Breaking Changes

This version updates the version field on generated Eggs to be PTDL_v2 due to formatting changes. This should be completely seamless for most installations as the Panel is able to convert between the two. Custom solutions using these eggs should be updated to account for the new format.

This release also changes API key behavior — "client" keys belonging to admin users can now be used to access the /api/application endpoints in their entirety. Existing "application" keys generated in the admin area should be considered deprecated, but will continue to work. Application keys will not work with the client API.

Fixed

• Schedules are no longer run when a server is suspended or marked as installing.
• The remote field when creating a database is no longer limited to an IP address and % wildcard — all expected MySQL remote host values are allowed.
• Allocations cannot be deleted from a server by a user if the server is configured with an allocation_limit set to 0.
• The Java Version modal no longer shows a dropdown and update option to users that do not have permission to make those changes.
• The Java Version modal now correctly returns only the images available to the server's selected Egg.
• Fixes leading and trailing spaces being removed from variable values on file manager endpoints, causing errors when trying to perform actions against certain files and folders.

Changed

• Forces HTTPS on URLs when the APP_URL value is set and includes https:// within the URL. This addresses proxy misconfiguration issues that would cause URLs to be generated incorrectly.
• Lowers the default timeout values for requests to Wings instances from 10 seconds to 5 seconds.
• Additional permissions (CREATE TEMPORARY TABLES, CREATE VIEW, SHOW VIEW, EVENT, and TRIGGER) are granted to users when creating new databases for servers.
• development: removed Laravel Debugbar in favor of Clockwork for debugging.
• The 2FA input field when logging in is now correctly identified as one-time-password to help browser autofill capabilities.
• Changed API authentication mechanisms to make use of Laravel Sanctum to significantly clean up our internal handling of sessions.
• API keys generated by the system now set a prefix to identify them as Pterodactyl API keys, and if they are client or application keys. This prefix looks like ptlc_ for client keys, and ptla_ for application keys. Existing API keys are unaffected by this change.

Added

• Added support for PHP 8.1 in addition to PHP 8.0 and 7.4.
• Adds more support for catching potential PID exhaustion errors in different games.
• It is now possible to create a new node on the Panel using an artisan command.
• A new cron cheatsheet has been added which appears when creating a schedule.
• Adds support for filtering the /api/application/nodes/:id/allocations endpoint using ?filter[server_id]=0 to only return allocations that are not currently assigned to a server on that node.
• Adds support for naming docker image values in an Egg to improve front-end display capabilities.
• Adds command to return the configuration for a specific node in both YAML and JSON format (php artisan p:node:configuration).
• Adds command to return a list of all nodes available on the Panel in both table and JSON format (php artisan p:node:list).
• Adds server network (inbound/outbound) usage graphs to the console screen.
• Adds support for configuring CORS on the API by setting the APP_CORS_ALLOWED_ORIGINS=example.com,dashboard.example.com environment variable. By default all instances are configured with this set to * which allows any origin.
• Adds proper activity logging for the following areas of the Panel: authentication, user account modifications, server modification. This is an initial test implementation before further roll-out in the software. Events are logged into the database but are not currently exposed in the UI — they will be displayed in a future update.

Removed

• Removes Google Analytics from the front end code.
• Removes multiple middleware that were previously used for configuring API access and controlling model fetching. This has all been replaced with Laravel Sanctum and standard Laravel API tooling. This should make codebase discovery significantly more simple.

Deprecated

• The use of Pterodactyl\Models\AuditLog is deprecated and all references to this model have been removed from the codebase. In the next major release this model and table will be fully dropped.

SHA256 Checksum

14481c084fdf53fde0c697ffb678029d4e77f34801f71cd9ca6c9e48b249a20f  panel.tar.gz