# Rackpad v1.8.3

This stable release brings the tested v1.8.3-beta.1 changes to main, prioritizing
the Storage regression affecting browsers without a usable `crypto.randomUUID`.
Docker remains the supported deployment on linux/amd64 and linux/arm64.

## Highlights

- Storage sections can be created, edited, saved and reloaded when the browser's
  UUID API is missing or throws, including Firefox over ordinary LAN HTTP.
- SNMPv3 key localization, AES privacy, authenticated responses and engine-time
  recovery are repaired, with Net-SNMP interoperability coverage.
- Rack Studio improves rear and mixed-face cables, patch-panel bindings,
  stacked-switch placement and undo/redo. Stacks retain member and port identity.
- Security and dependency updates from the beta series are included, alongside
  installer configuration/key preservation and refreshed documentation images.

## Upgrade and recovery

Pin `ghcr.io/kobii-git/rackpad:1.8.3` for this release. The `latest` tag follows
stable releases. Use a matching version of the Compose manifest.

Before upgrading, retain the previous application image, pre-upgrade database or
volume snapshot, configuration and original `RACKPAD_SECRET_KEY` together.

- Schema 50 encrypts legacy inline SNMP communities and requires the existing
  key; conversion aborts atomically when it cannot proceed. Preserve the key
  exactly. Rotate any communities previously exposed through responses/backups.
- OIDC sessions are revoked at the security migration. Configure a trusted admin
  mapping and local recovery access; verify roles after signing in again.
- Replace old `TRUST_PROXY` hop counts with the explicit IPs/CIDRs of controlled
  proxies. Traps are opt-in; reconfigure historical trap-source credential links.
- Schema 51 adds stacked-switch members. Migrations are forward-only. Rollback
  restores the entire previous application/database/configuration/key pair;
  never open the upgraded database with an older binary.

See the [installation guide](../../INSTALL.md#before-upgrading-to-183) and
[security upgrade notes](v1.8.2-beta.4-test-notes.md) for details.

## Release scope and remaining checks

The maintainer chose early stable promotion to address Storage on main. This
supersedes the beta notes' planned acceptance-and-soak prerequisite for this
Docker release; it does not claim that community acceptance or seven days of
soak have completed. Issues #138, #139, #146, #148, #152 and #153 remain open.

Native Proxmox LXC stays experimental pending real PVE guest and recovery tests.
Cisco IOS-XE testing in the reporter's network, reporter confirmation of the
remaining workflows, and normal SMTP delivery still need community evidence.

The beta passed hosted application/browser, Storage, Net-SNMP, screenshot,
shell/workflow and security gates. Follow-up checks passed 436 server/client
tests, 41 browser workflows, six schema-50 Storage upgrade cases and six Storage
cases against the published arm64 image. Stable publication runs the full
pipeline again; use its Actions results and published artifacts for the final
release status.

The existing narrow, source-bound SNMP USM CodeQL exception remains unchanged,
with its original owner and 2026-11-30 expiry. Fixable high/critical findings block
publication. Unfixed upstream OS advisories are reported separately; this is not
a claim of zero total vulnerabilities.