Changelog
Summary from the user’s perspective; changes to the shared core are in the CE changelog.
July 2026
Section titled “July 2026”2026-07-18 — Single sign-on
Section titled “2026-07-18 — Single sign-on”- SSO via OpenID Connect: Authorization Code with PKCE, matching by
email, optional auto-provisioning (
DNSE_SSO_AUTOPROVISION). Configured through four environment variables; incomplete = feature off. With SSO active, the login form additionally shows “Sign in with SSO”.
2026-07-13 — Security scan and zone restore
Section titled “2026-07-13 — Security scan and zone restore”- Records security scan (
GET /zones/{id}/security-scan): checks SPF (missing/multiple/lax), DMARC (missing/p=none), CAA, wildcards and single nameservers; findings with level and justification. - Time-travel restore (
POST /zones/{id}/restore): rolls a zone back as compensating events — the history remains complete, and the restore itself is reversible.
up to 2026-07-12 — Foundation
Section titled “up to 2026-07-12 — Foundation”- License check: Ed25519-signed license file, verifiable offline;
cmd/licensegenfor signing; startup refused without a valid license. - Audit history (
GET /zones/{id}/history) from the event-based core.