• v0.4.0-alpha
    Release Docker Image / Build & Push Docker Image (release) Successful in 11m26s
    Pre-Release

    scriptos released this 2026-04-09 20:59:42 +00:00 | 1 commits to master since this release

    Release Notes – v0.4.0-alpha

    Release Date: April 9, 2026

    New Docker Image

    Registry: https://git.techniverse.net/scriptos/-/packages/container/keywarden
    Tags: latest, v0.4.0-alpha


    What's New

    Keywarden v0.4.0-alpha is here and it's a big one! This release brings a completely refreshed visual experience with a sleek glassmorphism design across the entire UI, full login page customization, massive performance improvements, and important security hardening under the hood. Let's dive in!


    New Features

    • Glassmorphism UI Overhaul – All cards, the header, sidebar, and standalone pages now feature a modern glassmorphism (glass) effect for a polished, contemporary look. (2f55ec8)
    • Login Page Customization – Administrators can now upload a custom background image for the login page. The login text color is automatically detected based on the background image brightness – no manual tweaking needed. (b665e62, b4424b1)
    • System Master Key Deployment – The owner can now deploy the system master key directly from the Deploy page, with full logging in the deployment history and flash feedback on success. (dd4af5b, 07ea917)
    • Timezone Support (TZ) – All displayed timestamps now respect the TZ environment variable, so your audit logs, cron schedules, and other dates finally show the correct local time. (da6d66e)
    • Gzip Compression Middleware – HTTP responses are now gzip-compressed on the fly, reducing bandwidth and improving page load times. (34ce8a8)
    • Centralized Version Management – The application version is now maintained in a single source-of-truth file (internal/version), displayed in the footer, and correctly handled for pre-release tags by the updater. (1cf7f50)
    • Reworked Footer – The footer has been cleaned up: the license text was removed, "Keywarden" now links to keywarden.app, and the version badge links to the releases page. (c15bac1)

    Bug Fixes

    • Hardened authentication timing, cookie attributes, password generation bias, and email template escaping; added comprehensive security tests. (ca402eb)
    • Master key deployments are now correctly logged in the deployment history. (07ea917)
    • Fixed icon-text spacing on standalone pages. (dae6c6a)
    • Fixed upload button alignment in the login background image section. (789ef6f)

    Performance

    • Icon Font Subsetting – The bundled Tabler Icons font and CSS have been subset to only the icons actually used by Keywarden, shrinking the woff2 from 801 KB → 18 KB and the CSS from 217 KB → 4 KB. (8a10981)

    Documentation

    • Updated architecture, security, and contributing docs to cover gzip compression and font subsetting. (ce36939)

    Full Changelog

    All commits since v0.3.0-alpha (oldest → newest):

    • fix: harden auth timing, cookie attrs, password gen bias, email template escaping; add security tests (ca402eb)
    • feat: centralize version in internal/version package, fix updater for pre-release tags, show version in footer (1cf7f50)
    • feat: allow owner to deploy system master key from deploy page (dd4af5b)
    • fix: auto-detect version from version.go in Dockerfile, pass git tag in CI release (3a86091)
    • feat: add gzip compression middleware for HTTP responses (34ce8a8)
    • perf: subset tabler-icons font/CSS to used icons only (801KB → 18KB woff2, 217KB → 4KB CSS) (8a10981)
    • docs: update architecture, security and contributing docs for gzip and font subsetting (ce36939)
    • fix: add icon text spacing to standalone pages (dae6c6a)
    • feat: add login page customization (background image, glass card style, subtitle) (b665e62)
    • feat: rework footer – remove license, link Keywarden to keywarden.app, link version to releases page (c15bac1)
    • feat: add TZ timezone support for all displayed timestamps (da6d66e)
    • fix: master key deploy now logged in deployment history, add flash feedback after deploy (07ea917)
    • feat: add glassmorphism effect to all cards, header, sidebar and standalone pages (2f55ec8)
    • feat: auto-detect login text color based on background image brightness (b4424b1)
    • remove: login card style dropdown and subtitle setting, glass effect now always active (c2b9656)
    • fix: align upload button layout in login background image section (789ef6f)
    Downloads