Uptime Kuma Updates & Release Notes

New Features

#7801 feat(notification): add Signalgrid as notification provider (Thanks @signalgridco)
#7740 feat: add Notify! notification provider (Thanks @simplytoast1)
#7719 feat: add Amoot SMS notification provider (Thanks @sina3sd)
#7637 fix: omit content headers from cached 304 responses (Thanks @cyphercodes)
#7034 feat: add SFTP monitor type with password and private key authentication (Thanks @eXtgmA)

Improvements

#7672 feat(auth): hide/show password toggle in login page (Thanks @kilian-nagel)

Bug Fixes

#7820 fix(real-browser): always close browser context (Thanks @EmptyPerson)
#7787 fix: iOS PWA icon has black background (Thanks @konstantintutsch)
#7739 fix: the two ping timeout ceilings were swapped in the monitor form (Thanks @evnchn)
#7718 fix: move afterCreate to initial mariadb pool config (Thanks @otbutz)
#7690 fix: accepted status codes custom range discarded on tag creation (Thanks @AmanUllah687)

Security Fixes

#7838 fix: bump jsonata to 2.2.2 (CVE-2026-77415) (Thanks @Fierygit @cursoragent)
GHSA-wf2j-5mc7-5c4w DoS weakness

Translation Contributions

#7812 #7757 chore: Translations Update from Weblate (Thanks @12LuA @aindriu80 @Aluisio @AnnAngela @AntonPalmqvist @cyril59310 @dodog @Gringit @helakostain @jamalkamaladdin @Kodashas @mcasellas @ueskici @xavivars)

New Features

#7720 feat: add SMS Gateway notification provider (Thanks @mattboston)

#7677 feat: Add ClickUp notification provider (Thanks @nTraum)

#7640 feat: add TurboSMTP email notification provider (Thanks @NewtTheWolf)

#7638 feat(notification): add BearSMS SMS provider for Israel (Thanks @nitay12)

#7632 feat: Add Pinglet notification provider (Thanks @TheGlenn88)

#7609 feat: add Milky as Notification Provider (Thanks @nope-e)

#7555 feat: Add openwa notification (Thanks @ron007d)

Bug Fixes

#7729 fix: analytics_type's enum check was not removed, even the data type changed to string on SQLite

#7702 fix(radius): treat Access-Challenge as successful response (#7700) (Thanks @rikkova)

Translation Contributions

#7715 #7646 chore: Translations Update from Weblate (Thanks @Aluisio @AntonPalmqvist @ATLWongsatorn @Cutlets @cyril59310 @DJEDIVER @dodog @dukkk2 @Gringit @helakostain @kaindlnetwork @misaka10843 @olafrv @raulmouzo @Regard1ess @steliosk98 @WoutNerd @yeonzi @zazuu0)

2.5.0

Uncategorized

🆕 New Features

• #7645 Add next-rootless docker tag
• #7607 feat: allow unlimited interval rather than 24 days
• #7597 feat: add voice call option to Plivo notification provider (Thanks @sarveshpatil-plivo)
• #7584 feat: add Plivo SMS notification provider (Thanks @sarveshpatil-plivo)
• #7571 feat: add Ooredoo (Maldives) SMS notification provider (Thanks @islandboymv)
• #7569 feat: Add WxPusher SPT (WxPusher simple push token) notification provider (Thanks @zjiecode)
• #7546 feat: add Flowtriq DDoS detection notification provider (Thanks @jacob-masse @FlyingDove2493)
• #7525 feat: add tracking support on status pages for rybbit analytics (Thanks @DanielOberlechner)
• #7506 feat(notification): add additional headers option for SMTP (Thanks @dnagy)
• #7214 feat: add NTP monitor type for network time protocol monitoring (Thanks @henricook)
• #7114 feat(system-service): add PM2 picker and platform selection (Thanks @KraoESPfan1n)

💇‍♀️ Improvements

🐞 Bug Fixes

• #7654 fix: correct 12 spelling errors across codebase (Thanks @jannikbx)
• #7641 fix: RSS service status description is wrong
• #7618 fix: widen stat_daily up/down columns from SMALLINT to unsigned INTEGER (Thanks @kushiemoon-dev)
• #7599 fix: reduce rate-limit log spam when quota is healthy (Thanks @hexonal)
• #7590 fix: double // in badgeUrl breaking Badge generator functionality (Thanks @jaimeagudo)
• #7588 fix(domain-expiry): clarify unsupported RDAP warning (Thanks @arturict)
• #7542 fix: resolve Steam monitor hostnames (Thanks @yuminn-k)
• #7520 fix(discord): timezone with dayjs.utc() (Thanks @skkzsh)
• #7516 fix: omit resolver port from DNS monitor service URL (Thanks @skkzsh)
• #7515 fix(monitor): screenshot_delay not saved when editing browser engine monitor (Thanks @GhadiSaab)
• #7472 fix: add timeout functionality to kafka (Thanks @jfgsilva)
• #7465 fix: preserve saved protocol when loading Globalping ping monitor (Thanks @titojuanc)
• #7460 fix: prevent tags dropdown from overflowing viewport (Thanks @Subrat-Dwivedi-22)
• #7290 fix: allow mqtts:// in MQTT monitor (Thanks @Mrstragr @chennin)

⬆️ Security Fixes

• #7538 #7349 chore: Update dependencies
• #7508 chore: Set 14 days cooldown for npm update to mininize the supply-chain-attack

🦎 Translation Contributions

• #7521 #7477 chore: Translations Update from Weblate (Thanks @aindriu80 @Aluisio @andibing @AnnAngela @AntonPalmqvist @arcanjobr @bill162 @ctih1 @cyril59310 @dodog @firedur @Goudarz @Gringit @helakostain @ivanbratovic @kamine81 @kiznick @Mr-Mmmc @MrEddX @OnyxOracle @PolarniMeda @ramazansancar @samsilveira @superpep)

Others

• #7544 chore: change analytics_type to string type from enum
• #7543 chore: add build "pr-test" workflow, add a message for testing to new pr.
• #7541 chore: Add an ability to enable node.js inspector
• #7535 chore: Remove meaningless entries from en.json
• #7496 chore: Login form minor changes

🆕 New Features

• #7434 feat(notification): add EgoSMS SMS provider for Uganda (Thanks @kristianinc @cursoragent)
• #7420 feat: Add incidents to RSS (Thanks @dj-tuxis)
• #7365 feat: Add VKTeams bot notification provider (Thanks @aleshasam)

💇‍♀️ Improvements

• #7433 feat: add optional token field for gamedig monitors (Thanks @aminoacidity)
• #7415 feat: Adding bearer token (Thanks @aminoacidity @nyeswant)
• #7431 fix: Add bearer token support to WebSocket upgrade monitor (Thanks @aminoacidity @nyeswant)
• #7373 fix: update link to documentation about API keys (Thanks @eleanordoesntcode)

🐞 Bug Fixes

• #7453 fix(docker-only): add Let's Encrypt Gen Y root certificates (Please ignore this change)
• #7451 fix: handling npm 11.16.0
• #7351 fix: NTLM monitor over plain HTTP fails with 400 Bad Request (Thanks @karzac)

⬆️ Security Fixes

(Admin only/Authenticated only) Fix: LiquidJS is Vulnerable to Remote Code Execution, a vulnerability from an upstream dependency. In Uptime Kuma, LiquidJS should be used in notification template. (GHSA-gf2q-c269-pqgc)

🦎 Translation Contributions

• #7366 #7353 chore: Translations Update from Weblate (Thanks @aindriu80 @Aluisio @andibing @AnnAngela @Arden-Ahmad @bartoostveen @cyril59310 @dodog @Gringit @helakostain @ivanbratovic @Jumala9163 @Kf637 @master3395 @MrEddX @OnyxOracle @PolarniMeda @samsilveira @toniv90 @ttymayor @Virenbar @xuantan97)

Others

• #7432 chore: Implement dev data directory handling for non-master branches
• #7390 fix: normalize hidden log level lookup (Thanks @aqilaziz)

⚠️ Breaking changes

#7194 fix: Revert "add sorting to status pages"

No more sorting feature in status pages.

Due to bad performance.

#7312 fix(database): add UPTIME_KUMA_SQLITE_SINGLE_CONNECTION

For Raspberry Pi users, you may have to set it to true to avoid SQLite locking issues.

Mainly affected Raspberry Pi users only, you can ignore it if you are not using devices like Raspberry Pi.

🆕 New Features

#7304 feat: websocket improve to fix issue #7268 including support authentication (Thanks @sofia-fernandez-six)

#7207 feat(notification): add custom message template support for Evolution provider (Thanks @kbrianps)

#7201 feat: add Telnyx messaging provider (Thanks @LuvForAirplanes)

#7182 feat: Add VK notification provider (Thanks @FunNikita)

#7160 feat: Add MAX messenger notification provider (Thanks @Redleks)

#7156 feat: add OracleDB monitor (Thanks @sitiom)

#7154 feat: add collapsible groups to status page (Thanks @marco-carvalho)

💇‍♀️ Improvements

#7303 feat(ui): add a helptext that RTT for the ping monitor is not avaliable on linux (Thanks @stchigel)

#7300 feat(ux): changed warning msg (Thanks @hemanth5544)

#7128 fix: Update Home Assistant notification help text for HA 2024 Services→Actions rename (Thanks @tr4nt0r)

🐞 Bug Fixes

#7248 fix(notification): check for monitorJSON in Stackfield provider (Thanks @jlbrt)

#7166 fix: Handle SSL in setup database temp server

#7235 fix(uptime): ensure correct handling of missing time buckets in uptime calculations (Thanks @adrianceding)

#7221 fix(notification): ensure applyExisting is not saved to database

#7198 fix: Domain expiry doesn't seem to update #7189 (Thanks @shanto)

#7155 fix: propagate create errors (Thanks @otbutz)

#7159 fix: monitor graph gaps for sub-millisecond TCP pings (Thanks @0xRozier)

#7125 fix: prometheus metrics have two series for a single monitor when that monitor has tags (Thanks @nicjansma)

🦎 Translation Contributions

#7108 feat: Add English (United Kingdom) language support (Thanks @andibing)

#7292 #7197 #7132 chore: Translations Update from Weblate (Thanks @aindriu80 @Ale1x @Aluisio @andibing @AnnAngela @CammarataLudovico @cyril59310 @dodog @efenow @fcordeiro @firedur @FunNikita @Gringit @Hamstio1 @helakostain @ivanbratovic @kevinheyer-dev @mlopezcoria @Mo7amm1d @MrEddX @numarkpro @Redleks @rodis120 @samsilveira @thisisjaymehta @ttymayor @Virenbar @wibe01204 @Zeromskas)

Others

#7317 #7195 #7133 chore: Update dependencies

#7204 chore: Add agents.md - anti AI slop

#7146 chore: Add monthly workflow to build push Docker image

🆕 New Features

• #7109 feat: fluxer notification provider (Thanks @letruxux)
• #7096 feat: set process.title to uptime-kuma (Thanks @Hill-98)

🐞 Bug Fixes

• #7121 fix: isParentActive return type to boolean (Thanks @terisikk)
• #7110 fix(ui): fix fluxer input styling; make discord input hidden (Thanks @letruxux)
• #6915 fix: removal of uptime ratio and avg. response time from prometheus metrics (Thanks @tr4nt0r)
• #7101 fix: revert: remove @aws-sdk, @Azure packages

⬆️ Security Fixes

• GHSA-v832-4r73-wx5j - Another Server-side Template Injection (SSTI) in Notification Templates Allows Arbitrary File Read (fixed in upstream dependency LiquidJS, also see: GHSA-wmfp-5q7x-987x)

🦎 Translation Contributions

• #7119 #7099 chore: Translations Update from Weblate (Thanks @aindriu80 @Aluisio @cyril59310 @dodog @fabianovich @krmu @letruxux @maxisimonazzi @MrEddX)

Others

• #7120 #7100 chore: Update dependencies

🆕 New Features

• #7088 feat(proxy): allow socks proxy for the notifications (Thanks @ASLanin)
• #7046 feat: add whatsApp (360messenger) notification provider (Thanks @WaMessenger)
• #6989 feat: allow templating in the Signal notificaiton provider (Thanks @karthikeya-333)

💇‍♀️ Improvements

• #6979 refactor: improve SQLite multiple connections

🐞 Bug Fixes

• #7019 fix: Uptime Kuma is not able to start on older version of Node.js 20 (~20.17.0)
• #7076 fix(monitor-list): cannot display monitor name in full width
• #7069 fix(monitor-list): tag list do not update
• #7056 fix(globalping): retry creating the measurement on status 500 (Thanks @radulucut)
• #7055 fix(globalping): show error message when using multiple locations (Thanks @radulucut)
• #7048 fix: Fix domain validation not allowing for PTR DNS records (Thanks @sgdc3)
• #7045 fix: Remove forced DOWN status in group monitor (Thanks @MayMeow)
• #7043 fix: Setting Status Page Analytics Type to "None" fails with SQLite constraint violation
• #7011 fix(edit-monitor): several issues in edit page
• #7010 fix(edit-monitor): url validation is incorrect
• #6999 fix: show actual bind address in startup logs (Thanks @mixelburg)
• #6994 fix: preserve Domain Name Expiry Notification setting when editing monitor (Thanks @RohitDarekar816)
• #6984 fix: show certificate expiry on status page for TCP monitors (Thanks @mixelburg)

⬆️ Security Fixes

• GHSA-c7hf-c5p5-5g6h Missing Authorization Check on Ping Badge Endpoint Leaks Ping times of montors (Thanks @kuranikaran)

🦎 Translation Contributions

• #7072 #7007 chore: Translations Update from Weblate (Thanks @2000Arion @abcsnoob @aindriu80 @Aluisio @AnnAngela @AntonPalmqvist @BelenCaSa @cyril59310 @dodog @florian-berger @helakostain @ivanbratovic @kiznick @LovesAsuna @mariogarridopt @MrDariusz @MrEddX @robertcoroianu @Virenbar)

Others

• #7015 chore: follow up #7013
• #7013 chore: add PR description template check workflow
• #5179 feat: structured logging (JSON) (Thanks @SapphicCode)
• #7092 chore: update to 2.2.0
• #7071 #6991 chore: Update dependencies
• #7032 chore: remove @aws-sdk, @Azure packages
• #7077 chore: generate package-lock.json from scratch to ensure accuracy
• #7058 chore: improve changelog generator

🆕 New Features

#6952 feat: Notification provider Teltonika RUTxxx SMS gateway (Thanks @unixerius)

#6939 feat: add tags to teams notifications (Thanks @thelfensdrfer)

#6850 feat: add DNS support via Globalping (Thanks @radulucut)

💇‍♀️ Improvements

#6971 refactor: improve dynamic RDAP DNS data

🐞 Bug Fixes

#6933 fix: Clear 2.1.0 frontend PWA cache

#6978 fix: Add helptext about usage to expiry checkboxes

#6977 fix: handle undefined monitor name in PagerDuty notification summary (Thanks @mixelburg)

#6960 fix: typo in DNS monitor error message (specifiy → specify) (Thanks @redbasecap-buiss)

#6897 fix: clearing heartbeats on paused monitors leaves them paused (Thanks @bruce691)

🦎 Translation Contributions

#6945 chore: Translations Update from Weblate (Thanks @2000Arion @Aluisio @cyril59310 @DJEDIVER @dodog @florian-berger @hernikplays @Kf637 @MrEddX @thelfensdrfer @VeerGosai)

Others

#6969 chore: Add automated npm dependency update workflow

#6968 chore: Update dependencies

#6963 chore: Update pull request template with AI usage warning

#6951 chore: Update PR template with AI usage warning

#6948 fix: Restrict scheduled workflows to upstream repository

#6970 fix: npm dependency update GitHub workflow

Changelog

All beta changes are also included in this release.
Please go throught them too, in total this relase had 250 PRs merged.
https://github.com/louislam/uptime-kuma/releases/tag/2.1.0-beta.0
https://github.com/louislam/uptime-kuma/releases/tag/2.1.0-beta.1
https://github.com/louislam/uptime-kuma/releases/tag/2.1.0-beta.2
https://github.com/louislam/uptime-kuma/releases/tag/2.0.0-beta.3

🆕 New Features

• #6830 feat(notification): add Jira Service Management as a notification provider (Thanks @jankal)
• #6777 feat: add google sheets notification provider (Thanks @dharunashokkumar)

💇‍♀️ Improvements

• #6843 feat(discord): add custom message and format presets for notifications (Thanks @epifeny)
• #6804 feat(ntfy): add custom title and message templates for notifications (Thanks @epifeny)

🐞 Bug Fixes

• #6845 fix: certificate expiry (use Settings.set instead of Settings.setSetting) (Thanks @epifeny)
• #6841 fix: weblate conflict (Thanks @Aluisio @AnnAngela @cyril59310 @dodog @FunNikita @Kf637 @kurama @mafen @michi-onl @MrEddX @pmontp19)
• #6835 feat(slack): Add option to include monitor group name in notifications (Thanks @dovansy1998)
• #6822 fix: improve monitor list selection behavior (Thanks @frozenflux2)
• #6805 fix: RSS pubDate timezone issue with backend test (#6422) (Thanks @Aqudi)
• #6795 fix: monitor names hidden by tags (Thanks @bittoby)
• #6792 fix: expand/collapse all groups now works with nested groups (Thanks @kurama)
• #6791 Fix bot filtering in generate-changelog.mjs
• #6789 fix: Add input validation for monitor ID in badge endpoints (Thanks @Angel98518)
• #6783 fix: improve RADIUS client error handling and socket cleanup (Thanks @dive2tech)
• #6778 fix: MongoDB monitor JSON.parse error handling (Thanks @Angel98518)

⬆️ Security Fixes

🦎 Translation Contributions

• #6853 chore: Translations Update from Weblate (Thanks @2000Arion @Aluisio @AnnAngela @cyril59310 @dodog @jochemp264 @Kf637 @michi-onl @MrEddX)
• #6834 feat(i18n): Add Bavarian German language support
• #6817 Translations Update from Weblate (Thanks @Aluisio @AnnAngela @dodog @FunNikita @Kf637 @kurama @mafen @michi-onl @MrEddX @pmontp19)
• #6597 chore: Translations Update from Weblate (Thanks @101br03k @2000Arion @aindriu80 @Aluisio @AndyLCQ @AnnAngela @atriwidada @bkzspam @Buchtic @cyril59310 @dodog @Donglingfeng @hackerpro17s @IsayIsee @isfan14 @ivanbratovic @JavierLuna @JWeinelt @Kodashas @michi-onl @MrEddX @simonghpub @superpep @tony-chompoo @Virenbar)
• #6163 feat: add Globalping support (Thanks @radulucut)

Others

• #6877 chore: npm update
• #6875 chore: Update final release workflow
• #6849 feat: Adding monitor_id and heartbeat_id to HaloPSA (Thanks @Yasindu20)
• #6814 chore: Revert "feat: added monitoring for postgres query result"
• #6787 chore: update to 2.1.0-beta.3

Changelog

🆕 New Features

• #6777 feat: add Google Sheets notification provider (Thanks @dharunashokkumar @autofix-ci[bot])
• #6766 feat(ntfy): include tag values in ntfy tags array (Thanks @epifeny)
• #6762 feat(ntfy): add monitor metadata to notification messages for automation (Thanks @epifeny)
• #6758 feat(notification): add WeCom mentioned mobile list support (Thanks @ChenJBBB @autofix-ci[bot])
• #6753 feat: add screenshot delay option for Browser Engine monitor (Thanks @bitloi @autofix-ci[bot])
• #6743 feat(dashboard): add expand/collapse all groups button (Thanks @kurama)
• #6736 feat: added monitoring for Postgres query result (Thanks @daltonpearson)
• #6718 feat(maintenance): add quick duration buttons and pre-fill datetime fields (Thanks @kurama @autofix-ci[bot])
• #6717 feat(notification): Discord suppress notifications (Thanks @yashikota)
• #6670 feat: add path to socket for external MariaDB database (Thanks @UnwishingMoon @autofix-ci[bot])
• #6552 feat(snmp): add SNMPv3 noAuthNoPriv support with backend test (Thanks @querysmith-sys @autofix-ci[bot] @dipok-1)
• #6469 feat: implement incident history (Thanks @aluminyoom @autofix-ci[bot])

💇‍♀️ Improvements

• #6749 refactor: simplify filters components (Thanks @kurama @autofix-ci[bot])
• #6747 fix: clarify the help text that markdown is supported with a warning about HTML indentation (Thanks @iyawnnn)
• #6727 chore(deps): bump vue-i18n for smoother pluralization (Thanks @autofix-ci[bot] @kurama)
• #6724 chore(i18n): improve some of the punctuation related issues (Thanks @autofix-ci[bot])
• #6723 fix(domain-expiry): move logging out of checkSupport to separate logic to reduce to half the amount of domain expiry logs (Thanks @aviralgarg05 @autofix-ci[bot])

🐞 Bug Fixes

• #6778 fix: MongoDB monitor JSON. parse error handling (Thanks @Angel98518 @autofix-ci[bot])
• #6770 fix: add option to disable STARTTLS for SMTP servers without TLS support (Thanks @dharunashokkumar @autofix-ci[bot])
• #6769 fix(domain_expiry): include static RDAP DNS data with auto-updates instead of dynamically requesting it (Thanks @app/copilot-swe-agent)
• #6767 fix: JSON parse crashes in monitor model with safe parsing (Thanks @dharunashokkumar @autofix-ci[bot])
• #6757 fix: cancel multiple in-progress tests
• #6752 fix: handle multi-level public suffixes in RDAP lookup (Thanks @josephadamsdev)
• #6751 fix(ui): refreshing the page if pressing enter in the search, horizontal scrolling the monitor list on mobile/tablets and aligning items in the monitor list (Thanks @maybe-but-fly)
• #6711 fix: allow for private domains like example.local and others (Thanks @iotux @autofix-ci[bot])
• #6713 fix: final fix of beta workflow

⬆️ Security Fixes

(No items listed)

🦎 Translation Contributions

(No items listed)

Others

Other small changes, code refactoring and comment/doc updates in this repo:

• #6755 chore: fix typos in comments (Thanks @NAM-MAN)
• #6741 chore: add manual workflow for building Docker base images (Thanks @app/copilot-swe-agent)
• #6735 chore(ci): fix a missing --repo in the labeling automation
• #6732 chore: fix permissions for the draft labeling automation
• #6731 chore(deps): bump postcss-* dependencies
• #6730 fix: automate mark as draft
• #6729 chore: automate marking as draft on requesting changes
• #6725 chore(release): ignore autofix as an author in the changelog
• #6721 chore: update to 2.1.0-beta.2 (Thanks @app/github-actions @github-actions[bot])