v4.9.4

Fix:

• PostgreSQL verify-ca would fail if using system CAs instead of passing in via VCAP_SERVICE

Build with:

• Go: 1.24.6
• Node: v22.13.1

v4.9.3

Updates:

• Fix for CF ssh plugin intermittently failing @krutten (Fixes #4870)
• Modify Search Filter to cover Tags as well @bmo-at-a9s #5098
• Fix Display of Active and Bindable Services in the UI @bmo-at-a9s #5099
• Fix tests after integration of root api endpoint from CloudController @mafolz #5151
• Consume SSL certs provided as VCAP ENV var for secure db connection @Skretzschmann #5147
• Fix for detecting VCAP names for multiple service providers @krutten

Build with:

• Go: 1.24.6
• Node: v22.13.1

v4.9.3-dev.1

Updates:

• Modify Search Filter to cover Tags as well @bmo-at-a9s #5098
• Fix Display of Active and Bindable Services in the UI @bmo-at-a9s #5099
• Consume SSL certs provided as VCAP ENV var for secure db connection @Skretzschmann #5147
• fix tests after integration of root api endpoint from CloudController @mafolz #5151

Build with:

• Go: 1.24.2
• Node: v22.13.1

v4.9.2

Updates

• Update GoLang libraries for various potential CVEs

Docker/Moby

CVE-2024-41110
CVE-2024-24557

Bump Helm librry for Helm CVE's

CVE-2024-26147
CVE-2025-53547
CVE-2024-25620
CVE-2025-32386
CVE-2025-32387

x/crypto

CVE-2024-45337
CVE-2025-22869
CVE-2023-45288
CVE-2025-22870
CVE-2025-22872

Build with:

• Go: 1.24.4
• Node: v22.13.1

5fb124b0c92028a20e5e9102d3a87fba23192ccf37350209f337692e377978f8  stratos-frontend-prebuild.zip
09006d8cbdc935b94d92551e627d8784c54dd022bba962d72cb20b19c959dccc  stratos-ui-v4.9.2.zip

Note: v4.9.3-dev was incorrectly uploaded originally. If the diagnostic page shows the commit was 46ae142e please download a new version

v4.9.1

THE BUILD uploaded was v4.9.3-dev.1 -- We are correcting this and will upload the proper v4.9.1 build soon

Updates

• Fix patch migration for MySQL/MariaDB

Build with:

• Go: 1.24.5
• Node: v22.13.1

v4.9.0

Updates

• Fix cf pushapp for cf cli v8 (From anynines:fix_cf_pushapp_for_cf_cli_v8 by @mafolz)
• Updates to multiple Go-Lang packages for CVE fixes

Build with:

• Go: 1.24.2
• Node: v22.13.1

v4.8.2-dev1

Updates

• Fix cf pushapp for cf cli v8 (From anynines:fix_cf_pushapp_for_cf_cli_v8 by @mafolz)

Build with:

• go version go1.23.7 linux/amd64
• node v22.13.1

v4.8.1

Updates

• Now points to cloudfoundry/stratos instead of cloudfoundry-community/stratos
• Can build with USE_LOCAL to skip the git clone step

Fixes

• When upgrading from 4.4.x one migration could be missed. This fix detects and fixes this issue.
• Fix SQL sessions statement
• Remove Zuun appname

Built with

• Go: 1.21.13
• Node: v20.18.0

To use the prepackaged Stratos (with UAA) using binary_buildpack

Update the secrets in the sample_manifest.yml

mkdir stratos-tmp ; cd stratos-tmp
unzip path_to/stratos-ui-4.8.1.zip
cf push -f path_to_this_manifest.yml

Additional documentation available at https://stratos.app/docs/deploy/cloud-foundry/cloud-foundry

4.4.0

Full Changelog

This release includes a number of improvements and fixes, including updates to visible Kubernetes resource types, deploying applications from private Github/Gitlab repositories and a greatly improved home page.

Improvements:

• Show more kube resource types for a cluster #4823
• Add additional kube resources to Workload page #4831
• Deploy Applications from Enterprise GitHub and GitLab #4828
• Improve initial home page to show more meaningful data #4774
• Persist list settings over browser refresh & add reset button #4814
• Application logstreams incorrectly render unicode characters in the log. #4807
• No option to set an SSOWhitelist with helm deployments #4785
• Endpoint Registration: Advanced Client ID and Secret fields can be confusing #4767
• Clicking on a helm repo endpoint should automatically set it as a filter in chart list #4760
• Upgrade to Angular 10 #4725
• Add ability to favourite Kubernetes Namespaces #4651

Fixes:

• Helm chart: Cannot provide custom mariadb.port #4843
• Can't connect Stratos to a non-Stratos-Metrics Prometheus #4804
• UAA Setup UI does not accept client secret with # char #4789
• Password show/hide icon takes tab focus #4768

4.4.0 Release Candidate 4

4.4.0-rc.4