers a migration tool to migrate setups over from version 3.

Fixed the issue where GUI would become shrunk on mobile devices. This update allows users on mobile to have a much improved crafty experience.

In this update we have fixed several long running bugs: Fixed issue with Destroy world not working anymore. Fixed issue where file contents would get HTML encoded on save. Added CSS to file listing to show zoom-in / don't open as needed. Added CSS Trick to make sure CSS is refreshed each version. Fixed issue on file listing where colors changed to dark on dark mode. And preformed one last license change to better benefit our users Please join or Discord for support here ( https://discord.gg/xYvVsMt) if you have any issues updating.