Skip to main content

1.5.44

Released 19 August 2026

New​

  • Generic Webhook notification channel. Alongside Email, Slack and Teams, notification rules can now deliver a structured JSON event envelope to any endpoint, authenticated with an HMAC signature (X-Signature-256), a bearer token, and custom headers. Plain http:// receivers are allowed for internal networks — secrets then travel unencrypted, so prefer HTTPS where possible.

Improved​

  • Cleaner names throughout the interface. Scheduler-run jobs now show a readable trigger ("scheduler", "msca sweep") instead of an internal marker; discovery scan history shows the username instead of a raw user id; imported-certificate events, configuration-approval audit actions and every background job type now display proper labels instead of raw internal values, and MSCA approval statuses now carry their status colours on the certificate list.
  • Long values are readable and copyable. Serial numbers and fingerprints on the certificate history tab are fixed-width and copyable; long error messages on the Jobs page and on notification channels reveal their full text on hover instead of being cut off mid-word; audit entries no longer wrap identifiers across lines.
  • Dark mode: the bulk-selection toolbar on the certificate list and the script editor's border now follow the theme correctly.
  • The audit log now shows resource names. The Resource column displays the certificate, target, credential or other object by its name instead of a truncated id (the id stays available in the tooltip and on the detail page); an object that was deleted since falls back to the id.
  • Notification history now names the certificate. The delivery-history table links the certificate by name instead of showing its raw id; a deleted certificate is labelled as such.
  • The CA Usage chart labels imported certificates as "Imported" instead of counting them under "unknown"; "unknown" now only appears for a certificate whose ACME account was deleted.
  • Sending a test notification no longer requires a recipient for Slack, Teams and Webhook channels — only email tests ask for an address.

Fixed​

  • A transient database error no longer shows the certificate's distributions as "not found". The distributions list treated any read hiccup as a missing certificate; it now surfaces as a retryable server error instead.
  • Key rotation now fires exactly on the configured cadence. With rotate_key_every_n: 1 a new private key is generated on every renewal, as the setting promises — previously the rotation counter lagged one renewal behind, so each key quietly served one extra certificate (N=1 rotated only every second renewal). The "rotation threshold" signal now also only appears for certificates whose policy is actually rotate.
  • Audit entries written by background jobs now show the username as the actor. The outcome row of a manually-triggered run (for example Distribution Executed) previously showed a raw user/<id> marker while the request row showed the username; both now show the username. Existing audit entries are historical records and keep their original text.