{"full_name":"portainer/portainer","owner":"portainer","name":"portainer","url":"https://github.com/portainer/portainer","description":"Making Docker and Kubernetes management easy.","homepage":"https://www.portainer.io","topics":[],"language":"TypeScript","license":"Zlib","avatar":"https://avatars.githubusercontent.com/u/22225832?v=4","created_at":"2016-05-19T20:15:28Z","pushed_at":"2026-11-09T23:56:40Z","metrics":{"stars":38806,"forks":2936,"watchers":465,"issues":6154,"prs":5626,"releases":195,"issues_open":null,"issues_closed":null,"prs_open":null,"prs_closed":null,"prs_merged":null,"discussions":1527},"growth":{"day":{"stars":9,"forks":2,"base_day":"2026-11-09"}},"history":{"dates":["2026-11-09","2026-11-10"],"stars":[38797,38806],"forks":[2934,2936],"watchers":[465,465],"issues_open":[null,null],"prs_open":[null,null]},"boards":{},"same_owner":[],"issues":[{"number":12925,"title":"Failed Loading Environment","comments":438,"created_at":"2025-11-11T01:40:41Z"},{"number":7725,"title":"Error when enabling GPU","comments":85,"created_at":"2022-09-23T10:32:10Z"},{"number":6701,"title":"`stack.env` does not work","comments":84,"created_at":"2022-03-28T12:59:38Z"},{"number":597,"title":"[Feature Request] A field to add options for docker run/create","comments":80,"created_at":"2017-02-13T14:18:03Z"},{"number":2341,"title":"Updating a service fails when the image is from a private registry","comments":67,"created_at":"2018-10-08T09:20:07Z"},{"number":8507,"title":"Portainer 2.17.0 Business Edition no longer able to recreate containers - Error 500","comments":63,"created_at":"2023-02-16T09:10:12Z"},{"number":1645,"title":"MAC address collisions","comments":63,"created_at":"2018-02-08T10:23:51Z"},{"number":5813,"title":"Can't update environment variable on Synology NAS DSM7","comments":58,"created_at":"2021-10-03T07:51:47Z"}],"discussions":[{"number":13341,"title":"Portainer 3.0.1 STS is now available!","comments":0,"category":"Announcements","created_at":"2026-10-29T00:20:20Z"},{"number":13333,"title":"Need to be able to use Portainer's stack label in compose file for container name","comments":0,"category":"Ideas","created_at":"2026-10-24T13:14:32Z"},{"number":13331,"title":"allow creating new volumes during container setup","comments":0,"category":"Ideas","created_at":"2026-10-24T09:23:02Z"},{"number":13330,"title":"Trim user input","comments":0,"category":"Ideas","created_at":"2026-10-24T09:08:42Z"},{"number":13328,"title":"Add OCI version label to published Docker images","comments":0,"category":"Ideas","created_at":"2026-10-24T05:16:53Z"},{"number":13326,"title":"A native Go --healthcheck flag proposal (solves the scratch image curl issue), adds to \"Discussion #9597\"","comments":1,"category":"Ideas","created_at":"2026-10-23T11:20:57Z"},{"number":13323,"title":"Support direct SSO login in Community edition","comments":0,"category":"Ideas","created_at":"2026-10-16T22:17:43Z"},{"number":13321,"title":"Improve 'Notifications' message for stack deployment","comments":0,"category":"Ideas","created_at":"2026-10-15T05:48:42Z"}],"latest_release":{"name":"Release 2.45.3 LTS","tag":"2.45.3","published_at":"2026-10-21T23:20:29Z","body":"## Known issues\r\n\r\n- On Async Edge environments, an invalid update schedule date can be displayed when browsing a snapshot\r\n\r\n### Known issues with Podman support\r\n\r\n- Podman environments aren't supported by auto-onboarding script\r\n- It's not possible to add Podman environments via socket, when running a Portainer server on Docker (and vice versa)\r\n- Support for only CentOS 9, Podman 5 rootful\r\n\r\n## Changes\r\n\r\n### Breaking changes\r\n\r\n- Portainer no longer trusts TLS certificates issued by eMudhra (emSign), following the compromise of eight eMudhra intermediate CAs (CVE-2026-111943). Connections to services that present an affected certificate, including OAuth/OIDC and LDAPS providers, registries and Git hosts, will fail after the upgrade. If your single sign-on or LDAP provider is affected, only the initial admin will be able to sign in. Check your services before upgrading. [See this FAQ for details.](https://hubs.li/Q04B-qY30)\r\n\r\n### Security improvements\r\n\r\n- Rejected Compose and Swarm stacks using `volumes_from` when non-administrators create, update, start or redeploy them with `Hide bind mounts for non-administrators` enabled, which let them inherit another container's host bind mounts\r\n- Updated the Go toolchain to 1.26.10, fixing CVE-2026-56857 and CVE-2026-78663 (both Critical), along with CVE-2026-111943, CVE-2026-97032, CVE-2026-97031, CVE-2026-94440, CVE-2026-94439, CVE-2026-78669, CVE-2026-78667, CVE-2026-78660, CVE-2026-78659, CVE-2026-56866, CVE-2026-94448 and CVE-2026-97030\r\n- Removed the eMudhra emSign root certificates from the CA bundle in Linux images, and rejected certificate chains that contain the compromised eMudhra intermediates (CVE-2026-111943). [See this FAQ for details.](https://hubs.li/Q04B-qY30)\r\n- Updated [golang.org/x/net](http://golang.org/x/net) to 0.60.0, fixing CVE-2026-78663 (Critical), CVE-2026-97032, CVE-2026-78669, CVE-2026-78660 and CVE-2026-78659 (all High)\r\n- Updated helm in the kubectl shell image to v4.3.1, taking its Go toolchain to 1.27.2 and oras.land/oras-go/v2 to 2.6.2, fixing CVE-2026-39821 (Critical) and CVE-2026-50163 (High)\r\n- Restricted kubeconfig tokens to the /api/endpoints/{id}/kubernetes proxy, so they are rejected with a 403 on every other API route, including admin-only routes and the Docker proxy. Kubeconfigs downloaded after upgrading carry a separate token per environment, limited to that environment \r\n\r\n### Bug fixes\r\n\r\n- Fixed starting a container with an empty request body failing with a 400 error on Docker standalone and Swarm agent environments \r\n- Fixed GitOps sources starting a new poll while the previous one was still running, which could pile up overlapping redeploys on slow repositories. A poll that is still running now causes the next scheduled poll to be skipped\r\n- Fixed GitOps workflows showing the Git reference and file path status as unknown after a stack was manually redeployed from Git. A manual redeploy now records these statuses for the stack's workflow artifact\r\n- Fixed the YAML tab on the Kubernetes node details page going blank after switching tabs or refocusing the browser, and restored the missing gap between the tab content and the Applications table\r\n- Fixed DockerHub pull rate limits and agent version detection failing on Docker engines newer than API 1.47, and, in BE, non-admin users with environment access getting 403 errors on `/agent/docker` and `/agent/host` routes, which left Swarm node selectors empty\r\n- Fixed the search box on the Authentication logs page not filtering events by username\r\n\r\n## Deprecated and removed features\r\n\r\nNone.\r\n"},"readme":true,"readme_zh":false,"news":[],"stale":false,"snapshot_at":"2026-11-10T09:35:25Z","history_start":"2026-09-06"}