Uptime Kuma

Fixed an issue where the software was released with an incorrect version number.

Fixed a bug that broke non-docker installations in version 2.5.1.

Added several new notification providers including SMS Gateway, ClickUp, TurboSMTP, BearSMS, Pinglet, Milky, and openwa, alongside bug fixes for analytics and radius responses.

Version 2.5.0 introduces several new notification providers, an NTP monitor type, a rootless Docker tag, and various bug fixes and security updates.

New features: EgoSMS Uganda, RSS incidents, VKTeams bot; improvements: optional gamedig token, bearer token across monitors, WebSocket bearer, updated API keys docs; fixes: npm 11.16.0, NTLM HTTP 400, docker Let’s Encrypt note; security: admin/auth RCE vulnerability; translations updated; other: dev data dir handling, hidden log level normalization.

Bug fix: Reverted to a single SQLite connection by default (issue #7346).

Bug fix: add sqlite busy_timeout to prevent SQLITE_BUSY; updates include dependency updates and upgrade to 2.3.1; push image now uses a multi-arch Node base.

Breaking: remove sorting on status pages; Raspberry Pi flag UPTIME_KUMA_SQLITE_SINGLE_CONNECTION. New: websocket auth, custom message templates, Telnyx, VK, MAX, OracleDB, collapsible status groups. Improvements: help text, warning msg, HA 2024 service rename. Bug fixes and translations.

Adds fluxer notification provider and process.title uptime-kuma; fixes UI, metrics, and removals; addresses a moderate GHSA security issue; updates translations and dependencies.

New: socks proxy for notifications, WhatsApp provider, Signal templating; Improvements: SQLite multi-connection refactor; Fixes: startup on older Node, monitor name width, tag updates, edit-monitor issues, domain/PTR validation, startup logs, expiry display; Security: GHSA advisory; translations updated.

Bug fix: RDAP data is now actually cached (previously not cached as intended), ensuring reliable data retrieval.

New features: Teltonika SMS gateway notifications, tags for team notifications, and Globalping DNS support; improvements to dynamic RDAP DNS data; bug fixes (cache, expiry text, undefined monitor name, typo, paused heartbeats); translations updated; and workflow/dependency chore updates.

Improvements include customizable matrix notifications and a new Group Name column; fixes cover Gamedig SRV resolution, removal of vite-plugin-pwa, Discord timestamp, dashboard tag dropdown scrollbar, and RDAP-based domain expiry alerts; translations and maintenance updates also included.

Includes 2.1.0-beta changes; 250 PRs merged; adds Jira Service Management and Google Sheets notifications; improves Discord/ntfy templates; and fixes certificate expiry, weblate conflicts, monitor grouping, RSS timezone, and input validation, among others.

Bug fix: resolved false positive with Google Chrome during migration; updated supported versions and Docker tags in SECURITY.md.

Fixed a bug where the healthcheck could shut down Uptime Kuma during migrations.

Uptime Kuma v2 is a major release with new notification providers (Nextcloud Talk, Brevo, Evolution API), autofocus 2FA, Slovak language, proxy support for most providers, plus numerous bug fixes and security updates.

Bug fix: resolved browser monitor issue caused by Debian Buster EOL; Security: updated dependencies and patched SSTI in Notification Templates that could allow arbitrary file read.

Security fixes: updated dependencies and a patch for CVE-2024-56331 (LFI via improper URL handling in Real-Browser monitor; GHSA-2qgm-m29m-cj2h).

Fix crash in 1.23.14 for Alpine images and Node.js <=16; quick workaround is pinning cheerio to avoid Undici breaking changes (ref #5142).

Improvements: fix API Keys disabled message when auth is disabled; fix status page icon display after upload. Security: update dependencies.

Fixed localization matching edge-cases and TLS certificate retrieval through a proxy, plus a Prometheus update.

This release addresses i18n detection issues, advises 1.23.11 for proxies, improves mail subsystem help text, uses keylog TLS certs, fixes various bugs (auth, i18n, notifications, JSON parsing, TLS info FK), and updates dependencies (nodemailer/axios/dompurify).

Updates dependencies; fixes origin undefined in error handling and resolves the non-docker Tailscale monitor issue introduced in 1.23.8.

This release removes the need to reconfigure reverse proxies after the 1.23.9 patch, asks you to remove UPTIME_KUMA_WS_ORIGIN_CHECK=bypass for better protection (unless using 3rd‑party plugins/apps), and fixes the GHSA advisory patching oversight.

This release adds WS origin check control via UPTIME_KUMA_WS_ORIGIN_CHECK (cors-like/bypass), enforces same-origin WebSocket connections, fixes maintenance timezone input and default button types, adds accessibility improvement and ntfy priority helptext, and provides proxy guidance.

Changes include defaulting Retries to 0, accessibility improvements, Ubuntu /snap/bin/chromium support, a fix for Tailscale monitor freeze, and dependency bumps to gamedig 4.2 and apprise 1.6.

Improves timeout handling and error messages; fixes memory leak by closing the PostgreSQL connection; reverts heartbeat-based monitor restart; applies security fixes (XSS in GA field, TailScale ping, and login-required access); plus minor refactors.

Fixed a TLS issue affecting Node.js ≤16 (see #4044) and added guidance about IPv6 DNS resolver changes after upgrading the base image to Node.js 18.

Fixes paused monitors resuming unexpectedly; re-enable legacy TLS renegotiation by default; final fixes for Kafka migration script and timeout issues; plus various minor refactors and doc updates.

Release improves stability with auto-restart on heartbeat loss, updates Docker to Node.js 18, and fixes numerous monitor issues (cert checks, password chars, SSL string handling, timeouts, rounding, Kafka, Docker host validation).

This release logs out all sessions for security (may break unofficial tools needing re-generated tokens); fixes include notifications, status page cert badge, Kafka producer, x-forwarded-host, status page editor race, plus a security fix to revoke tokens by changing your password.

Bug fixes: corrected Tailscale monitor visibility for non-Docker users, paused monitors no longer restart after edits, avoided duplicate status page items when saving, fixed OAuth2 authentication, and restored missing HTTP options in the JSON query monitor.

Improvements include password manager support, better DNS message handling, hostname:port in Discord alerts, and optional nscd for Docker; bug fixes cover Safari filter, Docker docker.sock, EU Opsgenie region, and orphaned tags.

Uptime Kuma v1.23.x final minor release adds numerous new monitors and features, bulk actions, improved filtering, OAuth2, certificate expiry display, PushDeer/SMSC, and many bug fixes and security hardening before v2 development.

Improvements: stop update checks when disabled; Bug fix: correct auto theme on status pages for custom domains; Security: remove unreleased plugin code to fix vulnerabilities (GHSA advisories).

This release adds Monitor Group, badge generator, auto theme in status pages, ntfy token support, and tag display; fixes metrics parsing, invalid gRPC URL, and MySQL close; and improves notifications, UI/mobile, performance, and time zone handling.

Fixes: maintenance start times with timezone; addressing "Same as Server Timezone" save issue; dependencies updated (notably Socket.io/engine.io) to address security advisory; always back up Uptime Kuma before upgrading.

Back up before upgrading; maintenance is now cron-based with per-maintenance timezones/DST, supports cron+duration scheduling, removes Last 2nd/3rd/4th day-of-month options, makes Effective Date Range optional, and fixes TLS proxy issues and older bugs.

Maintenance feature is broken in 1.21.0/1.21.1. New: Opsgenie and Twilio Sms notifications. Fixes: MySQL crash, cloned push token, copy button, TLS expiry check, empty badge label, rounding. Improvements: refresh countdown, SSL passphrase, SQLite up to v3.41.1.

New: monitor cloning, API keys, MTLS, XML body, status-page markdown, add tag, monitor descriptions, PagerTree, Apprise 1.3.0, Windows portable; fixes: memory leak, startup maintenance throttle, IPv6, status-page errors; improvements: mobile alerts, 5XX DB errors, better notifications.

Upgrade notes: ensure sufficient disk space and back up services before upgrading; fixes include MongoDB driver memory leak and recompile of healthcheck.go missing in 1.20.0.

Requires checking disk space and backing up before upgrade; fixes include preventing DB deletion when disk space is low and preventing Postgres monitor crash if SQL query missing; adds Finnish translation and various code refactors.

Adds GameDig/Redis/MongoDB monitors, Tags Manager, Status Page Markdown and GA code, badges; env vars via .env; fixes Docker

Fixed ping monitor not working on Windows.

Release: adds Splunk notification and Help button; fixes maintenance count, ping, Postgres monitor errors, and PromoSMS long messages; expands MQTT protocols; security patch via upstream deps; upgrade recommended due to knex.js fix.

This release includes multiple fixes (Docker Monitor down handling, tag issue, Keep Monitor History Days validation), improvements (ping monitor across Linux distros, remove redundant Pushover title), and Docker Apprise 1.2.1.

Adds Hebrew translation and Zoho Cliq/Kook notifications, fixes MS SQL monitor interference, resolves gRPC response size errors, corrects Slack notification display, and prevents duplicate maintenance messages on the status page, plus general bug fixes and refactoring.

Fixes a UI issue that occurred after disconnecting a monitor, restoring proper layout and responsiveness.

Bug fixes: address HTTP Monitor issues from 1.19.0 and restore Docker monitor notification delivery (Discord supported), plus ongoing refactoring and updates.

Introduces gRPC/MySQL monitors, SOCKS5h, SMSEagle, Ntfy icons, configurable server timezone, server-based time logging, webhook header options, DNS cache toggle, SQLite 3.39.4, maintenance mode, and various fixes and language updates.

Fixes the misuse of JESec in 1.18.4 that broke status page features, including custom CSS.

Release 1.18.1 fixes the ntfy issue removing required username, adds Greek language support, and includes bug fixes, refactoring, language updates, and recognition for contributors.

Adds free.fr SMS notifications, fixes ntfy issues (update to 1.18.3), resolves multiple IPs in X-Forwarded-For, hides console window for Windows ping monitor, and adds a Europe demo server.

Fixes a Docker container monitor issue in version 1.18.1.

This release adds multiple notification integrations (GoAlert, SMSManager, ServerChan, Squadcast) and ntfy authentication, fixes Bark and Octopush, improves password-manager support, adds Cypress for E2E tests, and includes general bug fixes and refactoring.

Adds Docker/PostgreSQL/Radius monitors, resend on repeated downs, clickable status page links, trust X-Forwarded headers, Basque and pt-PT languages, AlertNow/Line Notify/Home Assistant notifications, DNS caching, hidden mobile footer, shorter SQLite timeout, enhanced Bark, Apprise 1.0, and status badge label.

Fix: Revert DNS record caching for HTTP(S) monitor (issue #1821).

Fixes: tags mis-displaying on status pages and push monitor heartbeat race condition; includes bug fixes, refactors, language updates, and code review improvements.

Adds badges API, optional Apprise title, PagerDuty, Thai language, DNS Monitor resolver port, fixes uptime calculation and chart reset, Aliyun SMS SignatureDoesNotMatch fix, and expanded Discord notification service addresses.

Bug fix: settings can now be saved in No Auth mode; feature: push URL supports status and message; Docker images updated: Apprise 0.9.8.3; Debian image updates cloudflared to 2022.4.1.

Release includes priority change: Arguments over Environment Variables, new MQTT monitor, backup restore fix, Status Page UI tweaks (CSS, footer, powered-by toggle), logout dropdown, improved logs, OneBot and PushDeer notifications, plus Apprise 0.9.8 and SQLite 3.38.

Fixed a nighttime crash in Uptime Kuma 1.14.0 (issue #1520).

Adds custom status-page domains, Cloudflare Tunnel reverse proxy, HTTP(S) monitor proxy settings, status page favicon, Ukrainian language; fixes prometheus metrics on delete, invalid page 404, Alerta and Mattermost issues, SQLite FULL synchronous mode.

Fixes setup issues for new non-Docker users, improving first-install experience (see issue #1460).

Adds multi-status pages, favicon countdown, and status page edit mode; updates Apprise to 0.9.7, adds Gorush/Alerta/Push notifications; UI dark-mode tweaks; Node.js updated to 16; bug fixes and general updates.

Fixes channel search issue (#1298), adds Čeština language, and updates axios to 0.26.0 to fix a vulnerability; see the update guide and thanks to contributors.

Update vulnerable dependencies, add BSD ping support for all types, fix issue #1024, and enable password manager filling; plus ongoing bug fixes, refactoring, language updates, and code reviews.

Fixed Google Chat notification issue and resolved the SMTP DKIM crash on the server.

Release adds Google Chat and WeCom notifications, SMTP DKIM settings, a new Slovenian language, fixes HTTP Basic Auth autofill, and improves handling for sites that only serve text/html.

Fixed a Safari compatibility issue.

This release redesigns Settings, adds SerwerSMS.pl and Stackfield notification providers, enables Basic Auth and 2FA removal, updates status page grouping, reduces JS bundle size, fixes Pushover and push-down alerts, patches npm vulnerabilities, and updates Docker Node.js 14.18.2 and Apprise 0.9.6.

Release 1.10.2 fixes the settings page not working when authentication is disabled.

Adds optional Monitor Tags display on the Status Page; fixes a bug where monitors could get stuck; and improves the monitor list with a tooltip on the uptime pill.

Fixed a high-severity 2FA vulnerability (bug #833); users enabling 2FA should upgrade to apply the fix.

Fixed issue #742; see the 1.9.0 release notes for full details.

This release adds custom HTTP methods/headers/body, auto-clear monitor data, Steam monitor type, SMTP subject, PM2 config; new Feishu/Aliyun/DingDing notifications; Norwegian language; bug fixes (uptime, FreeBSD hostname, PromoSMS); plus 2FA hardening.

Release adds Push monitor type, shows full cert chain, defaults to browser language, adds PromoSMS/Matrix/Legacy Octopush notifications, new Bulgarian/Hungarian/Farsi with RTL, slimmer Docker image, prebuilt dist, and fixes for hostname underscores, SMTP To Email, and iOS Google Authenticator QR.

Fixes for retries issue (#506) and installation problems for non-Docker users caused by vite.js 2.6.x.

Change status-page endpoint to /status; Docker fixes: ping rollback to root on Debian, dumb-init to avoid zombies, Node.js updated to 14.18.0; adds Bulgarian language; multiple bug fixes, refactors, and language updates.

Initial status page release plus major updates: 2FA with authenticator apps, tag-based search for monitors, retry interval, improved backup/restore, Teams notification, Portuguese language, PWA add-to-homescreen, non-root Docker, and SQLite 3.36.0.

Release adds backup/restore of monitors and notifications, performance boosts, default notifications, new languages, expanded SMTP options, UI/UX improvements, slim Debian-based Docker image with healthcheck fix, and a caution about Alpine tag.

Adds Danish, Dutch, Japanese, Korean, Russian, Serbian (Cyrillic/Latin), Simplified Chinese, Spanish, and Swedish language support; enables HTTPS via SSL_KEY/SSL_CERT env or --ssl-key/--ssl-cert; adds Debian Docker variant; note Alpine issues; translation guide available.

Reverts to node-sqlite3 from better-sqlite3 due to install troubles; follow the update guide in the linked wiki for upgrading.

Adds DNS monitor, new languages (Traditional Chinese, German, French), Mattermost/Rocket.Chat notifications, K8s template, frontend improvements, lower RAM, 10s ping timeout, ARM prebuilt install, npm install fix, and switch to better-sqlite3 with WAL.

Fixes a memory leak to improve stability and reduce resource usage.

Improved RAM usage and added a version/update check; follow the linked update guide to upgrade.

Adds more monitor styles, ping/DNS fixes, mobile optimizations, beginner-friendly install.sh, Line Messenger Notification Service, SMTP no-auth fix, page-change animation, and WAL SQLite mode; see the update guide for details.

Release adds Ping Graph, improved IPv6 support, and new Pushbullet and Octopush notifications; see the update guide and issue tracker for details.

This release adds dark mode, HTTP monitor improvements (accepted status codes and 3xx redirects), CLI password reset, push notifications, search engine indexing controls, configurable Discord bot name, Font Awesome icons, and security fixes.

Release adds TLS error ignore for HTTPS, Upside Down Mode, optional auth disable, LunaSea notifications, font-awesome icons, Prometheus /metrics, plus Dev: ESLint and simplified Apprise installation.

Adds HTTPS certificate info viewing and a new max retry limit before a service is marked down and a notification is sent.

Adds Pushover and Slack support; bundles Apprise in the docker container to enable 50+ notification services, with minor improvements.

Adds Slack Webhook support and other improvements.

Add Gotify support and fix the ARMv7 Docker issue that affected Raspberry Pi 3.

Fix missing timezone; breaking: switch to Discord webhook for notifications; add Signal notification via signal-cli-rest-api; bcrypt password hashing; reset auto-increment on new instances; show version in footer; SMTP no longer requires username/password.

Note: This release is broken; upgrade to version 1.0.3 for the fix.

Bug fixes based on community reports (#5, #10) and added option to set listening port and hostname for non-Docker server runs.