chore(main): release 0.2.0-beta.15

[github-actions]

🤖 I have created a release beep boop

0.2.0-beta.15 (2026-10-04)

Features

• add 12 service templates (catalog tranche 5) (#683) (8dde671)
• add 16 new self-hosted service templates to catalog (#807) (e38fde8)
• add Azure and GCP cloud node provisioning (#782) (9bd9492)
• add dashboard toggle for HSTS (#840) (496b63f)
• add opt-in per-app deploy status badge (#898) (d8770ef)
• add platform capabilities panel to empty dashboard (#870) (e1684d2)
• add react-i18next foundation, migrate 3 deploy settings cards (#905) (e95018a)
• add standalone template detail and catalog routes (#814) (d21ab4f)
• add thesvg logo mappings for 4 catalog templates (#805) (4803b75)
• add whole-mesh network topology view (#819) (f148a98)
• adopt an existing machine as a node over SSH (#822) (bff6298)
• agent certificate renewal, agent-generated keys, re-enrollment and agent version reporting (#710) (d272963)
• agent identity on API tokens and audit entries (#765) (17832ae)
• agent onboarding (init, agent identity UI, log levels, agents settings page) (#769) (c439bdd)
• AI model deploys on GPU nodes, load balancer, S3/R2 log archive, pipelines, catalogue (#701) (9b65885)
• AI serving load (model page, engine metrics, VRAM fit, on-demand residency, CDI attach) (#770) (5d62605)
• app health timeline on the overview page (deploys, restarts, error windows) (#694) (b6e7551)
• app quick actions menu, redeploy button, empty-state CTAs (#672) (81e9d4b)
• app timeline, pending changes, secret declaration on set, domains CLI and previous-release hold cap (#718) (74a6c0d)
• audit MCP tool surface and add a token budget test (#758) (67ab2b6)
• auto-pick a free dashboard port, make ingress ports overridable (#926) (7eb2f06)
• beta feature push (domains/DNS, SSL certs, volumes, NAS, VPN mesh, firewall, signatures) (#884) (b9004a9)
• brand logos for frameworks, integrations and backup targets (#671) (e1e1cd4)
• bring glinui tokens into the control-plane dashboard (#907) (a665abc)
• browsable template marketplace with category filters and search (#882) (13f1c5f)
• build node routing preference and node onboarding clarity (#775) (9f8927c)
• cancel, queue and digest-pinned rollback for deploys (#731) (a3ce5d0)
• change correlation on alerts and SLO burn-rate rules (#742) (70aabce)
• clean no-root install path for levelrail-cli, like aws/gh (#889) (430184d)
• cli build detect/branches and restore history lists (backups, pitr, app-volume-backups) (#684) (f2fe3e0)
• cloud node provisioning (Hetzner, DigitalOcean) (#776) (015ad7f)
• command palette actions, per-app quick actions, recent items and keyboard hints (#693) (b4e5252)
• compact log query for agents (MCP query_logs, CLI logs query) (#763) (671ae55)
• connect apps to managed databases via API, CLI, and UI (#818) (be1cc14)
• connection-lost banner with backoff reconnect and 12 new service templates (#696) (ca77421)
• control plane backups card on general settings (#675) (c8ee001)
• control plane self-backup and offline restore (snapshots, scheduler, pre-migration copy, downgrade guard, CLI, docs) (#678) (efe0c6d)
• cross-app deployments API with summary, stream, CLI and MCP tools (#725) (955dcde)
• cross-app deployments page with live feed, filters, drawer and shortcuts (#728) (dcc5013)
• dashboard consistency pass (settings nav, search, headers, InfoTip docs links) (#838) (514aff3)
• dashboard redesign with a UI kit, overview v2, mission control home, visual apps list and grouped navigation (#715) (ed40d9f)
• dashboard setup checklist, deploy failure summary and keyboard shortcuts help (#699) (03de1e6)
• dashboard waves 1-2, domains attention and backup relocation (#844) (3c3881a)
• deploy preview screenshots (opt-in thumbnails per deploy) (#727) (a68fb9f)
• Docker Compose depends_on start ordering, unsupported key validation, apps validate (#784) (3ae52a7)
• docs: add amber WebGL ambient field to homepage hero (#832) (0f04842)
• docs: give each landing feature card real proof, not a generic icon (#878) (f5a6db8)
• docs: redesign footer with scroll-reveal and glass pill accents (#871) (c88e68e)
• docs: scope hero WebGL field to hero, add scroll parallax and footer stars (#834) (d4f8a8d)
• doctor check for stale control plane backups, verified pre-upgrade snapshot and downgrade guard live (#685) (ddc273a)
• encrypted off-box control plane backups, platform as code, alert silences and a public status page (#712) (f9c114e)
• enlarge Levelrail mark, fix header's placeholder logo (#868) (659cd9d)
• env editor .env import preview, pending diff, secret-safe export, and apps env import/export CLI (#690) (85bf8a8)
• failed deploys and disk pressure in attention (#673) (567a125)
• forward raw TCP streams through the embedded ingress (#921) (87d1b76)
• GPU-aware scheduling, S3 build cache, pipeline graph and repo sync, fork PR guard, gateway fix (#702) (50c87a2)
• harden and polish the in-app AI assistant chat (#899) (56e5ceb)
• harden PR preview environments (caps, fork approval, single comment) (#745) (13a50c3)
• Hugging Face preflight and model cache manager (#741) (898eb78)
• import 36 Coolify-compatible catalog templates (devtools, productivity, automation) (#896) (522b285)
• integrations: add free self-hosted catalog entries (#914) (49a63e0)
• label certificate events in the audit log (#919) (3463094)
• load balancer check history, check now and per-upstream admin state (#719) (7262460)
• load balancer page redesign with live topology, suggestions, health history and export (#721) (331fda3)
• local checks post PR signal, flag new comment bloat pre-commit (#862) (df21bfc)
• local dogfood run, experimental gate cleanup, security alert verdicts (#773) (2b0910d)
• lock Levelrail visual identity and wire it in (#867) (b56d896)
• log API request latency with slow/critical bands (#924) (6b877d2)
• log controls, brand logos, status page, disk and cert guards (#663) (9684013)
• log level tags, level filter chips, expandable rows and jump to first error (#669) (fd7281c)
• machine-readable CLI errors and a --json coverage test (#762) (8554b61)
• manage orphaned containers, not just view them (#859) (604a9f0)
• mark one-click template deploys as trials, add a stop-and-delete banner (#886) (b9b9480)
• MCP tools for attention, node status history, audit search and control plane backups (#682) (5c47421)
• node_offline alert kind (API, CLI, dashboard, docs) (#691) (418f713)
• one-click deploy for templates with no required config (#811) (7260f50)
• overnight batch (cloud node provisioning, real 2-node verification, scheduled deploys, agent/MCP tooling, templates, and more) (#792) (065085b)
• overnight batch 2 (compose replicas, scheduled-deploy verification, pipeline OIDC, Redis preview isolation, node doctor checks) (#801) (8ef3299)
• passkey login, Microsoft OAuth, Resend email, and a redesigned login screen (#855) (d87c96e)
• path filters, merge queue trigger, and forge status reporting for pipelines and deploys (#744) (6f4c1b8)
• per-key daily token budget, created_by, revoke MCP tool and reworked model keys panel (#740) (2bc97f1)
• platform ops load (apps metrics batch, promote/clone plans, safe upgrade, move plan, honest comparison) (#768) (56bdc42)
• readyz endpoint, CLI parity tranche 2, MCP backup verify and failed deploys tools, e2e cleanup (#700) (f201d3e)
• real preview thumbnails on the deployments page and cross-app API (#737) (a186dd9)
• rebuild homepage sections to drop templated card-grid feel (#872) (9e1d86c)
• redesign docs site with custom nav/sidebar and AI-readiness (#860) (3dce436)
• redesign setup wizard server check into a compact summary (#821) (fd5bd23)
• replace keyboard shortcuts dialog with a stage-overlay nav surface (#908) (dea9675)
• report certificate renewal state (ok or stalled) in API, CLI and dashboard (#670) (5af9598)
• request metrics, deploy safety, model keys, app management, import, preflight and migration runner fix (#711) (56d8e27)
• roll the real mark out to every remaining fallback spot (#873) (74704aa)
• rootless Docker/Podman detection + pipeline OIDC federation (#785) (b22ade8)
• search public Docker Hub from the docker-image deploy picker (#815) (73c588e)
• security follow-ups, control plane backup stale alert and verify, generated API reference (#697) (0a6077c)
• server-side audit log search and failed-only filter (#674) (6e6fa28)
• show WAF, redirect, and maintenance status on the Domains page (#843) (8fb6ea9)
• sidebar visual redesign with a real expandable Projects tree (#857) (9918caf)
• skeleton-first loading states across remaining detail and settings routes (#847) (46f5d5e)
• SLO burn-rate auto-rollback with auto, dry-run, and pause-for-human modes (#810) (ead450e)
• structured deploy failure object across API, CLI and MCP (#761) (bc1b37a)
• supply chain visibility per deploy (SBOM, optional scan gate) (#743) (d1c2a70)
• support MariaDB in the slow query log viewer (#858) (31093a3)
• surface IAM/registry in top nav, real skeletons on detail pages (#842) (26f737c)
• tiered deploy previews with a free metadata default (#736) (92f2913)
• unify brand to petrol-blue, redesign docs homepage, bring glinui tokens to web (#909) (9e2ff11)
• unify wizard step chrome across setup and node wizards (#849) (d2a19fe)
• update channel settings, scheduled check, and version-skew notice (#866) (6edcdd7)
• wait_for_deploy and plan_change for the agent layer (#766) (6576abb)
• wave 3 (changelog, API explorer, cost estimator, templates, push, env diff, topology, forecast, chat approvals) (#890) (35ef71e)
• wave 3 agent surface (experimental gate, failure classes, failure view, agent loop e2e, launch docs) (#772) (8a39249)
• web: add brand logos for 5 of the selfhosted4 templates (#812) (4a73fe2)
• weekly GHCR cleanup for orphaned untagged image versions (#864) (001a5c9)
• wire queue, cancel and digest rollback into the deployments page (#750) (42018aa)
• wire up support@levelrail.com and support@glincker.com contacts (#827) (e4a6f1d)

Bug Fixes

• [HIGH] ssrf in http log drain sinks (#894) (db5a4a4)
• [HIGH] ssrf in http log drains (#688) (8b1e58a)
• accessibility and baseline-ui pass on the beta feature wave (#887) (8236001)
• accessibility pass on status, log viewer and node events, plus component tests (#681) (ebc7b88)
• address SonarCloud gate findings on overnight2 (#804) (e628a53)
• cache-bust the favicon so a redeploy actually shows the new one (#877) (42066d8)
• cap API token abilities to the caller's own, add route guard test (#689) (6ec382b)
• change correlation and SLO burn review follow-ups (#746) (a83636b)
• close a status race in SSH node provisioning (#863) (1bd5e1f)
• collapse long always-visible prose into on-demand InfoTip (#903) (e8924e5)
• confirm dialog for deploy cancel, aria-hidden on status header icon (#895) (0f334c3)
• CPU percent always reads near zero on some Docker installs (#904) (9ba5d91)
• dashboard review follow-ups (health link, fallback url, unhealthy diagnosis, cleanup card, read on open, lazy row metrics, stop polling on 404/501) (#722) (62f8772)
• dashboard visual polish across metric tiles, node providers, and domains (#856) (a1b5bd5)
• deploy preview review follow-ups (opt-out, deletion, labeling races) (#733) (ac7c712)
• deployments page review followups (pinned redeploy, confirm copy, deep link, retry loop) (#730) (411b06f)
• deployments preview follow-ups (#739) (94f0b68)
• deployments review follow-ups (per-event visibility, old held in needs_attention, rollback and live precision) (#726) (f75cd01)
• detect actually-open dialogs, not closed-but-mounted ones (#820) (9f99fdf)
• Docker web-build symlinks, stop forcing full CI on every main push (#911) (7a12fa2)
• docs: footer giant mark position, mobile overflow, and scroll reveal (#875) (5b92e88)
• docs: keep hero stars twinkling instead of fading to black, pause offscreen (#874) (b17ec7e)
• drop --delete-branch from dependabot auto-merge, incompatible with the merge queue (#906) (698b1c2)
• extend pre-commit comment-density check to web/*.ts and *.tsx (#910) (653bcca)
• force vite to apply CJS interop to mermaid's fastdom dep (#831) (fe22464)
• gate ingress routing and deploy-attempt status on real readiness (F-002) (#774) (93b6044)
• hugging face preflight review follow-ups (docker disk, per-GPU fit, gated ollama, file lookup, cache key, UI) (#747) (bed5fe6)
• IaC env placeholders require an explicit allowlist and triage of open CodeQL alerts (#717) (27b15db)
• IAM scoping for app routes, review findings, load balancers and pipelines overview pages, salvaged Jules tests (#708) (3a242b0)
• judge deleted-app approvals by IAM instead of hiding them (#732) (6020a25)
• launch wave 1 (nightly, CodeQL, agent-core MCP profile, env tools, VPS smoke) (#759) (eb1b60c)
• load balancer page review followups (safe export commands, no default probe, retry 0, serialized saves, estimated shares) (#723) (8221d18)
• mesh placement bug, safe SQLite volume backups, settings sidebar (#880) (c944cd1)
• node provisioning follow-up fixes from post-merge review (#779) (fc0d798)
• paint the hero WebGL field's first frame unconditionally (#833) (e878a2c)
• pin the e2e PITR minio image and skip when the registry is unavailable (#698) (344f634)
• pipeline script injection, IAM and stream re-auth gaps, secret binding, gateway limits, MCP safety, container hardening, signed releases (#709) (53c0f0e)
• point MinIO template at its still-public registry path (#913) (ccfbc04)
• preview hardening and agent-core profile follow-ups (#771) (07e7b5a)
• preview tiers review follow-ups (card kept on failure, public-domain Host, bounded thumbs) (#738) (1ec9fae)
• read host memory on macOS and report unsupported platforms cleanly instead of a raw /proc error (#714) (58e02e1)
• recover two commits orphaned by an earlier merge-queue timing race (#865) (58efe53)
• reject a second concurrent manual build of the same app, add deploy pipeline failure-mode tests (#692) (873da2e)
• reject noncanonical upstream ids and clear admin state when a load balancer is removed (#720) (bc47eb7)
• remove duplicate backup_history index migration (#788) (2e18bb3)
• remove duplicate backup_history migration and quote colons in docs frontmatter (#790) (1d8af25)
• remove unresolved merge markers from main's api-reference.md (#900) (a45d8d4)
• renumber the deploy approval options migration to 0144, it collided with the status page migration at 0142 (#716) (a69d31d)
• replace window.confirm with the standard delete-confirm dialog (#800) (9cd8414)
• resolve database env vars to mesh DNS names, not container names (#816) (dbb3ee5)
• resolve migration 0135 number collision (#787) (5bad98b)
• reuse existing badge variant, add inferable name defaults (#797) (30e4fed)
• review follow-ups for path filters and forge status reporting (#748) (b51f62a)
• scope cross-app list endpoints to apps the caller can read (#734) (628a001)
• scope failed deploys and deploy approvals lists to readable apps (#729) (bbb6bf9)
• scope lint cache per worktree, harden AI-attribution check (#793) (467e1cf)
• security and correctness findings from review of #711 (#713) (6c6b05f)
• security hardening (log redaction, login timing, CSP) (#885) (789a066)
• silence shellcheck SC2016 false positive in install.sh test (#789) (607f567)
• static-site CLI gaps, framework detection, webhook URL, git import (F-017/F-018/F-020/F-021/F-022/F-023) (#778) (db8c4c7)
• stop forcing the favicon mark to look small (#876) (1cf68b9)
• stop showing a dead container's logs as live in blue-green overlaps (#923) (6b4ca5f)
• stop showing add-tag control on every app tab (#920) (b5bfd35)
• stop squeezing the template catalog into a narrow fullscreen column (#845) (245e44a)
• supply chain gate review follow-ups (#749) (72a4d75)
• unbounded scoped backup paging and case-insensitive cert domain ownership (#735) (c53f832)

Performance

• batch SQLite telemetry inserts using json_each (#881) (200080e)
• idle footprint benchmark, cached Docker disk usage, single container list per suspended reconcile (#695) (a1a52fc)
• index backup_history by started_at (#705) (849bbbb)
• optimize get conditions for controllers query (#791) (3d77994)
• optimize ListAppEvents and ListDeployFreezeWindows IN clauses (#893) (704120e)
• Skip weekend run (#724) (e0097fd)
• split internal/api test shard from 3 to 4 in fast CI lane (#795) (2285c44)
• use json_each for SQLite IN clauses (#802) (f79f4cf)

Documentation

• add a serif pull-quote accent card to the homepage (#836) (9d541c5)
• add a who-this-is-for page grounded in shipped features (#915) (f310604)
• add credibility content to homepage (#835) (a6197d4)
• add feature status page with per-area evidence and labels (#756) (3614774)
• add full template catalog page (#916) (8abfbfd)
• add metallic headline gradient to homepage hero (#829) (04e59aa)
• add real mermaid architecture diagrams to 16 pages (#852) (886f2f6)
• apply the pending corrections from feature-status.md's audit (#917) (36f96b1)
• capture and embed load balancer, app overview, and network screenshots (#854) (9a59638)
• explain mesh DNS resolution for cross-node database connections (#817) (afe8887)
• fill network topology and connections gaps, tighten onboarding (#825) (7827c68)
• fix llms.txt domain, add sitemap lastmod/priority, per-page OG image (#837) (a76ac53)
• lead git-integrations, templates, feature-flags, and projects pages with user tasks (#853) (233b330)
• lead with user tasks instead of implementation details (#841) (42beee7)
• note APP_AGENT_ADVERTISE_HOST requirement for real node enrollment (#780) (d0f5a28)
• polish homepage cohesion across tonight's content passes (#839) (2b7f488)
• record the docs site's amber accent as a deliberate second brand color (#879) (3b23cae)
• redesign homepage with bento feature grid and real visual identity (#828) (444ebd4)
• refresh roadmap, feature catalog, README status and CLI reference (#676) (5ff9db3)
• remove GitHub star count from homepage trust strip (#846) (a3b9dd2)
• render mermaid diagrams, search body text, rewrite operator-facing content (#777) (5b42794)
• serve install.sh from levelrail.com instead of raw GitHub URL (#830) (86bab58)
• strip inline implementation names from resilience, DR, and backups pages (#851) (e6a3a12)

---

This PR was generated with Release Please. See documentation.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: d560278a-561a-42c4-9861-7d9f195d6a0d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[greptile-apps]

Confidence Score: 5/5

[Low risk] Version bump and changelog entry for beta release.

The PR appears safe to merge, though the existing non-blocking changelog classification issue remains.

Findings

1.  Misclassified performance entry ▶

Summary

This release PR updates the manifest to 0.2.0-beta.15 and adds the beta.15 changelog. The new entry since the previous review notes Azure and GCP cloud node provisioning.

_{Reviews (79) · Last reviewed commit: "chore(main): release 0.2.0-beta.15"}

[greptile-apps]

Misclassified performance entry The new “Skip weekend run” item appears under Performance, but its linked commit changed no files; it only records a skipped scheduled run. Readers looking for performance changes in beta.15 will see a process note instead. Please remove it from the release notes or classify it outside Performance.

Suggested change

* Skip weekend run ([#724](https://github.com/glincker/levelrail/issues/724)) ([e0097fd](https://github.com/glincker/levelrail/commit/e0097fd84bfbb355bf2cb5202d0bbadf5bcdfed3))

Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud