Releases

Fixes

• Fixed mixed HTTP/HTTPS URL generation when running behind a reverse proxy that terminates SSL. Pricore now forces HTTPS for all generated URLs when APP_URL is configured with an https:// scheme. (#80)

Fixes

• Fixed organization settings pages rendering blank content after the Inertia.js v3 upgrade

This release centers on security auditing, a major new feature that brings vulnerability tracking and advisory matching to your Pricore registry. It also includes an Inertia.js v3 upgrade and several smaller fixes.

New Features

• Package Version Security Auditing (#55): Pricore now syncs security advisories from the Packagist Security Advisories API and matches them against your package versions using semver constraint checking. Packages are automatically scanned after repository and mirror syncs. The new organization-level security overview page shows severity stats and per-package vulnerability summaries, with badges on version lists and details in version dialogs. Org admins receive email notifications when new vulnerabilities are detected, and composer audit works natively against your Pricore registry.

Improvements

• Inertia.js v3: Upgraded from Inertia.js v2 to v3 for both the Laravel backend and React frontend.

Fixes

• Fixed missing activity log descriptions for mirror and SSH key events, which previously displayed awkward phrasing like "Test User Mirror added"

Bug Fixes

• Fix issue where package versions prefixed with v would not be returned by Composer endpoint

This releases fixes a layout overflow issue in the version detail modal.

Bug Fixes

• Fixed version detail modal content overflowing when the version name or description is long

Pricore v0.49.0 adds archive size visibility to the package version list and fixes SSH key generation in Docker.

New Features

• Archive Size Display: Package version archives now track and display their file size in the UI. The "Dist available" badge is replaced with the actual archive size (e.g., "1.2 MB") and a tooltip indicating the mirror is stored and served by Pricore. Existing archives are backfilled during migration.

Bug Fixes

• Added openssh-client to Docker image for ssh-keygen support

0.48.1 (2026-03-22)

Bug Fixes

• normalize package versions in InlineRegistryClient (578027a)

Documentation

• add registry mirrors and Bitbucket to README features (a7a18db)

This release focuses on two major additions: registry mirrors for importing packages from external Composer registries, and Bitbucket as a new VCS provider.

New Features

• Registry Mirrors (#27): Import and sync packages from external Composer registries (like other private or paid registries) directly into your organization. Mirrors support multiple authentication methods (token, Basic Auth, HTTP Bearer), automatic syncing every 4 hours, dist file mirroring, and stale version cleanup. A full management UI is included with sync logs and per-mirror package listings.
• Bitbucket VCS Integration (#24): Connect Bitbucket repositories as a package source, with support for browsing repositories, automatic webhook registration, and API token authentication.
• Package Deletion: Packages can now be deleted from the package detail page via a new actions dropdown menu.

Improvements

• Package Detail Page: Mirrored packages now display a label when a mirror (dist) is available.

Fixes

• Fixed repository dialogs not resetting their loading state when reopened

This release adds support for Generic Git repositories, allowing you to connect any Git host (not just GitHub, GitLab, or Bitbucket) to Pricore using SSH keys and manual webhooks. It also brings several UI improvements to the repository management experience.

New Features

• Generic Git VCS Support: Connect any Git repository via SSH. Manage SSH keys per organization, clone repositories over SSH, and trigger syncs through manual webhook URLs with token-based authentication.
• Repository Owner/Org Filter: Filter repositories by owner or organization when adding or importing repositories, making it easier to find the right repo in large accounts.

This release brings Pricore up to Laravel 13 and polishes the onboarding and dashboard experience.

New Features

• Composer config step in onboarding checklist: The onboarding checklist now guides users through configuring Composer to connect to their private registry, with a convenient copy button for the repository URL.

Improvements

• Chart color palette: Download charts now use a neutral, cohesive color palette for better readability and visual consistency. Thanks @Thomas-Vos00!
• Laravel 13: Upgraded the framework to Laravel 13, bringing the latest performance and security improvements.