HudsonPanel changelog

Changed

• Present the administrator feedback popup as AdminPanel feedback while retaining HudsonPanel's existing central feedback delivery service.
• Preview each selected branding logo or icon immediately, including default-image resets.
• Identify the specific branding asset when an uploaded image cannot be processed.
• Combine first and last name into one profile Name field beside the login email.
• Preview a selected profile image before saving it.
• Map cPanel `alt-php83` and `alt-php84` accounts to native PHP 8.3 and 8.4 while keeping CloudLinux LVE limits and RTMP outside the account-transfer workflow.
• Exclude disposable LiteSpeed cache data during transfer and deactivate the LiteSpeed Cache plugin on the destination after database import without changing the source server.

Fixed

• Preserve uploaded branding-logo aspect ratios without adding transparent side padding that made narrower logos appear undersized.
• Process transparent branding PNGs in the application instead of relying on an external ImageMagick conversion, while retaining upload size and image-dimension limits.
• Extend the systemd update activation timeout before slow dependency preparation so updates cannot be terminated after stopping panel services.
• Repair legacy Dovecot mail-SNI includes before update validation and stop fresh configurations from recursively including the generated SNI file.
• Replace the packaged profile-upload placeholder with writable shared storage during fresh installations, preventing profile image saves from returning a 500 error.
• Disable the OPcache JIT buffer when an encoded-application loader is active to prevent loader conflicts in PHP-FPM and CLI.

Added

• Install and enable checksum-verified ionCube Loader by default for supported PHP versions, with per-version controls to enable, disable, remove, or switch to SourceGuardian.

Changed

• Reduce shared page-title sizing slightly and allow long domain titles to wrap within the panel workspace.
• Combine public changelog entries into ten-version cards across the complete release history and future releases.
• Limit dedicated account assignments to IPv4 website traffic while keeping mail delivery on the shared server hostname and address.
• Bind customer websites to their assigned IPv4 so unassigned secondary addresses cannot serve shared customer sites.
• Run cPanel Final Sweep against the completed destination account without recreating it or changing the source server.
• Give application error pages priority over HudsonPanel error pages, with raw Nginx pages used only as the final fallback.
• Condense migration notes by grouping cron paths and database configuration reviews into single actionable lines.
• Align PHP Manager version and support-status labels consistently.
• Keep the selected-certificate counter beside the bulk SSL action and add 10, 25, 50, and 100 results-per-page options.
• Configure bare domains and `mail.<domain>` hostnames for Postfix and Dovecot SNI while retaining the server hostname certificate as the default.
• Redirect mail-domain HTTPS requests to the server webmail hostname.
• Load PHP runtime checks after the page renders so large domain inventories open promptly.
• Align PHP Domain Settings with the List Accounts search, table, pagination, truncation, and hover behavior.
• Show domains, account names, and account-owner email addresses with a consistent 20-character display limit while preserving the full value on hover.
• Separate successful file and database transfer results from destination website health so an HTTP error is reported for review without mislabeling the data transfer as failed.
• Preserve the transfer and database verification evidence needed for the final migration report.
• Keep migrated-domain notices informational so administrators can still choose whether to transfer an account again.
• Make the Final Sweep a separate manual action after a successful account transfer.
• Highlight only the current migration stage with a thick orange border.

Fixed

• Remove the account-edit return button so long domains have the full heading width available.
• Serialize dedicated-IP assignments, update all owned website DNS zones, and safely restore website and DNS configuration if an assignment fails.
• Quote imported Apache regex quantifiers so valid security rules cannot prevent Nginx from regenerating website configurations.
• Preserve and restore database configuration during final-sweep validation and report a failed sweep without damaging the completed transfer.
• Import quoted and escaped cPanel redirect rules without breaking their destination URLs.
• Preserve application-generated 403, 404, and 500 responses instead of replacing them with server-generated error pages.
• Refresh migration preview routing safely when an older preview configuration returns a generic Nginx error.
• Load HudsonPanel's generated Dovecot mail SNI configuration from the installed Dovecot configuration.
• Continue bulk SSL issuance when an individual domain fails and refresh each result without requiring a page reload.
• Treat HTTP 403 and other non-success responses as website checks that need review.
• Show the destination website's real response before attempting to rebuild an existing migration-preview vhost, preventing useful 403 and 500 responses from being hidden by a generic bad gateway page.
• Make an already installed PHP runtime available for domain assignment when HudsonPanel prepares it for a migration.
• Validate imported table inventories against HudsonPanel's translated MariaDB collation instead of the source-only MySQL collation.
• Prevent successful `utf8mb4_0900_ai_ci` compatibility conversions from being reported as failed imports.
• Create and connect a secure local database login when cPanel has no restorable login identity instead of rejecting the split database payload.
• Give parallel transfer workers unique atomic progress files so telemetry updates cannot interrupt an otherwise valid transfer.
• Allow completed and failed transfer reports to be cleared after removal of the former source-maintenance workflow.
• Keep failed transfers on the Transfer Accounts stage and move successful transfers to the Final Sweep stage.

Security

• Reject IPv6 dedicated assignments and prevent concurrent administrators from assigning the same secondary IPv4.

Added

• Keep migration previews available until their report is cleared, then retain them for seven days before cleanup.
• Support verified addon-domain redirects and host-aware links inside migration previews.
• Normalize existing HudsonPanel website configurations during updates so application error pages take priority server-wide.
• Add searchable, paginated SSL certificate listings with bulk selection and live per-domain issuance results.
• Add dedicated `mail.<domain>` certificate rows for active mail domains in AdminPanel and AccountPanel.
• Show the current file group, group total, overall transferred data, and estimated total time remaining during split migrations.
• Add PHP Domain Settings to AdminPanel with searchable domain inventory, effective runtime verification, and per-domain PHP version controls.
• Add ascending and descending sorting for domain, account, selected PHP version, current runtime, and runtime status.
• Detect the PHP versions used by cPanel domains, install missing runtimes before provisioning, and assign and verify the matching version for every transferred domain.
• Apply HudsonPanel's recommended PHP limits and production settings to every newly installed PHP version before it becomes available to websites.
• Show a small Already moved notice beside source domains that already have a completed active or suspended destination account.

Security

• Make account transfers source-read-only by removing source website maintenance rules, source database locks, and the maintenance-control endpoint.
• Add a runtime SSH safety policy that rejects source website, account, cron, service, firewall, and database-lock mutations.

Fixed

• Prevent duplicate active account transfers from being queued against the same source server.
• Show concise cron and legacy zero-date warnings without extra report buttons.
• Keep transfer retry actions limited to website preview and retry controls.
• Align the completion-email label with the destination-plan field.
• Exclude cPanel Junk, Trash, and Spam mailbox folders from account file transfers and related reporting.
• Use a thick orange border for selected update settings and no border for unselected update cards.
• Vertically center transfer-plan and overwrite checkboxes against their complete card content.
• Add consistent spacing between transfer inventory cards and account rows.
• Force transfer-plan, overwrite, and preflight cards to remain border-free and refresh cached transfer styles with the release.
• Exclude files already omitted by cPanel transfers from source-advisor archive, mail, and temporary-file totals.
• Keep the cPanel transfer exclusion list shared between file copying and preflight reporting so the two cannot drift.
• Support Python 3.6 during cPanel source-advisor scans without using newer `subprocess` arguments.
• Treat historical database crash-log entries as informational unless current table metadata still reports corruption.
• Remove thin borders throughout transfer cards and lists, using surface shades for separation and a thick orange border only for active highlights.
• Keep transfer-report header buttons consistently spaced on desktop and mobile layouts.
• Support legacy cPanel servers running Python 3.6 when discovering accounts, plans, disk usage, dedicated IPs, and cron-job counts.
• Report post-login account discovery failures separately from SSH connection and password failures.
• Prefer password and keyboard-interactive SSH authentication before public keys for source-server connections, preventing unrelated local keys from consuming authentication attempts before a valid root password is used.
• Apply the same authentication order to resumable and compressed cPanel file transfers while preserving passwords with special characters.

Changed

• Simplify account migrations to three equal stages: connect accounts, transfer accounts, and complete the final sweep.
• Replace the required preflight report and approval gate with an optional transfer-time estimate.
• Allow transfers to start immediately after selecting accounts or hosting plans.
• Shorten preflight wording and progress messages without repeating that a read-only report leaves the source unchanged.
• Show cron cutover guidance once with its account commands instead of repeating it in the summary and account details.
• Consolidate repeated source-advisor headings into one concise account-actions section.
• Separate preflight findings from the preflight action card so controls remain vertically balanced.
• Simplify online and text preflight reports by removing readiness pills, repeated estimate disclaimers, and the prescriptive next-step section.
• Simplify cPanel migrations into four guided stages: connect accounts, build the preflight report, transfer accounts, and complete the final sweep.
• Make resumable grouped file transfer, database migration, and the final change sweep automatic instead of exposing compressed-stream, transfer-pass, cron-control, and cutover checklist options.
• Report source cron jobs in preflight without blocking or controlling them from HudsonPanel.
• Reduce large-site transfer concurrency from two workers to one after sustained CPU or memory pressure on either server, then restore two workers after recovery.
• Keep multi-account workflow progress active until every selected account finishes.
• Clarify that an SSH authentication refusal means HudsonPanel reached the source server and distinguish a password login from an SSH client using a saved key.
• Preserve the connection result after a browser refresh while keeping connection checks separate from file-transfer progress and retry actions.
• Explain each connection and preflight state in place, including what HudsonPanel is doing, whether the page should remain open, what appears next, and whether any transfer has started.
• Show elapsed connection time, update the connection button while it is working, and present the current instruction in a clearly visible status panel.

Added

• Save every source-server connection attempt as a Status Report with its live state, elapsed time, account and plan totals, or actionable connection error.

Added

• Add a three-stage migration guide for connection and preflight, live transfer progress, and report review with the final sweep.
• Add a live manual-backup progress meter with the current account, destination, percentage, and animated activity indicator.
• Add a discreet administrator feedback control for sending bug reports and product feedback directly to HudsonPanel.
• Add browser screen capture with lightweight circle annotations, screenshot review confirmation, compression, and automatic version, page, and browser diagnostics.
• Add a dedicated Sync DNS workspace with local, remote-provider, and public DNS comparison plus bidirectional single-zone and all-zone synchronization.
• Add a read-only full transfer preflight with concise online and text reports, source-specific action guidance, transfer timing, cron cutover details, remote database access findings, and dedicated source IP reporting.
• Add Files first, Database final sweep, and full-account transfer choices for large cPanel migrations.
• Add application-aware exclusion and destination rebuild support for verified rebuildable search tables.
• Add a root-run backup-server setup script that creates a dedicated password-authenticated SSH account restricted to its own `/backups/<name>` jail without a storage quota.
• Add server-specific Codex and Claude Code connection instructions with installation, login, and reusable SSH key commands.
• Add delayed remote-backup cleanup for removed websites and terminated accounts, including safe retries and cancellation when a resource is restored.
• Add connection removal controls for every administrator backup destination while leaving existing remote backup files intact.

Changed

• Replace raw SSH connection output with short, actionable guidance for authentication, port, firewall, timeout, and hostname failures.
• Refresh manual-backup progress in place without holding or reloading the browser request, while preserving safe stop and completion states.
• Run administrator-triggered backups in a guarded background task so the browser returns immediately and can safely leave the page.
• Show the current destination and account step during a manual backup, prevent duplicate runs, and provide a safe stop action between backup steps.
• Tailor the report form wording for bug reports and general feedback while keeping the reporting workflow compact and accessible.
• Add consistent spacing between button icons and labels throughout the panel.
• Optimize large cPanel transfers with streamed database handling, resumable file passes, transfer telemetry, source database locking, and post-transfer verification.
• Preserve legacy zero-date defaults, validate collation compatibility, and keep remote database grants as report-only findings for manual review.
• Use the destination server's shared primary IP for every transferred account while listing source dedicated IPs for later assignment.
• Increase the default MariaDB capacity for large imports and high-traffic websites.
• Improve transfer, DNS synchronization, tooltip, and administrator card layouts across desktop and mobile views.
• Allow administrator backup destinations to use dedicated non-root SSH usernames and describe their credentials as SSH rather than root passwords.
• Preserve suspended account state through backups and restores, and continue backing up suspended accounts.
• Stream cPanel database transfers with destination capacity checks to reduce temporary storage risk during full moves.
• Arrange each backup destination's four actions in a balanced two-by-two layout.
• Compact the Sync DNS overwrite option into a single aligned control with accessible hover guidance and matching selector and action heights.

Fixed

• Restore consistent vertical spacing between the initial transfer account-type prompt and the Status Reports card on desktop and mobile layouts.
• Initialize the protected SSH host-key file used by remote backup connections during installation, updates, and connection tests.
• Require `/` as the remote path for restricted backup users created by HudsonPanel's backup-user setup script, with a clear validation message.
• Keep DNS synchronization controls aligned and prevent help tooltips from using an unnecessary fixed width.
• Preserve suspended account state, staged DNS changes, cron safety, and account-scoped database consistency throughout multi-pass transfers.
• Reconcile hosted subdomains and provider records safely when DNS is synchronized in either direction.
• Preserve `/` as the remote path for a chrooted backup account and safely build all account and administrator backup paths beneath it.
• Verify write access through the account's writable backup directories instead of requiring its read-only chroot root to be writable.
• Make backup-user setup portable across Ubuntu and RHEL-family servers, recover cleanly from partial setup artifacts, and validate shell, rsync, sshd, SELinux, and rollback behavior before reporting success.
• Verify hosted SSL status against the certificate, public 443 vhost, live SNI response, SAN coverage, expiration, and trust instead of certificate-file presence alone.
• Keep ACME validation independent from HTTPS redirects, reject mixed DNS ownership, and provision website, mail, and MTA-STS hostnames only when reachable on this server.
• Remove SSL references safely before deleting dedicated certificates, protect shared certificates, and verify SMTP and IMAPS SNI plus complete MTA-STS operation.
• Remove deleted website and account backup snapshots after the safety delay without affecting other account data.

Changed

• Refine the Server DNS synchronization layout with a clearer active-provider summary, aligned controls, balanced actions, and responsive guidance.
• Keep the completed System Updater status concise after a successful installation.

Changed

• Improve Server DNS control alignment, group the overwrite option clearly, and simplify Bunny DNS connection actions.
• Link the compact header version directly to System Updater while preserving the available-update color indicator.
• Simplify migration option descriptions and move detailed maintenance, compression, and replacement guidance into accessible help tips for single and bulk transfers.
• Skip compressed website transfers and new-account password requirements automatically when a selected cPanel batch contains only account refills.
• Clarify that leaving account replacement disabled updates changed and missing content without rebuilding matching accounts.

Fixed

• Resolve migrated relative website paths from the correct account home directory when installing SSL for addon domains and subdomains.
• Verify every bulk SSL installation against the certificate inventory and retry once when a completed request does not activate the certificate.
• Match bulk SSL certificate targets to the complete migrated website inventory so configured addon and subdomains are correctly associated with their hosting accounts.
• Apply the same three delayed DNS readiness samples used by individual checks during bulk SSL installation, preventing transient responses from skipping the remaining domains.
• Install hosted-domain certificates through HudsonPanel's account webroot flow so CrowdSec's valid Nginx Lua configuration no longer causes Certbot parser failures.
• Route migrated website previews through the account's normal PHP handler so PHP entry files are always executed correctly.
• Prevent HudsonPanel's managed hostname preference from conflicting with a migrated application's canonical hostname while previewing it.
• Preserve a migrated WordPress website's `www` or non-`www` hostname preference during cPanel transfers.
• Follow canonical HTTPS hostname redirects through the private migration preview listener instead of returning a 502 error.
• Allow a migrated website to remain previewable when its historical transfer job is marked failed but the destination account was successfully created.
• Restore the Preview Website action for failed migration reports that retain a valid destination account.

Added

• Add one-click bulk SSL installation for pending domains with individual readiness validation, sequential certificate requests, and grouped progress reporting.
• Support incremental cPanel refills for multiple existing destination accounts in one transfer batch.

Added

• Add an optional compressed `public_html` first pass for cPanel migrations, recommended for websites larger than 3 GB or containing many small files.
• Follow compressed transfers automatically with a normal resumable synchronization to capture recent changes, while keeping retries incremental.
• Add searchable Mail Delivery Reports for administrators and account owners.
• Add an optional Midnight dark style with immediate profile-page preview while retaining the light theme.
• Show live migration file progress with transferred size, remaining data, speed, and estimated completion time.

Fixed

• Open migration previews without requiring an administrator session or redirecting visitors through the panel login page.
• Route migration previews through the account's normal local website virtual host so existing files no longer fall through to an unrelated private preview host and return 404.
• Preserve the website's HTTPS runtime and canonical hostname behavior while previewing WordPress and other migrated applications.
• Build every migration preview virtual host with HudsonPanel's stable managed TLS certificate paths, including accounts whose website domains do not yet have certificates.
• Prevent a migration preview without a domain certificate from falling through to another account's private preview host and showing an unrelated 404 page.
• Show only the logo intended for the active theme in the AccountPanel header.
• Open migration previews through their private local HTTPS virtual host and resolve the website root directly through an available `index.html` or `index.php` file.
• Serve migration previews through a private local HTTPS virtual host so sites without destination certificates cannot fall through to the HudsonPanel login page.
• Rebuild existing migration preview configurations when opened and install HudsonPanel error pages for migrated websites.
• Replace default Nginx preview errors with HudsonPanel's branded error pages.
• Select migrated database users from recognized WordPress, environment, and Joomla configuration files without reading or changing application passwords.
• Preserve the migrated website hostname during local HTTPS previews so Nginx selects the website instead of HudsonPanel's login host.
• Restore cPanel databases that share the account-level database login while continuing to reject database users outside the migrated account.
• Keep a successful update result visible when it finishes, then return the System Updater to its clean current state on a later visit while preserving failed results for review.
• Match cPanel database grants containing escaped database-name characters so migrations preserve the real database username and authentication instead of guessing a login from the database name.
• Store large `.htaccess` compatibility reports outside the migration status row and expand job result capacity, preventing completed transfers from being marked failed by report-size limits.
• Convert restored cPanel database users to secure local-only logins while preserving their authentication hashes, including a source-definition fallback when the initial user restore is absent.
• Follow safe HTTP-to-HTTPS and hostname redirects inside migration previews without creating browser redirect loops.
• Keep the root terminal available when optional installation-role state cannot be read.
• Store migration SSH host trust in HudsonPanel's protected migration storage so source connections work without a writable service-home SSH directory.
• Detect and use a working cPanel MariaDB socket or local TCP endpoint when the source server's default database socket is unavailable.

Changed

• Display the header version as a compact value such as `v1.30.19`.
• Display the HudsonPanel version beside Load Averages with a lowercase `v.` prefix.
• Prefix the HudsonPanel version shown beside Load Averages with `V.` for clearer identification.
• Exclude cPanel trash, statistics, runtime metadata, temporary data, logs, and known backup artifacts from account-file transfers while leaving `public_html` unchanged.
• Prioritize customer migrations and database restores as foreground recovery work, use lightweight transfer compression, delay source maintenance until the final consistency pass, and process multi-account migrations and backups from smallest to largest.
• Coordinate automatic updates with active migrations so service restarts wait for protected transfer phases to finish.
• Refine light-theme navigation, theme-aware branding, migration cards, favicon previews, branding help, and Email Deliverability status placement.

Changed

• Split the Service Status summary into three individual cards and replace the unused offline/planned total with the number of available application runtimes.

Fixed

• Display permanent CrowdSec trusted-IP entries as `Permanent` instead of exposing the year-1 expiry sentinel.
• Make File Manager's parent-folder link return first-level folders such as `public_html` and `logs` to the account home.

Fixed

• Keep authenticated panel pages available when the web process cannot inspect the optional root-managed Migrate Off HudsonHost feature marker.
• Allow plugin framework services sufficient time to create their Unix sockets during release activation, preventing healthy but temporarily slower upgrades from being rolled back after three seconds.
• Finish failed updates at 100%, preserve their rollback or error explanation, and refresh the System Updater so its final controls and history no longer appear frozen at the last active stage.
• Prevent Codex and Claude Code connections from failing before authentication by having the normal Windows and Mac key command replace stale SSH host entries with the server's current ED25519 host key.
• Validate that SSH is active, root public-key login is enabled, and HudsonPanel's root authorized-key file is in use before accepting an AI Code Agent key.

Changed

• Show separate, exact Codex and Claude Code connection fields, print the local Identity file path during Windows and Mac key creation, and identify the private key file unambiguously.
• Display the server's ED25519 fingerprint for first-connection verification.
• Replace the AI Code Agents wizard with one focused connection page containing only Windows or Mac key creation, public-key enrollment or reuse, and the SSH values required by Codex or Claude Code.
• Remove manual SSH configuration editing, agent installation and startup commands, server-guide review, completion screens, and unrelated advisory content from the connection flow.

Changed

• Simplify the AI Code Agents connection-key heading and allow administrators to skip key creation when the key is already installed while continuing firewall handling and the remaining setup steps.
• Trust the enrolling administrator's current network address in CrowdSec when an AI Code Agent connection is added, removing an existing decision first when necessary.
• Keep updater progress visibly active during long installation stages and reconcile interrupted state with the real update service and lock.
• Make the Terminal's HudsonPanel update action run the development deployment command on development installations and open System Updater on installed servers.
• Remove the Support shortcut beneath the AdminPanel sign-out control.
• Run WordPress installations through a durable system worker and include that worker in new installations, signed updates, service health checks, and future rollback restoration.
• Preserve plaintext email alternatives while applying the configured company identity, support address, accent color, and logo to HTML messages.
• Wait for active account backups to finish before development deployments or release activation restart HudsonPanel services.
• Show notice timestamps in the server's local timezone with an explicit timezone abbreviation.
• Report permissive SSH root-login and password-authentication settings as warnings, with recovery-safe hardening guidance.
• Close the File Manager editor after saving and provide a Close action for discarding an edit.
• Keep panel recovery login available by hostname or main IP over HTTP and HTTPS, with clear warnings and direct links to the preferred encrypted hostname.
• Narrow panel socket and environment access while adding systemd service hardening for the application, migration worker, and privileged helper.
• Require repeated delivery-impacting email failures before notifying customers and keep authoritative DNS drift alerts administrator-only.
• Improve AccountPanel administrator return navigation and notice-page organization.
• Increase remote backup cleanup and retention timeouts to five minutes for SSH, Hetzner Storage Box, and S3 destinations.
• Align HudsonPanel alert envelope and header senders with the server mail domain.
• Improve the FTP account management layout and certificate refresh validation.
• Made Manage Plans the default plan view, improved plan-limit guidance, and standardized over-limit notices across application services.
• Allowed authenticated hosting-platform SSO links to continue safely to an approved AccountPanel destination.

Fixed

• Replace contradictory inactive updater wording with explicit completed, stopped, idle, or final-result confirmation states while progress polling continues.
• Fix administrator phpMyAdmin launches failing with “Invalid administrator sign-on.”
• Fix the AI Code Agents completion screen failing to restart the connection wizard and prevent stale completion pages from being cached.
• Fix System Updater displaying an installing status when no update process is running, leaving a completed update at 82%, and retaining stale available-version text after a failed check.
• Fix the Backup Schedule weekday controls clipping Sunday and overflowing horizontally at intermediate desktop widths.
• Stop the new WordPress worker when release activation fails so rollback cannot leave candidate code running against the restored database.
• Accept safe nested WordPress installation folders when their nearest existing parent directory is writable.
• Keep sign-in and panel stylesheet cache versions aligned after the interface updates.
• Submit and verify File Manager editor content reliably, avoid rewriting unchanged files, and explain when there is nothing to save.
• Display locked DNS SOA records with their correct record type instead of visually falling back to A.
• Match the List Accounts Clear and Search button sizing and refresh panel stylesheet cache keys.
• Serve current source assets without caching on the development server so interface fixes appear immediately during testing.
• Preserve authenticated administrator deep links when launching account plugins such as HudsonHost AI Builder.
• Improve email repair retries, recovery handling, and alert deduplication.
• Keep production servers on their working release when the Linux root account is locked, with a clear instruction to set the root password before retrying the update.
• Defer SSL renewal failures until certificate status can be verified and avoid false failure alerts when a certificate recovered successfully.
• Restore HudsonPanel's PHP package source on older installations before applying the critical PHP security-version floor, allowing legacy servers to upgrade instead of rolling back when Ubuntu's stock repository is still selected.
• Refresh Pure-FTPd certificates atomically and verify the FTP daemon and port 21 listener during installation and release readiness checks.
• Simplified website removal to one confirmation and raised Nginx server-name hash capacity for larger managed domain sets.

Security

• Use the configured HTTPS panel hostname in Bearer-authenticated API examples and the OpenAPI server declaration, preventing copied integration commands from sending API keys over HTTP.
• Replace administrator phpMyAdmin signature handoffs with short-lived, single-use privileged tokens that do not expose HudsonPanel's protected environment file to PHP.
• Align the root administrator username and profile-email sign-ins with the server's current Linux root password, removing the duplicate standard-install password.
• Upgrade every installed PHP branch during release activation, enforce the fixed PHP 8.2.35, 8.3.36, 8.4.27, and 8.5.12 minimums, and verify active PHP-FPM workers after restart.

Added

• Add Windows and macOS connection-key instructions, concrete SSH host aliases, identity-file setup, connection verification, and Codex remote-connection guidance to the AI Code Agents wizard.
• Install a server-local AI agent guide that maps the supported account, database, email, DNS, and website workflows while warning about server-wide changes outside an account's `public_html`.
• Add an AI Code Agents wizard under Security for connecting Windows computers with validated SSH public keys and guided Codex or Claude Code installation commands.
• Add customizable company branding across AdminPanel, AccountPanel, sign-in, password, browser icons, support links, settings transfers, and transactional HTML email.
• Add administrator-managed WordPress installation profiles, checked background installations, site maintenance actions, update restore points, cloning, staging, and guarded promotion.
• Install checksum-verified WP-CLI during new installations and restore it automatically during updates when it is unavailable.
• Add a license-bound HudsonPanel Sandbox installation role with permanent identity, an Edge-only update channel, normal administrator capabilities, visible testing-environment labeling, and a dedicated release-validation profile.
• Add selectable API-key permissions, account and server API endpoints, signed lifecycle webhooks with retry delivery, and built-in API documentation.
• Add bounded activity-log retention and administrator cleanup controls.
• Add an explicitly enabled full-server migration workflow for moving selected accounts to a fresh cPanel server.
• Added separate hosting-plan limits for addon domains, aliases, and subdomains, with serialized enforcement for website, database, and mailbox creation.
• Automatically requested the primary-domain SSL certificate after AI Builder provisions a hosting account.

Added

• Added authenticated external AccountPanel plugin deep links with safe login continuation, account and domain authorization, plan and health enforcement, revocable 12-hour UI gates, and one-use launch tokens.
• Forwarded validated account domains and approved HudsonHost account return URLs to independently distributed plugin entry points.
• Added one-time customer and administrator welcome-email choices to account provisioning, preselected from alert preferences without changing those saved preferences.
• Included the panel hostname as the login link in new-account messages.
• Added a responsive plan-editor card grid for Databases, Email accounts, Python apps, Node.js apps, API services, Discord bots, ASP.NET services, and installed manifest plugin capabilities.

Changed

• Reused the existing account plugin launch authorization and audit flow for both AccountPanel form launches and external deep links.
• Delayed failed-alert customer delivery for five minutes and cancelled queued delivery when the alert recovers.
• Limited automatic SSL renewal attempts to missing, inactive, or expiring certificates and included active website aliases in SSL maintenance.
• Increased the generic authenticated plugin UI Unix-socket request timeout from 30 seconds to 120 seconds for long-running interactive operations while retaining the 48 MB response limit and existing bridge protections.
• Kept built-in AccountPanel card visibility independent from feature permissions, service processes, and numeric plan limits.

Fixed

• Applied HudsonPanel managed error pages consistently to forced-HTTPS and domain-alias Nginx server blocks.
• Prevented authenticated plugin publishes from deadlocking when the framework re-entered a single-process plugin health endpoint during the publish request.
• Continued validating the registered manifest and live Unix socket while retaining service-token, account, role, plan, domain, document-root, and revision protections.
• Rejected account storage quotas above the filesystem quota format's 4095 GB limit before creating Linux users or other provisioning resources.
• Added the same storage validation to plan editing, plan imports, account editing, and API-driven account creation.
• Kept the plugin connection and UI transport sockets available by restarting their framework services whenever HudsonPanel is restarted.
• Removed a circular plugin health request during launch-token consumption that could deadlock a single-request plugin service and incorrectly return 403.
• Kept legacy plugin contexts short while issuing 12-hour interactive contexts to manifests that opt into the new plan-capability framework.
• Reported the version of the framework code actually serving connection-v1 requests when the development source checkout is active.
• Included the isolated plugin UI transport service in transactional update rollback handling.

Added

• Added generic manifest-declared boolean plan capabilities, including disabled-by-default plan editor controls that remain stored when an independent plugin is uninstalled.
• Added authenticated same-origin AdminPanel and AccountPanel entry-point proxying, cookie and redirect rewriting, and inline plugin settings on installed plugin detail pages.
• Added a separately isolated framework UI transport service so embedded interfaces can reach independently owned Unix sockets without changing the three connection-v1 routes.

Changed

• Extended consumed plugin account contexts to an interactive lifetime of up to 12 hours while keeping launch tokens short-lived and one-use.
• Rebuilt account context from current roles, account status, plan capability, domains, document roots, and limits at token consumption; bound proxied sessions to the same revocable authorization state.
• Derived the compatibility project limit from authorized domain document roots and restricted generate and publish permissions to entitled plans.
• Limited AccountPanel plugin cards to active selected accounts whose plugin is installed, registered, enabled, healthy, and included by their plan.

Fixed

• Kept disabled-plugin administrator settings accessible at the embedded AdminPanel plugin route while retaining enabled-plugin and plan-entitlement requirements for account access.
• Preserved same-origin CSRF checks, tenant isolation, request bodies, redirects, and plugin cookies through the framework UI bridge.

Added

• Added the private HudsonPanel plugin connection v1 framework socket with health, single-use account-context consumption, and authenticated website publishing endpoints.
• Added canonical domain document-root scoping, current account and plan permission validation, bounded base64 publish payloads, monotonic project revisions, and recoverable pre-activation website backups.

Changed

• Kept independent plugin discovery and health checks read-only, with plugin-section enablement remaining an explicit administrator preference that is unavailable on permanent DEMO installations.
• Isolated plugin payloads from HudsonPanel release inputs and ensured panel installation and update workflows manage only the framework service, never an independent plugin's files, service, or enabled state.

Added

• Added a backup activity log with backup names, destinations, results, timestamps, durations, triggers, and failure details.
• Added generated health reports for backups, DNS, email deliverability, SSL renewal and expiration, storage, malware, password protection, account provisioning, website changes, and panel updates.
• Added searchable alert preferences with separate administrator and affected-account delivery controls.

Changed

• Reworked generated alerts into compact searchable reports with direct investigation links and individual or bulk clearing.
• Improved the Postfix queue view with account ownership, copyable queue IDs, a confirmed queue-clearing action, and a responsive layout.
• Deferred public DNS verification on Email Deliverability so local results render immediately, then update in the background.
• Refined Email Deliverability into compact per-domain cards with responsive mobile wrapping and accessible status icons.
• Standardized backup scheduling and displayed timestamps so local schedule days and UTC report times are unambiguous.

Fixed

• Prevented reputation-blocked deliveries, including Proofpoint IP blocks, from repeatedly retrying in the Postfix queue.
• Repaired alert generation and affected-account notification routing across scheduled monitors and audited panel actions.
• Kept scheduled backups running across independent destinations while recording per-account failures and recoveries.

Added

• Added hosted-domain mail TLS identities for Postfix and Dovecot so customers can use either the server hostname or their certified domain as the incoming and outgoing mail host.
• Added MTA-STS and TLS reporting setup and verification, automatic `postmaster` and `abuse` aliases, CrowdSec mail-login protection, and active mailbox-retention scheduling.
• Added File Manager rename, file duplication, move, recoverable Trash restoration, multi-item move, Trash, permission, and ZIP-download actions.
• Added multi-file uploads for up to ten files, large-folder pagination, linked breadcrumbs, parent-folder navigation, and empty-folder states.

Changed

• Limited advertised email hosts to names with valid certificates and excluded IP addresses and uncertified `mail.` subdomains.
• Made website removal perform confirmed cleanup of files, DNS, email, FTP access, application services, certificates, logs, aliases, redirects, and traffic records.
• Refined Web Stats to include primary, addon, and subdomains while counting page requests separately from static assets and server files.
• Added daily cleanup for expired account PHP session files and protected mailbox retention against overlapping runs.

Fixed

• Strengthened email deliverability checks for managed MX routing and DKIM consistency, preserved existing mail CNAME records, and refreshed mail TLS identities after certificate renewal.
• Prevented File Manager overwrites, unsafe moves, duplicate Trash collisions, oversized bulk downloads, empty-folder layout shifts, and raw 500 errors for failed view or download requests.
• Corrected shared AdminPanel and AccountPanel database form authentication and consolidated destructive database removal confirmation.
• Allowed generated system alerts to link safely to internal panel tools, preventing backup monitoring failures while reporting an unavailable destination.

Added

• Added simple S3 backup destinations for Wasabi, Backblaze B2, Amazon S3, and custom S3-compatible providers, with independent destination execution, health tracking, and administrator email alerts when a connection or backup fails.
• Added staggered per-account storage accounting every 15 minutes across website files, databases, and email, while keeping inexpensive server filesystem totals refreshed every 60 seconds.
• Added encrypted server-settings transfer between compatible HudsonPanel servers, including hosting plans, backup, DNS, email, security, PHP, Node.js, request-limit, and profile settings.

Changed

• Made CrowdSec the built-in firewall and moved CSF to the optional plugin catalog so it is installed only when an administrator explicitly enables plugins and installs it.
• Limited AdminPanel backups to the ten newest restore points on every destination.
• Standardized panel navigation, headings, labels, and generated backup-server names on sentence-style title case.

Fixed

• Removed backup-server firewall mutations that could produce an `Invalid CrowdSec action` error while saving or testing a destination.
• Kept scheduled backups running when one destination or account fails, recorded destination-specific failures, and allowed healthy destinations to finish normally.
• Improved remote DNS reconciliation so explicit overwrite operations remove stale provider records while routine synchronization preserves unrelated records.
• Preferred the active remote HudsonPanel service directory during migrations so development and release installations use the correct runtime.

Added

• Added Database Versions for MariaDB, including conservative LTS recommendations, downgrade prevention, automatic full server and database backups, staged progress reporting, and post-upgrade health verification.
• Added scoped hosting-platform API operations for provisioning, plans, passwords, usage, lifecycle actions, and short-lived single-use AccountPanel sign-on links.
• Added separately distributed WHMCS module source with lifecycle automation, usage metrics, AccountPanel sign-on, and checksum-verified updates from `hudsonpanel.com`.
• Added an optional compatible-software section for KernelCare, JetBackup 5 for Linux, and Softaculous, including isolated account-level Softaculous PHP pools.

Changed

• Improved migration preview rewriting for root-relative HTML, CSS, source-set, action, background, and endpoint URLs.
• Reorganized migration forms and contextual help for clearer single-account and bulk-transfer setup.
• Moved WHMCS module downloads entirely to the HudsonPanel website; installed panels no longer publish plugin manifests or ZIP archives.

Fixed

• Enabled CrowdSec's official Pure-FTPd parser and brute-force scenario during installation, firewall activation, and updates, with CrowdSec configuration included in update rollback backups.
• Preserved HTTPS redirects for redirect aliases when a certificate is available while continuing to serve ACME challenges over HTTP.
• Kept restricted hosting-platform credentials scoped to their assigned accounts while allowing the lifecycle operations required by billing integrations.

Added

• Added safe transfer of matched databases, mailboxes, forwarders, DNS ownership, traffic history, and related cron jobs when promoting an attached domain into an independent account.
• Added forwarding-address support for every connected website and enabled alias domain owned by a hosting account.
• Added connect-first multi-account discovery and selectable hosting-plan/package imports for HudsonPanel, cPanel, and DirectAdmin migrations.
• Added a dedicated durable migration worker with encrypted temporary source credentials, restart recovery, safe partial-account continuation, sequential batch execution, automatic retry, and one batch completion summary.
• Added Plesk subscription migrations, source-site maintenance mode, incremental cPanel refills, migration preview recovery controls, and guarded cleanup for compressed transfer artifacts.
• Added rsync-only account backups with customer-managed Hetzner Storage Boxes, shared backup scheduling, optional AdminPanel copies, readable restore points, downloadable AdminPanel archives, and an optional 20-day emergency restore point.
• Added Nginx request limiting with safe validation and rollback, CrowdSec AppSec virtual patching, and a 24-hour server load-average chart.
• Added Cloudflare DNS as a complete server DNS provider with encrypted API-token storage, connection testing, zone provisioning, record synchronization, nameserver reporting, and remote-zone cleanup.
• Added a one-click Restore default action beside the Panel logo upload control.

Fixed

• Redirected legacy `GET /login` requests to the canonical sign-in page while preserving the protected `POST /login` authentication handler.
• Prevented domain promotion from treating a database-name prefix as an exact configuration match and moving an unrelated database.
• Rejected malformed forwarder destinations and reported mail-domain ownership conflicts without triggering a database uniqueness error.
• Kept transferred databases available for account downloads and backups even when their existing names retain the former account prefix.
• Made password-protection failure windows nullable so successful logins from an IP with prior failed attempts no longer fail with a database integrity error.
• Allowed AccountPanel page links without an explicit account ID to use the customer's first available account instead of returning a validation error.
• Removed the messaging worker's repeated UTC deprecation warning and logged campaign-processing exceptions after rollback for actionable delivery diagnostics.
• Reported the running source version in server health snapshots on development installations instead of the older installed-release symlink.
• Prevented browsers and intermediary caches from retaining login forms, CSRF values, and authenticated panel HTML.
• Updated login sessions and password-protection timing to the supported UTC clock API for future Python compatibility.
• Prevented PHP default detection from selecting an account-specific FPM pool, kept the selected default available, and verified FPM services and sockets after manager-driven restarts.
• Made PHP and Node.js runtime policy writes atomic and root-only, rejected invalid PHP extension actions, and rolled back Node.js service changes when a restarted unit did not remain active.
• Enforced disabled runtime and hosting-plan controls on direct account requests, including Node projects, workers, Python, Git, and cron tools.
• Added post-action service verification and rollback for API, Discord, and ASP.NET workers, including staged .NET publishing and protected environment/configuration restoration.
• Rejected symlinked Node.js application roots that could leave a hosting account boundary.
• Preserved strict runtime-default validation for new packages while allowing signed releases created before runtime metadata was introduced to move through the normal channel rotation.
• Fixed migration preview assets, stale transfer files, source changes made during long transfers, and recovery when maintenance mode remains enabled after an interrupted migration.
• Fixed terminal shutdown behavior, SSL readiness checks, DNS editor interactions, backup action alignment, and several mobile layout and status-display issues.
• Preserved unrelated Cloudflare DNS records during synchronization and retained safe provider transitions without reusing incompatible remote zone identifiers.
• Removed old-password verification and standalone password-change screens from authenticated profile editing.
• Fixed failed login submissions so they redirect to a fresh sign-in page, show the retry message once, and do not resubmit on refresh.
• Fixed development version reporting and simplified update activity history on development and DEMO installations.

Changed

• Moved bulk migrations out of the web request process so closing the browser or restarting the panel web service does not abandon the queue.
• Clarified PHP and Node.js runtime controls, version support labels, save results, and managed-service behavior.
• Clarified that application runtime switches control customer access, and identified persistent Node workers by their actual systemd supervisor.
• Delayed final database capture during migrations, strengthened cPanel and DirectAdmin conversion and verification, and improved database configuration repair, image transfer, progress reporting, and maintenance-state visibility.
• Redesigned Backup Servers, Backup Schedule, restore, database management, migration, terminal, DNS, SSL, and navigation interfaces with cleaner responsive layouts and consistent labels and contextual help.
• Simplified AccountPanel database credentials, added database sizes and guarded inline deletion, and standardized AdminPanel menu capitalization and transfer naming.
• Reorganized Server DNS into a two-by-two provider selector with Bunny DNS options above Cloudflare and Local DNS.
• Extended DNS synchronization for account zones, migrations, deliverability repairs, default restoration, and account termination to the active remote provider.
• Kept panel logo upload and restoration actions together while shortening the file field to preserve the existing Profile layout.
• Kept the first-login welcome screen while moving optional name, email, and password changes into one Profile form with a short confirmation toast.
• Added DNS-independent panel access by server IP over HTTPS or emergency HTTP, with transport-aware login cookies and an explicit HTTP security warning.
• Allowed installation to finish with temporary SSL when hostname DNS or public certificate issuance is not ready.

Added

• Added account-managed API services, Node.js projects, Discord bots, and ASP.NET Core services with supervised processes, protected environment variables, health checks, logs, private listeners, domain routing, and plan limits.
• Added per-plan Feature Manager controls for API Services, Node.js Tools, Discord Bots, and ASP.NET Services, including server-side access enforcement when disabled.
• Added account SSL readiness checks, DNS-zone recovery and remote DNS synchronization, improved FTP account paths, WordPress subfolder installation, and account password brute-force protection.

Changed

• Expanded cPanel and DirectAdmin migrations with better live status reporting, failure detection, DNS handling, preview routing, email handling, and transfer guidance.
• Improved outbound email authentication, rate limiting, DNS diagnostics, and deliverability scanning.
• Refined AccountPanel and AdminPanel layouts, field help, navigation sizing, service cards, accordions, alerts, backup restoration, databases, FTP, SSL, and migration interfaces.
• Renamed the AccountPanel development section to Dev and moved Website Transfer into Website.

Fixed

• Fixed stale migration progress, invalid DNS request tokens, remote Bunny DNS visibility, SSL capability scope mismatches, and long-running SSL installation feedback.
• Fixed account DNS management for primary, addon, and alias domains and added safe default-zone restoration.
• Fixed service lifecycle cleanup, route conflicts, feature authorization, and account suspension behavior for supervised applications.

Added

• Added Promote Domain for converting an attached local domain into an independent HudsonPanel site with eligibility checks, database and cron warnings, rollback protection, file and ownership migration, web configuration validation, and fresh SSL provisioning.
• Added multiple allowed IP addresses and CIDR networks per API credential, trusted reverse-proxy client-IP validation, and API proxy-authentication coverage.
• Added live AccountPanel mailbox filtering with automatic 50-row lazy loading and an account-owned domain selector for mailbox creation.
• Added live mailbox storage usage and editable quota controls.

Changed

• Redesigned the AdminPanel navigation with consistent Font Awesome icons, spacing, search, and disclosure behavior, and refined the API credential and email-management layouts.
• Stopped creating default mail domains and mail DNS records for new hosting accounts, while retaining the account owner's login email as the default DNS contact.
• Improved operating-system updates to install newly required packages and refresh kernel status after an update or reboot.
• Redesigned the AccountPanel identity header, notices, and mailbox management rows with compact, consistent controls.
• Added a return link from the public DEMO banner to the HudsonPanel website.
• Added AccountPanel page search and a regular-user domain quick switcher for primary, addon, and subdomains.
• Updated the DEMO administrator to Corbin Dallas (`cd@hudsonpanel.hub`) and the AccountPanel owner to Butch Coolidge (`butch@northstar.hud`).

Fixed

• Fixed AccountPanel email filtering and row actions, compact removal confirmation, forwarder address input styling, and cleanup of empty mail-domain records.
• Fixed stale kernel update warnings after reboot and hardened AI-builder termination authorization.
• Improved responsive layouts, including the public HudsonPanel mobile hero and Promote Domain dialogs, progress feedback, document-root display, and validation refresh behavior.
• Restored account-scoped phpMyAdmin single sign-on, account labeling, database visibility, and configuration storage.
• Restored the mailbox remove-button label and refined mailbox action behavior.
• Switch the authenticated administrator AccountPanel session when choosing another hosting account, preserving authorization throughout that account's tools.
• Show the shared AccountPanel account selector for authenticated AdminPanel impersonation sessions and allow administrators to switch among all active hosting accounts.
• Correct DEMO fixture validation for the streamlined one-mailbox-per-account fixture set.
• Run the idempotent DEMO fixture migration during signed DEMO updates before activating and validating the new release.

Changed

• Shortened DEMO fixture domains and mailbox addresses, migrated existing fixture rows, and made DEMO health and certificate presentation consistently healthy.
• Kept the shared multi-account selector available to administrators and account owners in the normal AccountPanel.
• Made DEMO deployment, update, and connection checks report success only after the shared DEMO validation workflow completes.
• License Admin now reports deterministic Healthy, Degraded, or Failed DEMO status from critical and non-critical validation results instead of treating remote command completion as success.
• Aligned AdminPanel sidebar controls and standardized their Font Awesome disclosure icons.
• Consolidated lifecycle authorization around validated installation roles while preserving DEMO markers, development protections, signed releases, and safe migration for existing installations.

Fixed

• Corrected AccountPanel notification-bell sizing and badge placement.
• Preserved a successful release-admin exit status after its temporary release workspace is cleaned up.
• Made CrowdSec firewall-bouncer credential rotation reliable during DEMO re-deployments by restarting and validating the local API before starting the bouncer.
• Blocked DEMO visitors from launching Roundcube mailbox SSO or opening migration previews through read-style routes.
• Accepted CrowdSec's standard Base64 bouncer-key alphabet while retaining strict format and minimum-length validation.
• Fixed fresh CrowdSec firewall-bouncer registration by issuing and installing a dedicated local API key after CrowdSec initialization instead of relying on package-install ordering.
• Fixed CrowdSec repository key permissions so Ubuntu's restricted APT downloader can verify and install CrowdSec and its firewall bouncer during a fresh deployment.

Added

• Added a signed `Replace Edge Only` release operation that leaves Current and Release unchanged.
• Added durable, staged DEMO deployment jobs with per-server overlap protection, timeouts, heartbeats, interruption recovery, redacted private logs, and shared validation results.
• Added a shared role-aware deployment validator and `hudsonpanel dev-deploy` workflow with tests, template validation, coordinated service restart, readiness waiting, route smoke tests, and explicit PASS or FAIL output.
• Added comprehensive post-deployment and post-update DEMO validation for identity, signed Edge release provenance, fixtures, public flows, protected operations, external tools, and CrowdSec services.
• Added permanent machine-readable installation roles for development, License control-plane, DEMO, and production systems.

Added

• Added permanent HudsonPanel DEMO installations with Edge-only remote updates, public AdminPanel and AccountPanel entry points, automatic DEMO sessions, fictional fixtures, and age-based cleanup.
• Added centralized DEMO enforcement for application mutations, APIs, privileged system operations, terminals, external tools, migrations, backups, and integrations.
• Added nightly maintenance and email DNS health checks with improved delivery auditing and repair guidance.

Changed

• Kept CrowdSec and its firewall bouncer active as protected infrastructure while removing public DEMO access to CrowdSec decisions and management controls.
• Improved email deliverability handling, Bunny DNS synchronization, dashboard health reporting, migration conversion, and development-source release protection.
• Moved DEMO deployment and update control to License Admin while preserving the normal signed HudsonPanel release system.

Fixed

• Fixed CNAME-aware email routing checks, DKIM and BIMI reporting, migration edge cases, and DNS-provider synchronization failures.
• Fixed update controls so permanent DEMO identity and the Edge channel survive signed HudsonPanel updates.

Added

• Added Bulk DNS Management with exact-match nameserver and record updates, previews, zone validation, SOA serial updates, DNS reloads, selected-zone scope, and concise job history.
• Added administrator-aware AccountPanel sessions with a secure AdminPanel return action that never appears for direct account logins.
• Added five linked server-health lights for CPU, memory, primary-domain SSL, HudsonPanel updates, and kernel status.

Changed

• Changed SSL readiness to verify DNS stability three times over approximately 15 seconds before reporting a domain ready for certificate issuance.
• Changed default account error-page storage from `hudson-errors` to `error-pages` and updated managed website and `.htaccess` references without altering personal website files.
• Improved the main dashboard with used and available disk capacity, primary-account-only SSL health, update-channel status, and clearer kernel state.
• Improved the root terminal with a shorter viewport and automatic reconnection when operating-system updates briefly restart HudsonPanel.
• Improved DirectAdmin pointer migration and transfer reporting so compatible aliases are attached to their destination websites and unresolved details remain visible in transfer notes.

Fixed

• Fixed alias domains that existed in HudsonPanel but lacked complete DNS publication after migration.
• Fixed AccountPanel administrator return state not being recorded or displayed in the account header.
• Fixed dashboard SSL health counting panel hostnames, aliases, addon domains, and service names as missing primary-account certificates.
• Fixed terminal OS updates showing a JSON parsing error when package maintenance restarted the panel mid-command.
• Fixed SSL issuance readiness becoming inconsistent while DNS alternated between an old and new server during propagation.

Added

• Added Linux Malware Detect-powered Virus Protection with server-wide controls, per-account Off, Report Only, and Automatic modes, conservative and standard sensitivity, recoverable File Manager Trash quarantine, and scan history.
• Added plan-level Feature Manager controls for optional AccountPanel cards while preserving essential hosting tools.
• Added complete hosting-plan export and import for transferring plan definitions between HudsonPanel servers.
• Added professional HudsonPanel error pages for standard HTTP errors and automatic installation for newly created accounts without altering migrated websites.
• Added server-wide `/webmail` and `/hudsonpanel` convenience redirects for hosted domains, server hostnames, and active server IPs.
• Added SSL readiness checks that verify DNS, active website configuration, and existing certificate coverage before issuance.
• Added detailed domain inventory and resolution auditing for primary domains, addon domains, subdomains, aliases, and managed DNS zones.
• Added a shared Apache `.htaccess` compatibility engine, migration review reports, cleaned destination files, original backups, generated Nginx output, and detailed filtering by result, website, text, and line range.
• Added DirectAdmin domain-pointer migration as HudsonPanel aliases or redirects with target preservation and per-pointer transfer reporting.
• Added public changelog and `.htaccess` compatibility data publication to the signed release workflow.

Changed

• Improved HudsonPanel, cPanel, and DirectAdmin migrations with safer source detection, less disruptive completion rules, structured review notes, temporary-preview handling, and clearer transfer reports.
• Expanded `.htaccess` conversion for grouped rewrite conditions, redirects, front controllers, request variables, blocking rules, PHP settings, caching, headers, and application-specific routing while retaining uncertain blocks for review.
• Improved DirectAdmin migration handling for archives, document roots, PHP versions, databases, mail, redirects, and multi-domain accounts without treating aliases as separate websites.
• Reworked migration reports so errors, warnings, successful pointer operations, DNS results, and notification details share one numbered Notes section.
• Improved DNS handling for hosted subdomains, branded Bunny DNS synchronization, duplicate-zone recovery, and account termination so remote Bunny zones are removed unless DNS retention is selected.
• Updated the SSL manager with concise active states, readiness feedback, and consistent certificate actions; removed a redundant DNS lookup that could contradict a successful readiness check.
• Added customizable optional-card visibility to AccountPanel plans and improved Plans, Firewall, Server DNS, Migrations, Website Manager, SSL, Virus Protection, and update interfaces.
• Added borderless inactive selection-card backgrounds, consistent card spacing, responsive layouts, clearer status colors, and consolidated page typography and navigation styling.
• Improved development-source update protection so published release updates cannot accidentally replace the canonical development server.

Fixed

• Fixed migrated subdomains not receiving complete independent website and DNS treatment.
• Fixed account termination leaving Bunny DNS zones behind after local DNS removal.
• Fixed DirectAdmin migrations failing for harmless website-content incompatibilities and reporting completed transfers as failures after account creation.
• Fixed temporary migration previews, transferred rewrite behavior, SitePad compatibility reporting, and transfer-method mismatch handling.
• Fixed duplicate DNS activation errors, web-server configuration failures during overwrite retries, and unclear migration warning placement.
• Fixed inconsistent SSL readiness and issuance results caused by an immediate duplicate resolver lookup.
• Fixed spacing, sizing, and background inconsistencies across Feature Manager, Virus Protection, Plans, migration source selectors, and `.htaccess` review cards.

Added

• Added CrowdSec-first firewall management with CSF and no-firewall alternatives, health reporting, decisions, alerts, trusted networks, and bulk allowlisting.
• Added server-wide account resource usage and domain IP resolution dashboards.
• Added account IP reassignment, reversible abuse protection, and customizable suspended-account pages with visitor contact handling.
• Added kernel status monitoring, service restart controls, server reboot tracking, and managed Ubuntu maintenance controls.
• Added an administrator release console for immutable signed packages, three-channel rotation, validation, and safe channel reassignment.

Changed

• Renamed and completed the System Updater interface and connected it to signed channel manifests at get.hudsonpanel.com.
• Stabilized email deliverability auditing and reorganized it under Messaging.
• Expanded installation support for the new firewall, maintenance, suspension, and service-management components.
• Advanced the database schema declaration to include account abuse-protection and suspension-template migrations.

Added

• Added administrator controls for automatic HudsonPanel updates, manual checks, and manual installation.
• Added installed and available version display, live update state, durable update history, and visible failure details.
• Added bounded license-server outage grace, persistent update logging, log rotation, and source-controlled public endpoint rate-limit policy.
• Added an explicit update rollback contract and focused interface tests.

Changed

• Expanded rollback to restore managed configuration and the complete pre-update HudsonPanel database before restarting the previous release.
• Preserved an administrator's automatic-update preference across manual and scheduled updates.
• Required integrity checks on both configuration and database backups before activation or rollback.
• Made fresh installation disable Ubuntu's conflicting local DNS stub while preserving upstream resolution.
• Made initial activation verify every required service, wait for application readiness, and cleanly remove a failed candidate without creating a broken `current` link.
• Made hostname preflight verify public DNS directly instead of being misled by Ubuntu's standard local `127.0.1.1` hostname entry.
• Deferred package-triggered and `needrestart` service restarts until HudsonPanel has installed and validated its DNS, mail, web, and SSH-safe configuration; start MariaDB and Redis only when configuration first requires them.
• Matched the proven live PowerDNS design with a dedicated TCP database identity, least-privilege table grants, and DNSSEC-aware backend configuration.
• Made the resolver handoff explicitly readable by `systemd-resolved`, and stop newly provisioned services if a first installation fails its acceptance gate.
• Explicitly start Ubuntu's SysV-backed Pure-FTPd service and allow all required daemons a bounded startup period before the final acceptance gate.
• Reload Nginx immediately after activating the trusted panel certificate so the first HTTPS response no longer serves the temporary bootstrap certificate.
• Allowed shared database actions to authenticate either an administrator or AccountPanel session while retaining per-account authorization checks.