# Pangolin changelog > A self-hosted tunneled reverse proxy with identity and access control. - Vendor: Fossorial - Category: Developer Tools - Official site: https://digpangolin.com - Tracked by: What's New (https://whatsnew.fyi/product/pangolin) - Harvested from: GitHub (fosrl/pangolin) - Entries below: 10 (newest first) What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. ## Releases ### 1.21.1 - Date: 2026-07-30 - Version: 1.21.1 - Original notes: https://github.com/fosrl/pangolin/releases/tag/1.21.1 - Permalink: https://whatsnew.fyi/product/pangolin/releases/1.21.1 - **fixed** — Fix IdP org ownership on save policy - **fixed** — Fix newt command on credentials screen - **fixed** — Fix labels dropdown flicker if no changes applied - **fixed** — Fix redirect to /auth/initial-setup after hitting auth rate limit - **fixed** — Fix Punycode domain validation - **changed** — Improve batch status histories - **security** — Security updates ##### Read the 1.21 Announcement Read the full announcement with discussion of new features: [Pangolin 1.21: Same Network Detection](https://pangolin.net/news/1-21-release) ##### What's Changed * Fix IdP org ownership on save policy (ref #3290) * Fix newt command on credentials screen * Fix labels dropdown flicker if no changes applied by @Fredkiss3 in https://github.com/fosrl/pangolin/pull/3468 * Fix redirect to `/auth/initial-setup` after hitting auth rate limit by @Adityakk9031 in https://github.com/fosrl/pangolin/pull/3410 * Fix Punycode domain validation by @shubhamsinnh in https://github.com/fosrl/pangolin/pull/3460 * Improve batch status histories by @Fredkiss3 in https://github.com/fosrl/pangolin/pull/3469 * Security updates ##### New Contributors * @shubhamsinnh made their first contribution in https://github.com/fosrl/pangolin/pull/3460 **Full Changelog**: https://github.com/fosrl/pangolin/compare/1.21.0...1.21.1 ##### How to Update > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.pangolin.net/self-host/how-to-update) ### 1.21.0 - Date: 2026-07-20 - Version: 1.21.0 - Original notes: https://github.com/fosrl/pangolin/releases/tag/1.21.0 - Permalink: https://whatsnew.fyi/product/pangolin/releases/1.21.0 - **added** — Add same network detection for clients and sites so connections don't relay when they are on the same network - **added** — Add option to associate an access token to a specific account user - **added** — Add optional access token session persistence when access token is passed via a query parameter or header - **added** — Add remember last used IdP and mark as last used - **added** — Add enabled toggle to private resources - **added** — Add pending resource state to resources created on a pending site via a provisioning key and provisioning blueprint - **added** — Add site provisioning key routes to integration API - **changed** — Improve integration API for consistency in PUT/PATCH, route naming, and Swagger organization - **changed** — Improve general UI - **fixed** — Fix improper query param encoding for email addresses preventing plus characters in emails - **fixed** — Add cleanup of pending resources if reject pending site - **security** — Apply dependency security updates ##### Read the 1.21 Announcement Read the full announcement with discussion of new features: [Pangolin 1.21: Same Network Detection](https://pangolin.net/news/1-21-release) ##### What's Changed - Add same network detection for clients and sites, so connection don’t relay when they are on the same network (requires updated clients and sites) - Add option to associate an access token (share link) to a specific account user - Add optional access token (share link) session persistence when access token is passed via a query parameter or a header, so they don't have to passed on every request - Add remember last used IdP and mark as last used - Add enabled toggle to private resources - Add pending resource state to resources created on a pending site via a provisioning key and provisioning blueprint - Add clean up pending resources if reject pending site - Add site provisioning key routes to integration API - Improve integration API for consistency in PUT/PATCH, route naming, and Swagger organization - Fix improper query param encoding for email addresses preventing `+` characters in emails - Dependency security updates - General UI improvements - Various other bug fixes **Full Changelog**: https://github.com/fosrl/pangolin/compare/1.20.0...1.21.0 ##### How to Update > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.pangolin.net/self-host/how-to-update) ### 1.21.0-rc.0 - Date: 2026-07-17 - Version: 1.21.0-rc.0 - Original notes: https://github.com/fosrl/pangolin/releases/tag/1.21.0-rc.0 - Permalink: https://whatsnew.fyi/product/pangolin/releases/1.21.0-rc.0 - Labels: Pre-release - **added** — Same network detection for clients and sites to prevent connection relay when on the same network - **added** — Option to associate an access token (share link) to a specific account user - **added** — Optional access token (share link) session persistence when access token is passed via query parameter or header - **added** — Remember last used IdP and mark as last used - **added** — Enabled toggle to private resources - **added** — Pending resource state for resources created on a pending site via provisioning key and provisioning blueprint - **added** — Clean up pending resources when rejecting a pending site - **added** — Site provisioning key routes to integration API - **fixed** — Improper query param encoding for email addresses preventing + characters in emails - **security** — Dependency security updates - **changed** — General UI improvements ##### RC A Release Candidate (RC) is a near-final software version, stable but undergoing last tests before official release. It has all features and no known bugs. * Users: Use cautiously due to potential undiscovered bugs. Not for critical systems unless prepared for issues. Report bugs. * Developers/Testers: Perform crucial final validation and thorough testing, especially of recent changes, to catch last-minute major issues. * Backup: Always back up data before installing an RC to allow rollback if problems arise. * Feedback: Provide feedback; it's vital for a robust final release. > [!NOTE] > Keep a backup of the last stable database as you will be unable to update from a RC to the next stable version. Database migrations may change between release candidates and stable versions. ##### What's Changed - Add same network detection for clients and sites, so connection don’t relay when they are on the same network (requires updated clients and sites) - Add option to associate an access token (share link) to a specific account user - Add optional access token (share link) session persistence when access token is passed via a query parameter or a header, so they don't have to passed on every request - Add remember last used IdP and mark as last used - Add enabled toggle to private resources - Add pending resource state to resources created on a pending site via a provisioning key and provisioning blueprint - Add clean up pending resources if reject pending site - Add site provisioning key routes to integration API - Fix improper query param encoding for email addresses preventing `+` characters in emails - Dependency security updates - General UI improvements - Various other bug fixes **Full Changelog**: https://github.com/fosrl/pangolin/compare/1.20.0...1.21.0-rc.0 ##### How to Update > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.pangolin.net/self-host/how-to-update) ### 1.20.0 - Date: 2026-07-09 - Version: 1.20.0 - Original notes: https://github.com/fosrl/pangolin/releases/tag/1.20.0 - Permalink: https://whatsnew.fyi/product/pangolin/releases/1.20.0 - **added** — Add resource launcher page with configurable and savable views available to non-admins and admins - **added** — Add global command palette to navigate the dashboard and search for sites and resources - **added** — Add Country Is Not matching type to resource geoblocking rules - **added** — Add username field to VNC auth form - **changed** — Improve private resource edit and create UI consistency to match dashboard UX patterns by migrating from dialog to dedicated pages - **changed** — Release EE feature gate on labels feature - **changed** — VNC auth form now works with macOS - **fixed** — Fix redirect back to resource after completing session expired checkpoint - **security** — Apply dependency security updates ##### Read the 1.20 Announcement Read the full announcement with discussion of new features: [Pangolin 1.20: Resource Launcher & Global Command Palette](https://pangolin.net/news/1-20-release) ##### What's Changed - Add resource launcher page with configurable and savable views; available to non-admins and admins (CE) - Add global command palette to navigate the dashboard and search for sites and resources (CE) - Add `Country Is Not` matching type to resource geoblocking rules (CE) - Add username field to VNC auth form; now works with macOS (CE) - Improve private resource edit and create UI consistency to match dashboard UX patterns (migrate from dialog to dedicated pages) - Release EE feature gate on labels feature - Fix redirect back to resource after completing session expired checkpoint - Dependency security updates - General UI improvements - Various other bug fixes ##### New Contributors * @jaisinha77777 made their first contribution in https://github.com/fosrl/pangolin/pull/3369 **Full Changelog**: https://github.com/fosrl/pangolin/compare/1.19.4...1.20.0 ##### How to Update > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.pangolin.net/self-host/how-to-update) ### 1.20.0-rc.0 - Date: 2026-07-08 - Version: 1.20.0-rc.0 - Original notes: https://github.com/fosrl/pangolin/releases/tag/1.20.0-rc.0 - Permalink: https://whatsnew.fyi/product/pangolin/releases/1.20.0-rc.0 - Labels: Pre-release - **added** — Add resource launcher page with configurable and savable views available to non-admins and admins - **added** — Add global command palette to navigate the dashboard and search for sites and resources - **added** — Add Country Is Not matching type to resource geoblocking rules - **changed** — Improve private resource edit and create UI consistency to match dashboard UX patterns by migrating from dialog to dedicated pages - **changed** — Release EE feature gate on labels feature - **fixed** — Fix redirect back to resource after completing session expired checkpoint - **security** — Dependency security updates ##### RC A Release Candidate (RC) is a near-final software version, stable but undergoing last tests before official release. It has all features and no known bugs. * Users: Use cautiously due to potential undiscovered bugs. Not for critical systems unless prepared for issues. Report bugs. * Developers/Testers: Perform crucial final validation and thorough testing, especially of recent changes, to catch last-minute major issues. * Backup: Always back up data before installing an RC to allow rollback if problems arise. * Feedback: Provide feedback; it's vital for a robust final release. > [!NOTE] > Keep a backup of the last stable database as you will be unable to update from a RC to the next stable version. Database migrations may change between release candidates and stable versions. ##### What's Changed - Add resource launcher page with configurable and savable views; available to non-admins and admins - Add global command palette to navigate the dashboard and search for sites and resources - Add `Country Is Not` matching type to resource geoblocking rules - Improve private resource edit and create UI consistency to match dashboard UX patterns (migrate from dialog to dedicated pages) - Release EE feature gate on labels feature - Fix redirect back to resource after completing session expired checkpoint - Dependency security updates - General UI improvements - Various other bug fixes ##### New Contributors * @jaisinha77777 made their first contribution in https://github.com/fosrl/pangolin/pull/3369 **Full Changelog**: https://github.com/fosrl/pangolin/compare/1.19.4...1.20.0-rc.0 ##### How to Update > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.pangolin.net/self-host/how-to-update) ### 1.19.4 - Date: 2026-06-26 - Version: 1.19.4 - Original notes: https://github.com/fosrl/pangolin/releases/tag/1.19.4 - Permalink: https://whatsnew.fyi/product/pangolin/releases/1.19.4 - **fixed** — Fix newly created clients from logging in on a new device or adding a new user causing a No client found for provided orgId error ##### Read the 1.19 Announcement Read the full announcement with discussion of new features: [Pangolin 1.19: Browser Remote Access — SSH, RDP, VNC & More](https://pangolin.net/news/1-19-release) ##### What's Changed Refer to the [original 1.19 notes](https://github.com/fosrl/pangolin/releases/tag/1.19.0) for a complete list of what changed since 1.18. * Fix newly created clients from logging in on a new device or adding a new user causing a `No client found for provided orgId` error > [!NOTE] > If this effects you please update to this version then delete the user using the server admin panel, invite them back, and have them reauthenticate in their client. **Full Changelog**: https://github.com/fosrl/pangolin/compare/1.19.3...1.19.4 ##### How to Update > [!WARNING] > This version includes a new mode of private resource: SSH. If you had previously used host resources and configured the SSH access tab, you will now need to switch these to SSH resources in order to manage the SSH config. If you do not switch they will continue to function as before but you will be unable to adjust settings. > [!IMPORTANT] > 1.19 browser-based SSH requires the Badger Traefik plugin to be on the latest version `v1.4.1`. The migration will automatically do this if it can find the Traefik config in the standard location **BUT YOU WILL NEED TO RESTART TRAEFIK TO PULL THE NEW PLUGIN**. Otherwise, [please ensure your Badger is up to date](https://docs.pangolin.net/self-host/how-to-update#:~:text=Increase%20the%20Badger%20version%20number). > [!IMPORTANT] > Browser-based RDP, SSH, and VNC as well as the new Pangolin SSH mode requires Newt version `1.13.0` or greater. > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.pangolin.net/self-host/how-to-update) ### 1.19.3 - Date: 2026-06-25 - Version: 1.19.3 - Original notes: https://github.com/fosrl/pangolin/releases/tag/1.19.3 - Permalink: https://whatsnew.fyi/product/pangolin/releases/1.19.3 - **added** — Add update notifications for different client types - **added** — Add delete resources associated with site - **added** — Add country flags - **added** — Add warning about not using .local aliases - **fixed** — Fix no data in status history when last data was over 90 days ago - **fixed** — Fix split by space causing issues with commands in role form - **fixed** — Fix inconsistent query params for limit and page size by enforcing strict inputs - **fixed** — Fix inconsistent API data in get vs update with policies - **fixed** — Fix request logs not loading on initial page open in CE - **removed** — Remove NoNewPrivileges from default systemd install - **fixed** — Fix ALL ASN not allowed as an input - **fixed** — Fix add missing delete global idp route to integration api - **fixed** — Fix unescaped regex chars in rules - **fixed** — Fix supporter footer on resource login page to remove supporter - **changed** — Improve efficiency and concurrency when changing site resources - **changed** — Improve org policy error message responses ##### Read the 1.19 Announcement Read the full announcement with discussion of new features: [Pangolin 1.19: Browser Remote Access — SSH, RDP, VNC & More](https://pangolin.net/news/1-19-release) ##### What's Changed Refer to the [original 1.19 notes](https://github.com/fosrl/pangolin/releases/tag/1.19.0) for a complete list of what changed since 1.18. * Add update notifications for different client types * Add delete resources associated with site * Add country flags * Add warning about not using .local aliases * Fix no data in status history when last data was over 90 days ago * Fix split by space causing issues with commands in role form * Fix inconsitant query params for limit and page size by enforcing strict inputs * Fix inconsistant API data in get vs update with policies * Fix request logs not loading on initial page open in CE * Fix remove NoNewPrivileges from default systemd install * Fix ALL ASN not allowed as an input * Fix add missing delete global idp route to integration api * Fix unescaped regex chars in rules * Fix supporter footer on resource login page to remove supporter * Improve efficiency and concurrency when changing site resources * Improve org policy error message responses ##### New Contributors * @kshitijshresth made their first contribution in https://github.com/fosrl/pangolin/pull/3251 * @gmpinder made their first contribution in https://github.com/fosrl/pangolin/pull/3206 * @mr1beast made their first contribution in https://github.com/fosrl/pangolin/pull/3336 **Full Changelog**: https://github.com/fosrl/pangolin/compare/1.19.2...1.19.3 ##### How to Update > [!WARNING] > This version includes a new mode of private resource: SSH. If you had previously used host resources and configured the SSH access tab, you will now need to switch these to SSH resources in order to manage the SSH config. If you do not switch they will continue to function as before but you will be unable to adjust settings. > [!IMPORTANT] > 1.19 browser-based SSH requires the Badger Traefik plugin to be on the latest version `v1.4.1`. The migration will automatically do this if it can find the Traefik config in the standard location **BUT YOU WILL NEED TO RESTART TRAEFIK TO PULL THE NEW PLUGIN**. Otherwise, [please ensure your Badger is up to date](https://docs.pangolin.net/self-host/how-to-update#:~:text=Increase%20the%20Badger%20version%20number). > [!IMPORTANT] > Browser-based RDP, SSH, and VNC as well as the new Pangolin SSH mode requires Newt version `1.13.0` or greater. > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.pangolin.net/self-host/how-to-update) ### 1.19.2 - Date: 2026-06-12 - Version: 1.19.2 - Original notes: https://github.com/fosrl/pangolin/releases/tag/1.19.2 - Permalink: https://whatsnew.fyi/product/pangolin/releases/1.19.2 - **fixed** — Fix mode missing in possible migration edge case - **fixed** — Fix SSH public resource not working with roles other than admin - **fixed** — Fix SSH public resource not respecting ssh action restriction on roles - **fixed** — Fix missing translations - **fixed** — Fix private SSH resource edge case with missing host - **fixed** — Fix blueprint server side error with bad containers ##### Read the 1.19 Announcement Read the full announcement with discussion of new features: [Pangolin 1.19: Browser Remote Access — SSH, RDP, VNC & More](https://pangolin.net/news/1-19-release) ##### What's Changed Refer to the [original 1.19 notes](https://github.com/fosrl/pangolin/releases/tag/1.19.0) for a complete list of what changed since 1.18. - Fix mode missing in possible migration edge case - Fix SSH public resource not working with roles other than admin - Fix SSH public resource not respecting ssh action restriction on roles - Fix missing translations - Fix private SSH resource edge case with missing host - Fix blueprint server side error with bad containers ##### How to Update > [!WARNING] > This version includes a new mode of private resource: SSH. If you had previously used host resources and configured the SSH access tab, you will now need to switch these to SSH resources in order to manage the SSH config. If you do not switch they will continue to function as before but you will be unable to adjust settings. > [!IMPORTANT] > 1.19 browser-based SSH requires the Badger Traefik plugin to be on the latest version `v1.4.1`. The migration will automatically do this if it can find the Traefik config in the standard location **BUT YOU WILL NEED TO RESTART TRAEFIK TO PULL THE NEW PLUGIN**. Otherwise, [please ensure your Badger is up to date](https://docs.pangolin.net/self-host/how-to-update#:~:text=Increase%20the%20Badger%20version%20number). > [!IMPORTANT] > Browser-based RDP, SSH, and VNC as well as the new Pangolin SSH mode requires Newt version `1.13.0` or greater. > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.pangolin.net/self-host/how-to-update) ### 1.19.1 - Date: 2026-06-12 - Version: 1.19.1 - Original notes: https://github.com/fosrl/pangolin/releases/tag/1.19.1 - Permalink: https://whatsnew.fyi/product/pangolin/releases/1.19.1 - **added** — Add resource policies for public resources - **added** — Add browser based RDP access via public resources - **added** — Add browser based VNC access via public resources - **added** — Add browser based SSH access via public resources - **added** — Add native Pangolin SSH mode for private and public resources that does not require configuring OpenSSH server and PAM - **added** — Add auto update Newt option for all sites in the org or specific sites - **added** — Add searchable and filterable custom labels on sites and resources - **added** — Add share link post authentication redirect path - **added** — Add pangctl command to make more than one user server admin - **added** — Add PostgreSQL and Redis install options in the installer - **fixed** — Fix public resource showing as degraded when WireGuard targets were added alongside healthy Newt targets - **fixed** — Fix custom branding logo URL not accepting links - **fixed** — Fix pasting the device code not accepting paste - **fixed** — Fix enforce absolute paths in sudo commands - **fixed** — Fix refresh end time on logs tables - **fixed** — Fix accept partially valid Docker labels instead of rejecting all - **fixed** — Fix restarting container on RC version causing migration errors - **fixed** — Fix cross site target assignment - **changed** — Improve OpenAPI response payloads - **changed** — Improve SSH configuration on private resources ##### Read the 1.19 Announcement Read the full announcement with discussion of new features: [Pangolin 1.19: Browser Remote Access — SSH, RDP, VNC & More](https://pangolin.net/news/1-19-release) ##### What's Changed - Add resource policies for public resources - Add browser based RDP access via public resources (requires newt >1.13.0) - Add browser based VNC access via public resources (requires newt >1.13.0) - Add browser based SSH access via public resources (requires newt >1.13.0) - Add native Pangolin SSH mode (for private and public resources) that does not require configuring OpenSSH server and PAM (requires newt >1.13.0) - Add auto update Newt option for all sites in the org or specific sites (requires newt >1.13.0) - Add searchable and filterable custom labels on sites and resources - Add share link post authentication redirect path - Add pangctl command to make more than one user server admin - Add PostgreSQL and Redis install options in the installer - Fix public resource showing as degraded when WireGuard targets were added alongside healthy Newt targets - Fix custom branding logo URL not accepting links - Fix pasting the device code not accepting paste - Fix enforce absolute paths in sudo commands - Fix refresh end time on logs tables - Fix accept partially valid Docker labels instead of rejecting all - Fix restarting container on RC version causing migration errors - Fix cross site target assignment - Improve OpenAPI response payloads - Improve SSH configuration on private resources - Improve sort resource filter options in audit logs - Improve performance in certain hot paths - Improve clients get error when holepunching fails instead of getting stuck registering - Improve speed of API endpoints with thousands of sites and users - Improve add loading icons on all logs tables - Improve auto create roles added in Blueprints - Dependency security updates - General UI improvements - Various other bug fixes ##### How to Update > [!WARNING] > This version includes a new mode of private resource: SSH. If you had previously used host resources and configured the SSH access tab, you will now need to switch these to SSH resources in order to manage the SSH config. If you do not switch they will continue to function as before but you will be unable to adjust settings. > [!IMPORTANT] > 1.19 browser-based SSH requires the Badger Traefik plugin to be on the latest version `v1.4.1`. The migration will automatically do this if it can find the Traefik config in the standard location **BUT YOU WILL NEED TO RESTART TRAEFIK TO PULL THE NEW PLUGIN**. Otherwise, [please ensure your Badger is up to date](https://docs.pangolin.net/self-host/how-to-update#:~:text=Increase%20the%20Badger%20version%20number). > [!IMPORTANT] > Browser-based RDP, SSH, and VNC as well as the new Pangolin SSH mode requires Newt version `1.13.0` or greater. > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.pangolin.net/self-host/how-to-update) ### 1.19.0 - Date: 2026-06-11 - Version: 1.19.0 - Original notes: https://github.com/fosrl/pangolin/releases/tag/1.19.0 - Permalink: https://whatsnew.fyi/product/pangolin/releases/1.19.0 - **fixed** — Fix migration issue when there are no public resources - **added** — Add SSH as a new mode of private resource - **added** — Add browser-based SSH access - **added** — Add browser-based RDP access - **added** — Add browser-based VNC access ##### Read the 1.19 Announcement Read the full announcement with discussion of new features: [Pangolin 1.19: Browser Remote Access — SSH, RDP, VNC & More](https://pangolin.net/news/1-19-release) ##### What's Changed Refer to the [original 1.19 notes](https://github.com/fosrl/pangolin/releases/tag/1.19.0) for a complete list of what changed since 1.18. * Fix migration issue when there are no public resources ##### How to Update > [!WARNING] > This version includes a new mode of private resource: SSH. If you had previously used host resources and configured the SSH access tab, you will now need to switch these to SSH resources in order to manage the SSH config. If you do not switch they will continue to function as before but you will be unable to adjust settings. > [!IMPORTANT] > 1.19.0 browser-based SSH requires the Badger Traefik plugin to be on the latest version `v1.4.1`. The migration will automatically do this if it can find the Traefik config in the standard location. Otherwise, [please ensure your Badger is up to date](https://docs.pangolin.net/self-host/how-to-update#:~:text=Increase%20the%20Badger%20version%20number). > [!IMPORTANT] > Browser-based RDP, SSH, and VNC as well as the new Pangolin SSH mode requires Newt version `1.13.0` or greater. > [!IMPORTANT] > Always back up your config app-data before updating. This will allow you to easily roll back if the update breaks your configuration. You will not be able to easily downgrade otherwise. [View documentation](https://docs.pangolin.net/self-host/how-to-update)