Administrator/Xen-Orchestra-xen-orchestra-MIRROR
1
0
Fork 1
mirror of https://github.com/vatesfr/xen-orchestra.git synced 2026-09-10 22:14:48 -05:00
Code Issues Packages Projects Releases Wiki Activity
Files
c39b9e8760a7cecdfeeff24e46ac7406ebfc92cc
Xen-Orchestra-xen-orchestra…/CHANGELOG.md
Pierre Brunet c39b9e8760 feat: release 6.5.1 (#9931)
2026-06-01 13:37:33 +02:00

51 KiB
Raw Blame History

ChangeLog

6.5.1 (2026-06-01)

Bug fixes

  • [Backup] fix transfer size only counting the last disk transferred (PR #9900)
  • [Backup] fix backup cleanup removing too many files when listing fails (PR #9925)

Released packages

  • @xen-orchestra/backup-archive 1.0.1
  • @xen-orchestra/backups 0.73.2
  • @xen-orchestra/proxy 0.30.3
  • @xen-orchestra/vmware-explorer 0.13.1
  • @xen-orchestra/xva 1.0.3
  • xo-server 5.202.2

6.5.0 (2026-05-28)

Channel: latest

Security

  • [XO 5] Update sanitize-html dependency (Dependabot alert 484) (PR #9851)
  • [MCP] Global kill-switch: set [mcp] enabled = false in xo-server config to immediately reject every MCP client connection (PR #9860)

Enhancements

  • [xo-server] support qcow2 format in disk.importContent and disk.import jsonRPC api (PR #9817)

  • [web-core] Update UiTag and parse tag for detecting tags with = (PR #9811)

  • [Encryption] Implement encryption and decryption feature for redis (PR #9735)

  • [xo-server-ipmi-sensors] Migrated the old ipmi feature to a new plugin and added user defined sensors (PR #9724)

  • [MCP] Read HTTP_PROXY/HTTPS_PROXY/NO_PROXY so an internal XOA stays reachable when the AI assistant goes through a corporate proxy (PR #9820)

  • [MCP] Restrict which REST endpoints the AI assistant can reach: read-only endpoints are exposed by default, write actions require XO_MCP_ENABLE_ACTIONS=1 with a confirmation step, and binary/stream endpoints stay hidden (PR #9875)

  • [REST API] Expose DELETE /rest/v0/srs/:id (PR #9464)

  • [REST API] Add vms/:id/actions/revert_snapshot REST route (PR #9788)

  • [REST API] Add PATCH /vms/{id} to partially update a VM (PR #9835)

  • [Swagger] Rename the acls tag to rbacs (PR #9874)

  • [OpenMetrics] Add XOSTOR metrics (cluster status, replica health, SMART, alarms, pending updates) and an sr_type label on SR-tagged metrics so Grafana can filter by storage type (PR #9849)

  • [VM/Snapshot] Add possibility to revert a snapshot on a VM (PR #9862)

  • [VM] Add possibility to attach a VDI on tab VDI (PR #9772)

  • [VM] Add possibility to create a VDI on tab VDI (PR #9848)

  • [Pool/Security] Implement possibility to add new traffic rule from pool (PR #9809)

  • [VIF] Implement possibility to add new traffic rule from VIF (PR #9837)

  • [VIF] Add a new "General" tab to the VIF page (PR #9831)

  • [i18n] Update Chinese (Simplified Han script), Czech, Dutch, German, Korean, Slovak, Spanish and Swedish translations (PR #9780)

  • Backups:

    • [Backups] Refactor clean phase for incremental and full backups (#9765)
    • [Backups] bidirectional replication, reuse snapshot when possible (PR #9806)
    • [Backups/fs] Add UserAgent in s3 client (PR #9815)

  • RBAC check for REST API endpoints:

    • /hosts/:id/actions/disable (PR #9840)
    • /hosts/:id/actions/enable (PR #9840)
    • /hosts/:id/actions/management_reconfigure (PR #9840)
    • Added VMS_ADMINISTRATOR role template (PR #9845)

  • XO 5:

    • [Export config] Hide passphrase by default (PR #9824)
    • [xo-web] support qcow2 format in disk > import (PR #9817)

  • [XO config] Rename exported XO config file from config.json to XO-config_<date>.json (PR #9859)

Bug fixes

  • [REST API] Fixed ignored parameters in request body due to a tsoa bug (see https://github.com/lukeautry/tsoa/pull/1858) (PR #9793)
  • [REST API] POST /vdis no longer necessarily requires other_config (PR #9883)
  • [Tasks] Fixed issue with task without result and backup runs on task size (PR #9841)
  • [Backup] Fix OUT_OF_RANGE error when resuming failed merge (PR #9782)
  • [xo-server] Fix network being put first in boot order when HVM template has VDIs (PR #9867)
  • [xo-server] Fix TLS memory leak (PR #9842)
  • XO 5:
    • [Job] Error while using vm.set with cpuMask in job view (PR #9823)
    • [Dashboard/Health] Ignore the replicated VM when checking the number of snapshots (PR #9868)

Released packages

  • @xen-orchestra/fs 4.9.0
  • @xen-orchestra/disk-transform 1.3.0
  • @xen-orchestra/backup-archive 1.0.0
  • @xen-orchestra/xapi 8.8.0
  • @xen-orchestra/backups 0.73.1
  • @xen-orchestra/backups-cli 1.1.13
  • @xen-orchestra/disk-cli 2.1.1
  • @xen-orchestra/immutable-backups 3.0.3
  • @xen-orchestra/proxy 0.30.2
  • xo-server-ipmi-sensors 2.0.0
  • @xen-orchestra/mcp 1.4.0
  • @xen-orchestra/qa-test 1.0.1
  • xo-server-openmetrics 1.6.0
  • xo-web 5.197.1
  • @vates/http-server-plus 2.0.2
  • @vates/types 1.26.0
  • @xen-orchestra/acl 1.2.0
  • @xen-orchestra/web-core 0.54.0
  • @xen-orchestra/rest-api 0.33.0
  • @xen-orchestra/web 0.53.0
  • xo-server 5.202.1

6.4.1 (2026-05-05)

Channel: stable

Enhancements

Bug fixes

  • [immutable backups] Fix error while locking vhd files (PR #9767)
  • [REST API] Fix REST API not available for clients with plan < Enterprise (PR #9798)

Released packages

  • @xen-orchestra/immutable-backups 3.0.1
  • @xen-orchestra/web-core 0.52.0
  • @xen-orchestra/rest-api 0.30.1
  • @xen-orchestra/web 0.50.0
  • xo-server 5.200.1
  • xo-server-sdn-controller 1.3.2

6.4.0 (2026-04-29)

Security

  • [@vates/node-vsphere-soap] Update axios, follow-redirects (transitive) (PR #9640)
  • [@xen-orchestra/backups] Update tar (PR #9640)
  • [@xen-orchestra/fs] Update fast-xml-parser (transitive) (PR #9640)
  • [@xen-orchestra/lite] Update lodash-es, vite, rollup (transitive), postcss (transitive) (PR #9640)
  • [@xen-orchestra/mcp] Update hono (transitive), @hono/node-server (transitive), express-rate-limit (transitive) (PR #9640)
  • [@xen-orchestra/mixins] Update node-forge (transitive) (PR #9640)
  • [@xen-orchestra/proxy] Update koa (PR #9640)
  • [@xen-orchestra/rest-api] Update @hapi/content (transitive), path-to-regexp (transitive) (PR #9640)
  • [@xen-orchestra/vmware-explorer] Update undici (PR #9640)
  • [@xen-orchestra/web] Update lodash-es, vite (PR #9640)
  • [@xen-orchestra/web-core] Update lodash-es (PR #9640)
  • [Packages] Update lodash, picomatch (transitive), minimatch (transitive), ajv (transitive), bn.js (transitive) (PR #9640)
  • [xen-api] Update undici, basic-ftp (transitive) (PR #9640)
  • [xo-server] Update fast-xml-parser, pug (PR #9640)
  • [xo-server-auth-saml] Update @xmldom/xmldom (transitive) (PR #9640)
  • [xo-web] Update immutable, pug (transitive), postcss (transitive) (PR #9640)

Enhancements

  • [Backups] Backups no longer use their own task system, but instead use the same system as XO Task. This will help improve loading times in the future (PR #9734)
  • [Backups] Add merged size in cleanVm task log (PR #9679)
  • [OpenMetrics] Add per-VDI disk size metrics: xcp_vdi_virtual_size_bytes and xcp_vdi_physical_usage_bytes (PR #9680)
  • [OpenMetrics] Add 9 missing host RRD metrics: hostload, memory_reclaimed, memory_reclaimed_max, running_vcpus, pif_aggr_rx, pif_aggr_tx, iops_total, io_throughput_total, latency per SR (PR #9696)
  • [OpenMetrics] Add VM status (xcp_vm_status) and VM uptime (xcp_vm_uptime_seconds) metrics #9684
  • [OpenMetrics] Add per-VDI disk size metrics: xcp_vdi_virtual_size_bytes and xcp_vdi_physical_usage_bytes #9680
  • [i18n] Update Chinese (Simplified Han script), Czech, Danish, Dutch, Finnish, German, Italian, Korean, Norwegian, Persian, Polish, Portuguese, Portuguese (Brasil), Russian, Slovak, Spanish and Swedish translations (PRs #9649 and #9729)
  • [Netbox] Use platform hierarchy to assign versioned OS names (e.g. "Debian 12" instead of "Debian") when the major version is known (requires Netbox >= 4.4) #7773 (PR #9644)
  • [REST API] Fix the href property in collection responses when the request URL has a trailing slash. (PR #9741)
  • [REST API] Expose POST /vifs/:id/actions/connect and POST /vifs/:id/actions/disconnect (PR #9643)
  • [REST API] ACL V2 integration (PR #9774)
  • [REST API] Add POST rest/v0/plugins/sdn-controller/networks/:id/actions/add_traffic_rule and POST rest/v0/plugins/sdn-controller/networks/:id/actions/delete_traffic_rule endpoints (#9418)
  • [REST API] Add POST rest/v0/plugins/sdn-controller/vifs/:id/actions/add_traffic_rule and POST rest/v0/plugins/sdn-controller/vifs/:id/actions/delete_traffic_rule endpoints (#9759)
  • [VM] Add possibility to remove a VIF on network tab (PR #9601)
  • [VM] Add possibility to remove a VDI on VDI tab (PR #9689)
  • [VM] Add possibility to remove a VBD on VDI tab (PR #9698)
  • [VM] Add possibility to remove a snapshot on snapshot tab (PR #9749)
  • [VM] Add possibility to connect or disconnect a VIF on network tab (PR #9756)
  • [VM] Add possibility to connect or disconnect a VBD on VDI tab (PR #9726)
  • [VM/new] Removed new VM form alert (PR #9757)
  • [VDI] Add chainPhysicalUsage to have a proper usage linked to the complete chain (PR #9708)
  • [Pool] Add new Network creation forms (normal, Bonded and Internal) (PR #9629)
  • [Pool/Hosts] Management IP is now always shown first and the IP column is renamed to "Management IP" (PR #9747)
  • [Pool/Security] Implement security tab to display traffic rules from VIF and Network (PR #9770)
  • [MCP] Add ?markdown=true output format to REST API and simplify MCP tools with declarative registry (PR #9624)
  • [MCP] Add ?markdown=true output format to REST API and simplify MCP tools with declarative registry (PR #9624)
  • [MCP] Generate tools dynamically from the XO OpenAPI spec at startup: one {domain}_query tool per resource domain instead of a fixed tool per endpoint. Stats endpoints are excluded. Write operations can be opted in with XO_MCP_ENABLE_ACTIONS=1, with one-shot confirmation tokens for destructive calls. (PR #9641)
  • [Pool/Network] Add Network deletion (PR #9714)
  • [DNS] add Let's Encrypt DNS-01 challenge support (PR #9592)
  • XO 5:
    • [Settings/Servers] Add info tip to remind users to only add pool masters (PR #9742)

Bug fixes

  • [Header] Fix Unable to connect to XO server falshing every 30 secondes (PR #9681)
  • [Backups] Fix regression on cleanVM speed (PR #9692)
  • [Backups] Fix cleanVm incorrect backup size in metadata (PR [#9637] (https://github.com/vatesfr/xen-orchestra/pull/9637))
  • [Backups] Fix diskless snapshot retention (PR #9758)
  • [xo-server] Fix memory leak with secure session (PR #9725)
  • [xo-server] Fix VM-template still visible after deletion (PR #9760)
  • [REST API] Fix memory leak on SSE (PR #9707)
  • [REST API] Fix other_config being ignored when creating a new VDI with POST /rest/v0/vdis (PR #9695)
  • [VM/Host Console] Fix periodic VNC reconnection causing keyboard focus loss (PR #9727)
  • XO 5:
    • [VM/Copy]: Fix compression not used when copying a VM to another pool (PR #9699)
    • [Icons] Fix display of RHEL 10 icons in vm list (PR #9766)
    • [xo-server-sdn-controller] Better traffic-rules synchronization related to VM lifecycle (PR #9518)

Released packages

  • @vates/async-each 1.0.3
  • @xen-orchestra/async-map 0.1.3
  • @xen-orchestra/log 0.7.2
  • xo-remote-parser 0.10.1
  • @xen-orchestra/fs 4.8.0
  • @vates/generator-toolbox 1.1.2
  • @xen-orchestra/disk-transform 1.2.3
  • vhd-lib 4.16.0
  • @vates/http-server-plus 2.0.0
  • xo-collection 0.6.1
  • xo-common 0.9.1
  • xen-api 4.7.7
  • @vates/nbd-client 3.4.0
  • @vates/node-vsphere-soap 2.1.3
  • @vates/task 0.7.0
  • @xen-orchestra/qcow2 1.3.0
  • @xen-orchestra/template 0.1.1
  • @xen-orchestra/xapi 8.7.2
  • @xen-orchestra/backups-cli 1.1.11
  • @xen-orchestra/cron 1.0.7
  • @xen-orchestra/disk-cli 2.0.0
  • @xen-orchestra/immutable-backups 3.0.0
  • complex-matcher 1.1.1
  • @xen-orchestra/mcp 1.2.0
  • @xen-orchestra/mixin 0.2.1
  • xo-lib 0.11.2
  • xo-vmdk-to-vhd 2.5.10
  • @xen-orchestra/upload-ova 0.1.7
  • @xen-orchestra/vmware-explorer 0.13.0
  • vhd-cli 1.1.2
  • xapi-explore-sr 0.4.6
  • xo-cli 0.32.3
  • xo-server-backup-reports 1.7.1
  • xo-server-load-balancer 0.12.1
  • xo-server-netbox 1.12.0
  • xo-server-openmetrics 1.5.0
  • xo-server-usage-report 0.11.1
  • xo-web 5.196.0
  • @vates/types 1.24.0
  • @xen-orchestra/acl 1.0.0
  • @xen-orchestra/backups 0.72.1
  • @xen-orchestra/web-core 0.51.0
  • @xen-orchestra/mixins 0.20.0
  • @xen-orchestra/proxy 0.30.1
  • @xen-orchestra/rest-api 0.30.0
  • xo-server 5.200.0
  • @xen-orchestra/web 0.49.0
  • xo-server-sdn-controller 1.3.1

6.3.3 (2026-04-14)

Bug fixes

  • [Header]: Fix Unable to connect to XO server falshing every 30 secondes (PR #9681)
  • [Backups]: Fix regression on cleanVM speed (PR #9692)
  • [Backups]: Fix merge resume when child is disk chain (PR #9668)
  • [Incremental Replication]: Fix "Storage_error ([S(Illegal_transition);S(Activated);S(RO)];[S(Activated);S(RW)])" Forum#12059 (PR #9702)
  • [Replication]: Distributed replication toggle not enabled when targetting 2 SRs (PR #9715)

Released packages

  • @xen-orchestra/xapi 8.7.1
  • @xen-orchestra/backups 0.71.3
  • @xen-orchestra/immutable-backups 2.0.2
  • @xen-orchestra/proxy 0.29.57
  • xo-server 5.198.5

6.3.2 (2026-04-03)

Bug fixes

  • [Mirror Backup] Fix Cannot read properties of undefined (reading 'id') Forum#12043 (PR #9667)
  • [Incremental Replication] Fix VTPM_MAX_AMOUNT_REACHED Forum#12047 (PR #9671)

Released packages

  • @xen-orchestra/backups 0.71.2
  • @xen-orchestra/proxy 0.29.56
  • xo-server 5.198.4

6.3.1 (2026-04-01)

Bug fixes

  • [Dashboard] Fix infinite loader on dashboards (PR #9660)
  • [REST API] Fix no such VDI ... error when trying to fetch /vms/:id/vdis and /vms/:id/dashboard (PR #9662)
  • [Replication] fix the fall back to full when going 6.2.->6.3 (PR #9660)

Released packages

  • @xen-orchestra/backups 0.71.1
  • @xen-orchestra/web-core 0.48.2
  • @xen-orchestra/proxy 0.29.55
  • @xen-orchestra/rest-api 0.28.2
  • @xen-orchestra/web 0.46.2
  • xo-server 5.198.3

6.3.0 (2026-03-31)

Highlights

  • [i18n] Add Portuguese and Slovak and update Chinese (Simplified Han script), Czech, Dutch, German, Italian, Norwegian, Persian, Portuguese (Brasil), Russian, Spanish, Swedish and Ukrainian translations (PR #9554)
  • [REST API] Expose POST /rest/v0/pools/:id/actions/create_bonded_network and POST /rest/v0/pools/:id/actions/create_internal_network (PR #9611)
  • [REST API] Added nbd param in network creation endpoints (PR #9611)
  • [Backup] New xo-disk-cli command-line tool to inspect and export disks from backup repositories (info, list, transform commands) (PR #9551)
  • [VM] Add backup replication card on dashboard (PR #9545)
  • [Treeview/Layout] Add Loader and "please wait" page on the first connection xo-server (PR #9568)
  • [VM/Snapshot] Add VM snapshot tab page (PR #9521)
  • [SR] New "Preferred image format" field on SR creation forms (NFS, SMB, HBA, iSCSI, LVM, EXT) to control the disk format used by the SR (PR #9596)
  • [OpenMetrics] Add missing VBD throughput, VBD average latency, and DCMI power consumption metrics (PR #9563)
  • Fixed a performance issue causing browsers to freeze/crash (PR #9627)
  • [MCP] Add list_srs and get_sr_details tools to query storage repositories (PR #9599)
  • [MCP] Add list_networks and get_network_details tools to query network resources (PR #9595)

Enhancements

  • [V2V] Make import cancellable (PR #9552)
  • [MCP] Support token authentication via XO_TOKEN environment variable as an alternative to username/password (PR #9577)
  • [MCP] Add list_vdis tool to list virtual disks (PR #9559)
  • [Replication] Reuse the same VM as an incremental replication target (PR #9524)
  • [S3] add configuration for max/minPartSize and maxPartNumber in the API (PR #9561)
  • [REST API] Expose /rest/v0/vms/:id/actions/clone (PR #9453)
  • [REST API] Expose POST /rest/v0/srs/:id/actions/forget (PR #9505)
  • [REST API] Add POST /hosts/{id}/actions/disable and POST /hosts/{id}/actions/enable endpoints (PR #9532)
  • [Backup] Fix incremental replication always doing a full when source and target are in the same pool (PR #9612)
  • [MCP] Refactor into modular file structure for better extensibility (PR #9621)
  • [QA Test] Add end-to-end QA test suite @xen-orchestra/qa-test for VM, backup and export testing (PR #9626)
  • [Treeview/Pool/Host] Add button to download bugtools (PR #9419)
  • [Incremental Replication] show the schedule used and data volume read on each snapshot (PR #9635)

Bug fixes

  • [Backup] Reduce backup memory consumption (PR #9557)
  • [VM/New] VCPU was ignored Forum#11954 (PR #9591)
  • [Backups/Runs] Fix transfer size calculation (PR #9496)
  • [S3] Check provider compatibility before using batch deletion (PR #9598)
  • [REST API] Exclude ISO SRs from the /dashboard endpoint in the resourcesOverview.srSize and storageRepositories.size.* properties (PR #9608)
  • [VM] Fixed duplicated ip addresses in the network tab Forum#101359 (PR #9547)
  • [VM/New] Fix template that was resetting (PR #9603)
  • [Restore] correctly compute the restored size of incremental backups (PR #9632)
  • [XO5/XO6/Stats] Return null instead of 0 when no stats available (PR #9634)
  • [i18n] Fix English grammar issues on Site Dashboard, contribution by @DustyArmstrong (PR #9647)
  • [Incremental Replication] fix the disk target and cleanup to ensure replications and backups can be chained (PR #9635)
  • [REST-API/VM/Dashboard] Fix cannot read properties of undefined, (reading vms) Forum#12031 (PR #9650)
  • [Backups] Fix double close when merging disks (PR #9636)

Released packages

  • @vates/async-each 1.0.2
  • @xen-orchestra/fs 4.7.0
  • @vates/generator-toolbox 1.1.1
  • @xen-orchestra/disk-transform 1.2.2
  • vhd-lib 4.15.0
  • @vates/nbd-client 3.3.0
  • @vates/types 1.22.0
  • @xen-orchestra/qcow2 1.2.0
  • @xen-orchestra/mcp 1.1.0
  • @xen-orchestra/vmware-explorer 0.12.0
  • xo-server-openmetrics 1.4.0
  • xo-web 5.195.0
  • @xen-orchestra/xapi 8.7.0
  • @xen-orchestra/backups 0.71.0
  • @xen-orchestra/backups-cli 1.1.10
  • @xen-orchestra/disk-cli 1.0.1
  • @xen-orchestra/immutable-backups 2.0.1
  • @xen-orchestra/proxy 0.29.54
  • @xen-orchestra/rest-api 0.28.1
  • xo-server 5.198.2
  • xo-server-netbox 1.11.1
  • @xen-orchestra/web-core 0.48.1
  • @xen-orchestra/web 0.46.1

6.2.3 (2026-04-20)

Bug fixes

  • [Backups]: Fix regression on cleanVM speed (PR #9692)

Released packages

  • @xen-orchestra/backups 0.69.5
  • @xen-orchestra/proxy 0.29.52
  • xo-server 5.197.6

6.2.2 (2026-03-09)

Enhancements

  • [VM/New] Added secureBoot support (PR #9423)
  • [i18n] Update Czech and Danish translations (PR #9531)
  • [openmetrics] add XO process metrics (PR #9535)
  • [VM] Add backup runs and backup archives cards on dashboard (PR #9303)
  • [Backups] Fix out of range error on merge (PR #9567)

Bug fixes

  • [Dashboard] Fix reactivity of dashboard (PR #9378)

  • [OpenMetrics] Fix latency metrics (xcp_host_disk_read_latency_seconds, xcp_host_disk_write_latency_seconds, xcp_vm_disk_read_latency_seconds, xcp_vm_disk_write_latency_seconds) reporting milliseconds instead of seconds (PR #9550)

  • [Backup] snapshots of VM with a CDROM mounted are not removed (PR #9570)

  • [OpenMetrics] Fix plugin failing to auto-start after xo-server restart due to XOA WebSocket connection race condition (PR #9402)

  • XO 5:

    • [Self Service] Fix RAM usage not being properly updated in some cases. Please use "Recompute all limits" in the Self Service dashboard to fix any incorrect quota values introduced by this bug. (PR #9566)
    • If a hostname was defined in a configuration file, /v5 were not accessible #9500 (PR #9572)

Released packages

  • @xen-orchestra/web-core 0.46.0
  • @xen-orchestra/web 0.44.0
  • xo-server-openmetrics 1.3.0
  • @xen-orchestra/backups 0.69.4
  • @xen-orchestra/proxy 0.29.51
  • xo-server 5.197.5

6.2.1 (2026-02-27)

Bug fixes

  • [backups] Fix race condition on merge (PR #9542)

Released packages

  • @xen-orchestra/backups 0.69.2
  • @xen-orchestra/proxy 0.29.49
  • xo-server 5.197.3

6.2.0 (2026-02-26)

Highlights

  • [OpenMetrics] Add is_control_domain label to VM metrics to differentiate dom0 VMs from regular VMs (PR #9474)

  • [OpenMetrics] Add xcp_host_status metric exposing host status (running/maintenance/halted/unknown) for all hosts, including non-running ones (PR #9457)

  • [OpenMetrics] Add host uptime metric (xcp_host_uptime_seconds) (PR #9449)

  • [Plugins/load balancer] Add configurable VM migration cooldown to prevent oscillation (default 30min) (PR #9388)

  • [MCP] Initial release of @xen-orchestra/mcp: MCP server enabling AI assistants to query XO infrastructure (pools, hosts, VMs, dashboard, documentation) (PR #9519)

  • [Backup] Implement Distributed storage for Backups, Mirror Backups and Replications (PR #9433)

  • [V2V] Automatically take a snapshot if a running VM doesn't have any (PR #9471)

  • REST API:

    • [REST API] Added POST /pbds/{id}/actions/plug and /pbds/{id}/actions/unplug rest routes (PR #9477)
    • [REST API] Expose POST /vdis to create a VDI (PR #9492)
    • [REST API] Expose POST /rest/v0/vms/:id/actions/migrate to migrate a VM (PR #9414)

  • XO 5:

    • [Network] Ability to switch management PIF (PRs #9369 #9510)
    • [Licenses] Display bundle name next to license name (PR #9512)
    • [V2V] Remember connection settings in the browser (PR #9490)

  • XO 6:

    • [i18n] Add Chinese (Simplified Han script) and update Czech, German, Italian, Korean and Dutch translations (PR #9462)
    • [VM/New] Add the ability to pass a cloud-init config (PR #9427)
    • [VM/New] Added SSH key field (PR #9413)
    • [Search Engine] Implement first version of the Query Builder on Pools, Hosts, VMs, networks and Storage tables (PR #9488)
    • [Header] Add a banner when the connection to the xo server fails (PR #9375)

Enhancements

  • [Warm Migration] the api call now return the new VM uuid (PR #9465)

  • [Warm Migration] stopped VM can be warm migrated (PR #9465)

  • [Netbox] Support version 4.5.x (PR #9445)

  • [Storage] Add possibility to create VDI in qcow2 format if size > 2TB - 8KB (PR #9493)

  • [Backups] Improve VHD dist handling an rework disk merge (delta backups) (PR #9300)

  • [Host] Add persistent option to host.disable to persist across host reboots (PR #9503)

  • REST API:

    • [REST API] Added POST /srs/{id}/actions/reclaim_space rest route (PR #9486)
    • [REST API] Add objectType to tasks for resolved object references (PR #9429)
    • [REST API] Added POST /srs/{id}/actions/scan rest routes (PR #9514)

  • XO 5:

    • [Patches] Warn about updating XOSTOR before installing patches (PR #9517)

Bug fixes

  • [HUB Recipe] A bug in the Pyrgos recipe requires to remove the DHCP option of the recipe form (PR #9454)
  • [OpenMetrics] Fix ECONNREFUSED on IPv6-only systems by binding to localhost instead of 127.0.0.1 (PR #9489)
  • [REST API] Exclude removable and ISO storage from top 5 SRs usage (PR #9495)
  • [xo-server-sdn-controller] traffic rules robustness (PR #9442)
  • [Backups] Fix error during backup and health check (PR #9508)
  • [Backups] remove the cleanVm: incorrect backup size in metadata error (PR #9527)

Released packages

  • @xen-orchestra/fs 4.6.7
  • @xen-orchestra/backups-cli 1.1.8
  • @xen-orchestra/immutable-backups 1.0.30
  • @xen-orchestra/vmware-explorer 0.11.0
  • xo-server-load-balancer 0.12.0
  • xo-server-netbox 1.11.0
  • xo-server-openmetrics 1.2.0
  • xo-server-sdn-controller 1.2.1
  • @xen-orchestra/backups 0.69.1
  • complex-matcher 1.1.0
  • @xen-orchestra/proxy 0.29.48
  • xo-web 5.194.0
  • @vates/types 1.21.0
  • @xen-orchestra/rest-api 0.27.0
  • xo-server 5.197.2
  • @xen-orchestra/web-core 0.45.0
  • @xen-orchestra/mcp 1.0.1
  • @xen-orchestra/web 0.43.0

6.1.2 (2026-02-10)

Bug fixes

  • [xo-server] Force delete a running VM now bypass hard_shutdown blocked operations (PR #9473)
  • [Backup] Ensure VM created by healthcheck are removed by backup process (PR #9473)

Released packages

  • @xen-orchestra/xapi 8.6.6
  • @xen-orchestra/backups 0.68.2
  • @xen-orchestra/proxy 0.29.46
  • xo-server 5.196.3

6.1.1 (2026-02-05)

Enhancements

  • [Settings] Add various themes (PR #9387)
  • [VM] Add delete and snapshot buttons to manage VM (PR #9410)
  • [Site] Update dashboard with new info from endpoint (PR #8964)
  • [i18n] Update Czech, Danish, German, Spanish, Persian, Finnish, Italian, Japanese, Korean, Norwegian, Polish, Dutch, Portuguese (Brasil), Russian, Swedish and Ukrainian translations (PR #9440)
  • [REST API] Added POST /vifs and DELETE /vifs/:id rest routes (PR #9393)

Bug fixes

  • [REST API] Close SSE connections when clients are too slow, to avoid increased memory consumption (PR #9439)
  • [REST API] message objects are no longer sent via the SSE when subscribing to thealarm collection (PR #9439)
  • [REST API] Do no longer create an XO user authentication task, when using an authentication token (PR #9439)
  • [Backup] ensure no snapshot are left unattended after a job (PR #9434)
  • [Backup] Fix replication leaving replica after partial incremental replication (PR #9435)
  • [REST API] Fix ISO not mounted when creating a VM from /pools/:id/actions/create_vm (PR #9461)
  • [REST API] Fix href path for backup-archives (PR #9460)
  • [REST API/Pool/Dashboard] Only consider running VMs for the cpuProvisioning.assigned value Forum#11604 (PR #9456)
  • [CopyButton] Fix copy to clipboard not working in non-HTTPS environments (PR #9426)
  • [Backup/immutability] Fix typo in sample config file (PR #9444)
  • [Host] Fix host dashboard CPU provisioning calculation Forum#101359 (PR #9459)

Released packages

  • @vates/types 1.19.0
  • @xen-orchestra/backups 0.68.1
  • @xen-orchestra/immutable-backups 1.0.29
  • @xen-orchestra/web-core 0.42.0
  • @xen-orchestra/rest-api 0.24.1
  • @xen-orchestra/web 0.40.0
  • @xen-orchestra/fs 4.6.6
  • @xen-orchestra/proxy 0.29.45
  • xo-server 5.196.2

6.1.0 (2026-01-29)

Highlights

  • [i18n] Add Finnish, Polish and update Czech, Danish, German, Spanish, Persian, Italian, Japanese, Korean, Norwegian, Dutch, Portuguese (Brasil), Russian, Swedish and Ukrainian translations (PR #9330)
  • [VM] Add all actions to manage VM life cycle (PR #9403)
  • [Backup] show the backup archive that will be kept for Long Term Retention (PR #9364)
  • [OpenMetrics] Expose SR capacity metrics: xcp_sr_virtual_size_bytes, xcp_sr_physical_size_bytes, xcp_sr_physical_usage_bytes (PR #9360)
  • [Backup] Fix read xxx bytes, maximum size allowed is yyy for full backup on S3 (PR #9396)
  • [Backup] Fix disk export stuck at 99% (PR #9407)
  • [VM/New] Added VTPM support (PR #9389)
  • [REST API] Add endpoints to reconfigure management interface for hosts and pools (PR #9369)
  • [REST API] Add POST /vbds endpoint to create a VBD (attach a VDI to a VM) (PR #9391)
  • [REST API] Add createVtpm parameter to VM creation endpoint (PR #9412)
  • [REST API] Add secureBoot parameter to VM creation endpoint (PR #9417)
  • [REST API] Add DELETE /vbds/{id} endpoint to remove a VBD (PR #9394)
  • [REST API] Add POST /vbds/:id/actions/connect and POST /vbds/:id/actions/disconnect endpoints to hotplug/unplug VBDs from running VMs (PR #9399)
  • [REST API] Add POST /vdis/:id/actions/migrate endpoint to migrate a VDI to another SR (PR #9408)
  • [TreeView] Scroll to current item in list view (PR #9268)
  • [SIDEPANEL] Remove text ellipsis on sides panel (PR #9328)
  • [Icons] Update icons to use new styles (PR #8989 and PR #9424)

Security

  • [Backups] Update node-tar dependency to handle CVE-2026-23745 (PR #9406)

Enhancements

  • [REST API] Update /dashboard endpoint to also return disconnected servers, disabled hosts, the status of all VMs, and compute jobs from the last seven days (PR #9207)
  • [vhd-cli] Prevent using invalid options (PR #9386)
  • [VM] Add "Change state" button on VM view (PR #9317)
  • [V2V] Add endpoint to export one disk from Vmware to VHD or QCOW2 VDI_IO_ERROR (PR #9411)

Bug fixes

  • [REST API] Fix /vms/:id/dashboard cannot read properties of undefined (reading 'id') (PR #9380)
  • [REST API] vms/:id/dashboard return now an empty object for the replication key instead of undefined (in case of no replication) (PR #9380)
  • [REST API] vms/:id/dashboard rename not-in-job into not-in-active-job for the vmProtection key to avoid confusion (PR #9380)
  • [REST API] Don't return VDI-snapshot for /vms/:id/vdis endpoints (PR #9381)
  • [Plugins/Backup-reports] Prevent succesful backups from occasionally being reported as interrupted Forum#11721 (PR #9400)
  • [REST API] /dashboard return now {isEmpty: true} instead of undefined in case there is no data to compute (PR #9395)
  • [OpenMetrics] Add missing sr_name label to VM disk metrics (PR #9353)
  • [REST API] Fix /vms/:id/actions/start ignored request body (to start a virtual machine on a specific host) (PR #9416)
  • [Backup] Fix reverted VM making the next backup run fails with VM must be a snapshot error (PR #9397)
  • [Sidebar] Removal borders top and right of sidebar in mobile (PR #9366)
  • [V2V] Fix VDI_IO_ERROR when importing some unaligned disks into a qcow2 storage (PR #9411)
  • [New/SR] Fix Require "-o" along with xe-mount-iso-sr error during NFS ISO SR creation (PR #9425)

Released packages

  • vhd-lib 4.14.7
  • @xen-orchestra/qcow2 1.1.2
  • @xen-orchestra/backups 0.68.0
  • @xen-orchestra/backups-cli 1.1.7
  • @xen-orchestra/immutable-backups 1.0.28
  • xo-server-openmetrics 1.1.0
  • xo-web 5.192.0
  • @vates/nbd-client 3.2.3
  • @vates/types 1.18.0
  • @xen-orchestra/xapi 8.6.5
  • @xen-orchestra/web-core 0.41.0
  • @xen-orchestra/proxy 0.29.43
  • @xen-orchestra/rest-api 0.24.0
  • @xen-orchestra/web 0.39.0
  • vhd-cli 1.1.1
  • xo-server 5.196.0

6.0.3 (2026-01-06)

Bug fixes

  • [V2V] Better handling of block alignment (PR #9293)
  • [Hub] Fix m.downloadAndInstallResource is not a function error Forum#11735 (PR #9362)

Released packages

  • vhd-lib 4.14.6
  • @xen-orchestra/disk-transform 1.2.1
  • @xen-orchestra/qcow2 1.1.1
  • @xen-orchestra/xapi 8.6.3
  • @xen-orchestra/backups 0.67.2
  • @xen-orchestra/web-core 0.40.0
  • @xen-orchestra/proxy 0.29.41
  • @xen-orchestra/web 0.37.2
  • xo-server 5.194.6
  • xo-web 5.191.3

6.0.2 (2025-12-23)

Bug fixes

  • XO5:

    • [XOA/Updates] Fix xoa-updater service appears to be down (PR #9349)
    • [Netdata] Fix netdata URL (PR #9354)

  • [OpenMetrics] Fix compliance with OpenMetrics 1.0 specification: use correct Content-Type header and timestamps in seconds (PR #9351)

  • [OpenMetrics] Fix authentication bypass for /openmetrics routes to allow Prometheus scraping with Bearer token (PR #9351)

  • [Select component] Fix randomly empty select component at initialization (PR #9282)

  • [TaskItem] Fix tree on task item component due to a different behavior on firefox (PR #9352)

Released packages

  • @xen-orchestra/web-core 0.39.1
  • @xen-orchestra/web 0.37.1
  • xo-server 5.194.5
  • xo-server-openmetrics 1.0.2

6.0.1 (2025-12-19)

Security

  • [Openmetrics] Hardcode port and bind address for security and compatibility with the system firewall (PR #9337)

Bug fixes

  • [OTP] Fix rendering of OTP signin page (PR #9340)
  • XO 5:
    • Fix infinite loading when redirectToHttps=true (PR #9339)

Released packages

  • xo-server 5.194.4
  • xo-server-openmetrics 1.0.1

6.0.0 (2025-12-18)

Highlights

  • [i18n] Update Czech, German, Persian, Italian, Japanese, Korean, Norwegian, Dutch, Russian, Swedish and Ukrainian translations (PR #9305)
  • [i18n] Update Czech, Danish, Spanish, French, Italian, Dutch, Portuguese (Brazil), and Russian translations (PR #9243)
  • [Navigation] Navigation state is now persisted in localStorage and items are now collapsible while filtering. (PR #9277)
  • [Reactivity] Tasks are now reactive (PR #9271)
  • [XO] XO6 is now the default page (PR #9212)
  • [Site/Tasks] Implement tasks view and side panel information (PR #9063)
  • [Pool/Tasks] Implement tasks view and side panel information (PR #9312)
  • [Host/Tasks] Implement tasks view and side panel information (PR #9311)
  • [VMs/Tasks] Implement tasks view and side panel information (PR #9313)

Enhancements

  • XO 6:

    • [Navigation] Add links to XO 5 for actions and pages not yet implemented in XO 6 (PR #9214)

  • [Backups/s3] Update filesystem handling to use DeleteObjectsCommand in order to improve performance (PR #9281)

  • [REST API] Add link to the openAPI JSON directly in the swagger description (PR #9285)

  • [REST-API/SSE] Possibility to subscribe to XO task (PR #9269)

  • [XO5] Remove XOSAN (PR #9248)

  • [Plugins/Backup-reports] Add optional context in email subject and Pool ID in summary #8544 (PR #8973)

  • [Plugins/Openmetrics] Expose XCP-NG metrics in OpenMetrics format for Prometheus/Grafana (PR #9323)

Bug fixes

  • [Backups] Allow offline backups for more types of backups Forum#11578 (PR #9228)

  • [xo-server] better handling of xapi snapshots when converting to xo object (PR #9231)

  • [REST API/VM Dashboard] Return vmProtection: 'protected' | 'unprotected' | 'not-in-job' instead of vmProtected: boolean (PR #9288)

  • [Backup]clean up .vhd.checksum files (PR #9291)

  • [Backup] Prevent "No new data to upload for this VM" info on mirror backups when it was false Forum#11623 (PR #9286)

  • [REST API] Fix various cannot convert undefined or null to object (PR #9304)

  • [REST API/VM Dashboard] Fix cannot read property of undefined (PR #9304)

  • [Backups] Don't fail backup with memory on "INVALID_UUID" error (PR #9308)

  • [Plugins/Perf-alert] Unload configuration when the plugin is disabled (PR #9306)

  • [REST-API] Fix duplicate entries using ndjson (PR #9320)

  • [Host] Report 0 RAM usage for halted hosts instead of incorrect values (PR #9272)

  • [Plugins/OIDC] Fix group import on string (PR #9280)

  • [Vm Import] Fix error intermediate value not iterable (PR #9327)

  • [XO5/Restore] Replace deprecated endpoint call (PR #9316)

  • XO 6:

    • [VDIs] Fix broken fallback link to XO 5 VDIs page (PR #9267)
    • Redirect non admin user to XO5 (PR #9219)
    • [VM/New] Fix wording in "Memory" section (PR #9309)
    • [Nav/AccountMenu] License URL wasn’t redirecting properly to XO 5 (PR #9321)

Released packages

  • @xen-orchestra/fs 4.6.5
  • @xen-orchestra/backups 0.67.1
  • @vates/types 1.16.0
  • @xen-orchestra/mixins 0.18.0
  • xen-api 4.7.6
  • @xen-orchestra/xapi 8.6.2
  • @xen-orchestra/web-core 0.39.0
  • @xen-orchestra/proxy 0.29.40
  • @xen-orchestra/rest-api 0.22.1
  • @xen-orchestra/web 0.37.0
  • xo-server 5.194.3
  • xo-server-audit 0.15.0
  • xo-server-auth-oidc 0.4.2
  • xo-server-backup-reports 1.7.0
  • xo-server-openmetrics 1.0.0
  • xo-server-perf-alert 1.1.0
  • xo-web 5.191.2

Previous changelogs