Improvements

• Authentication: OIDC provider settings now support uploading a custom CA certificate and skipping TLS verification. Useful for organizations using self-signed certificates

• Authentication: Error pages now preserve the original URL so users can retry access directly after permissions are granted, and the 403 page now provides clearer guidance

• Organizations: New users signing in via SSO will be guided to contact their administrator or wait for an invitation

• Project: Added ignore_config_files_err flag to allow bulk deletions (project, environment, component) to proceed even when config file removal fails

• StackForms: Sections and groups now support an optional description field to provide users with additional context directly in the form

• StackForms: Read-only widget support. Values can now be displayed to users without allowing them to edit, useful for computed or immutable fields

• StackForms: Stack form values are now resolved in parallel to significantly speed up form loading for large forms

• API - Licence: Insufficient permissions caused by an invalid or expired licence now return a dedicated InvalidLicence error code, making it easier to identify and resolve licence issues

• API - Authentication: Added OIDC TLS configuration support on the API side, including custom CA certificate and skip TLS verification options

• API - Organizations: New users are prevented from creating their own organization when a root org already exists

• API - Service Catalog: Increased the maximum size of the readme field to support stacks with longer documentation

• API - StackForms: Read-only widget support, widgets can now be marked as read_only to display computed values without allowing user edits

• API - StackForms: Sections and groups now support an optional description field in the StackForms configuration

• API - StackForms: auto_complete widget with empty values_ref responses errors are handled gracefully now

• API - Workers: Added configuration options to customize the interval for background worker tasks

• Other: Version information is now included when copying a stacktrace, making it easier to report issues with the right context

Fixes

• Environments: Component update page no longer breaks when the current stack branch has been deleted

• Environments: Fixed an issue where the component configuration was re-fetched using a stale version ID after a stack version update

• Organizations: Organization on delete modal now shows updated data after creating a new org

• Organizations: Fixed an issue where navigating back in the browser would break context

• Project: Fixed icon selector in project settings

• Service Catalog: API errors during catalog repository refresh are now shown directly in the stack changes modal instead of only as a global alert

• Service Catalog: Component header version tag now updates immediately after applying a stack update

• StackForms: Condition validation errors in the StackForms editor are now displayed appropriately

• API - Components: Component configuration can now be retrieved using an updated version even when the previous version no longer exists on the remote

• API - StackForms: Fixed auto_complete widget validation when no predefined values are provided

• API - StackForms: Fixed URL encoding for values_ref endpoints. Variables containing spaces or special characters are now properly encoded

• API - Other: Fixed component update failing when the previous component version had been removed

• API - Other: Fixed an edge case where the stack use cases endpoint would fail with an empty version ID

Security

• API - Other: JWT hashing updated from to SHA256