github.com/flohoss/gocron

A quick follow-up to v0.13.0 polishing the single sign-on experience — no new
features and no config changes.

Fixes

• OIDC callback failures explain themselves — every rejection in
  /api/auth/callback now includes a message field ("Authentication required") next to the existing machine-readable error, with detail
  naming the cause (login session expired or missing, state mismatch,
  Authentication failed). Status codes are unchanged: 401, and 503 still
  means the provider is unreachable.
• Logout no longer requests a redirect the provider ignores — the browser is
  still sent to the provider's end_session_endpoint, but without
  post_logout_redirect_uri. Providers that require an id_token_hint reject
  the request before looking at the redirect, so the parameter only implied
  control GoCron never had. Where the provider lands you afterwards is its
  choice.

Docs

Restructured the SSO section into a settings table plus labelled Discovery /
Login flow / Logout paragraphs, corrected the outdated logout
description, and added SSO to the feature list.

Changes in This Release

• [meta] Update coverage badge [skip ci] (354f571) by @github-actions[bot]
• [fix] Explain failed OIDC callbacks with a message field (27dfae3) by @flohoss
• [improve] Stop requesting a post-logout redirect the provider ignores (9127b7b) by @flohoss
• [meta] Update coverage badge [skip ci] (6813e8e) by @github-actions[bot]
• [docs] Tighten the README and restructure the OIDC section (c5eb831) by @flohoss

Full Changelog: v0.13.0...v0.13.1

Docker Image

docker pull ghcr.io/flohoss/gocron:v0.13.1
docker pull ghcr.io/flohoss/gocron:latest

Binary Downloads

Download one of the attached binaries extracted from the release image:

• gocron_<version>_linux_amd64
• gocron_<version>_linux_arm64

Verify with ./gocron_<version>_linux_<arch> --version.

Image digest:

ghcr.io/flohoss/gocron:v0.13.1@sha256:3dfde5d35de22934738787e6d9eceff3cc030403c3a6b248f4b857e5ee9683d9

Build Information

• Version: v0.13.1
• Build Time: 2026-09-29T08:25:38Z
• Repository: https://github.com/flohoss/gocron
• Platform: linux/amd64,linux/arm64
• Attestations: SLSA Provenance, SBOM

Highlights

Single sign-on with OpenID Connect — GoCron can now protect both the UI and the API behind any OIDC provider (tested against Pocket-ID).

• New auth.oidc config section: enabled, issuer_url, client_id, client_secret, session_ttl, cookie_secure. Endpoints and signing keys are auto-discovered from the issuer's .well-known/openid-configuration
• Authorization-code flow with PKCE + state; sessions are opaque, DB-backed, deleted on logout, and expire after session_ttl (default 24h)
• SPA requires login when SSO is enabled — unauthenticated visitors are redirected to the provider; only the openid scope is requested and the session is keyed on the ID token's sub, so no email claim is needed
• cookie_secure toggle for HTTPS deployments; any auth.oidc.* value can be overridden via GC_AUTH_OIDC_* env vars
• Live-reloadable — changes to the auth.oidc section apply on config reload, no restart needed (the provider is re-discovered when issuer_url/client_id change; discovery failures retry on the next request)
• Config file with comments: the commented reference config/config.example.yaml is embedded via go:embed and written to config/config.yaml on first boot if no config exists. config.yaml is git-ignored so local credentials never get committed
• Runtime-reloadable schedule and log level: changing time_zone or log_level in config.yaml applies immediately on config reload — the cron scheduler and the default slog handler are rebuilt without a restart
• Documented in the README with a commented example in config/config.example.yaml

Fixes

• Scheduled jobs no longer start during shutdown — the scheduler stops accepting runs first and the shutdown channel closes only after all cleanup completes (#59, thanks @bensynapse)
• Job cancellation now fully finishes before shutdown returns

Improvements

• Configuration validation errors are translated and formatted for readability
• Custom validation rules moved into the validate package
• Coverage reporting excludes generated files; the coverage badge is published in the repo
• All protected API operations now declare the cookieAuth security scheme in the OpenAPI spec

Behavior changes

• Cron schedules now run in the configured time_zone, applied on reload — the scheduler is built with cron.WithLocation(...). Previously time_zone only took effect via TZ at startup, so a config edit didn't move existing cron entries until a restart. If you run with a non-UTC time_zone, double-check that schedules land where you expect after upgrading

Notes

• If you run GoCron behind a reverse proxy and enable SSO, the proxy must forward /api/auth/, and the OIDC callback URL registered at your provider must be the public address (e.g. https://gocron.example.com/api/auth/callback)
• Logout deletes the session server-side; when the provider advertises an end_session_endpoint the frontend also redirects there to clear the provider-side session
• Sessions are opaque tokens stored server-side — they expire after session_ttl and are cleaned up hourly
• No config changes required for existing installations — auth stays disabled unless auth.oidc.enabled: true is set. Your existing config.yaml keeps working as-is

Changes in This Release

• [refactor] Move README images and docker-bake into folders (b7862b4) by @flohoss
• [improve] Exclude generated files from coverage reporting (1081a10) by @flohoss
• [meta] Publish the coverage badge into the repo (039a933) by @flohoss
• [meta] Update coverage badge [skip ci] (70e57b9) by @github-actions[bot]
• [fix] Do not use cache for go service (a5c2c6b) by @flohoss
• [refactor] Move BackendURL to backend.ts (cc48e16) by @flohoss
• [improve] Translate and format configuration validation errors (ae2d523) by @flohoss
• [fix] Finish job cancellation before shutdown returns (5cc711a) by @bensynapse
• [meta] Update coverage badge [skip ci] (c6559ce) by @github-actions[bot]
• [improve] Move custom validation rules into the validate package (0238803) by @flohoss
• [improve] Cover env key validation and value expansion (391d415) by @flohoss
• [meta] Update coverage badge [skip ci] (2442ab9) by @github-actions[bot]
• [feature] Add OIDC single sign-on for the UI and API (0a2fdc8) by @flohoss
• [feature] Require login in the SPA when SSO is enabled (a399200) by @flohoss
• [docs] Document OIDC single sign-on (cb9879e) by @flohoss
• [docs] Add commented OIDC example to the config (f247a62) by @flohoss
• Merge branch 'main' of https://github.com/flohoss/gocron (6f62aa6) by @flohoss
• [meta] Update coverage badge [skip ci] (01c572c) by @github-actions[bot]
• Merge branch 'main' into fix-scheduled-job-shutdown (e70eff2) by @flohoss
• Merge pull request #59 from bensynapse/fix-scheduled-job-shutdown (04321d2) by @flohoss
• [refactor] Close shutdown channel after all cleanup completes (89574d5) by @flohoss
• [meta] Update coverage badge [skip ci] (e8ac6da) by @github-actions[bot]
• [meta] Remove deprecated config (4bf7835) by @flohoss
• [fix] Show logout in same style as open api docs (ea629b2) by @flohoss
• Merge branch 'main' of https://github.com/flohoss/gocron (462e11d) by @flohoss
• [refactor] Ship commented example config via go:embed (6dee2f3) by @flohoss
• [fix] Harden auth callback and document cookieAuth on protected operations (5d2fded) by @flohoss
• [fix] Fail closed on auth check and use return-based login redirect (0f7a7ac) by @flohoss
• [fix] Stop scheduler before jobs and close shutdown after cleanup (22949c5) by @flohoss
• [improve] Add auth route and session tests (4133b79) by @flohoss
• [docs] Point configuration docs at the example config (716c7c0) by @flohoss
• [refactor] Drop the unused username from sessions (77b7c5b) by @flohoss
• [refactor] Key sessions on the OIDC subject (7a38071) by @flohoss
• [refactor] Delete sessions on logout (5d23e19) by @flohoss
• [meta] Update coverage badge [skip ci] (354f571) by @github-actions[bot]

Full Changelog: v0.12.0...v0.13.0

Docker Image

docker pull ghcr.io/flohoss/gocron:v0.13.0
docker pull ghcr.io/flohoss/gocron:latest

Binary Downloads

Download one of the attached binaries extracted from the release image:

• gocron_<version>_linux_amd64
• gocron_<version>_linux_arm64

Verify with ./gocron_<version>_linux_<arch> --version.

Image digest:

ghcr.io/flohoss/gocron:v0.13.0@sha256:efd2f87ac3df91e95866ae7c2ecd4aff1440d213cdb255c6a39f6c7026991ce8

Build Information

• Version: v0.13.0
• Build Time: 2026-09-29T07:17:20Z
• Repository: https://github.com/flohoss/gocron
• Platform: linux/amd64,linux/arm64
• Attestations: SLSA Provenance, SBOM

Features

• Reverse proxy support — new server.trusted_proxies (CIDR list) makes request logs and rate limiting use the real client IP from X-Forwarded-For when the request arrives through a trusted proxy. Without it, the direct connection IP is always used, so headers cannot be spoofed.
• Rate limiting — opt-in per-IP request limiting via server.rate_limit (disabled by default). Rejected requests get 429 Too Many Requests with Retry-After and X-RateLimit-* headers.
• CORS control — restrict cross-origin access with server.cors.allow_origins (defaults to *).
• Debug request logging — every request (method, URI, status, latency, remote_ip) is logged at log_level: debug.

Fixes

• Slow SSE subscribers no longer stall everyone — the live event stream was rewritten without the r3labs/sse dependency. Each subscriber gets its own buffer; a stalled reader is disconnected after a write timeout instead of blocking all live updates.
• Job runs stay in sync between REST fetches and live SSE updates (run lists could previously diverge after a job finished).
• Invalid cron expressions are now reported — a job whose schedule fails to parse logs an error at startup instead of silently never running.
• rclone version pinning works — a pinned version produced apt-get install -y <version> (installing a package literally named after the version string); it now installs rclone=<version>.
• Software install is Debian-only — non-Debian systems (including non-Debian Linux where apt/cleanup previously ran) are skipped safely.
• Unknown /api/* routes return a JSON 404 instead of the SPA's index.html.

Internal

• Test coverage added: scheduler 0% → 100%, software 0% → 78%, plus regression tests for the Debian guard and SSE write timeouts.
• New e2e coverage: SSE broadcasting with concurrent subscribers, software install at startup (apt, skip-if-installed, upstream script paths), and observable version pinning via a pinned not-latest apprise release.
• Dependencies: removed r3labs/sse; updated Go and web dependencies; Cypress 16, Node 26, Go 1.27.1.
• Docker Compose: Go module/build caches in named volumes for faster test cycles.

Upgrade notes

• Running behind a reverse proxy? Set server.trusted_proxies so logs and rate limiting see real client IPs. Default behavior is unchanged (XFF ignored).
• software: entries are now validated like jobs: — an entry missing name fails config validation at startup instead of being silently skipped.

Changes in This Release

• [improve] Update Go dependencies (3fe0f55) by @flohoss
• [improve] Update web and e2e dependencies (e23841b) by @flohoss
• [meta] Bump pinned compose tool versions (651ac53) by @flohoss
• [meta] Cache Go modules and build output in docker volumes (5df7030) by @flohoss
• [fix] Prevent a slow SSE subscriber from blocking all live updates (0fb4378) by @flohoss
• [fix] Keep job runs in sync between REST and SSE updates (5dd9571) by @flohoss
• [feature] Make proxy, CORS and rate limiting configurable (8dac09d) by @flohoss
• [fix] Return JSON 404 for unknown API routes (92b8021) by @flohoss
• [improve] Add end-to-end coverage for the live event stream (aa35c3c) by @flohoss
• [docs] Document server proxy, CORS and rate limiting options (86b4d98) by @flohoss
• [docs] Allow short comments in tests (db6da2d) by @flohoss
• [docs] Test all packages in the documented test command (a1c0804) by @flohoss
• [fix] Surface cron parse errors instead of silently never scheduling (9fa48b8) by @flohoss
• [fix] Disconnect stalled SSE clients after a write timeout (b986f9e) by @flohoss
• [fix] Correct rclone version pins and the Debian-only install guard (75ec00b) by @flohoss
• [improve] Add e2e coverage for software install and version pinning (12edc53) by @flohoss
• [docs] Document interactive Cypress GUI workflow (5e50ca1) by @flohoss
• [docs] Sync features list and software install notes with v0.12 behavior (4d6489a) by @flohoss

Full Changelog: v0.11.0...v0.12.0

Docker Image

docker pull ghcr.io/flohoss/gocron:v0.12.0
docker pull ghcr.io/flohoss/gocron:latest

Binary Downloads

Download one of the attached binaries extracted from the release image:

• gocron_<version>_linux_amd64
• gocron_<version>_linux_arm64

Verify with ./gocron_<version>_linux_<arch> --version.

Image digest:

ghcr.io/flohoss/gocron:v0.12.0@sha256:660d850886468915b71248456c5ca90eba423907a530d0161606bccb058912a5

Build Information

• Version: v0.12.0
• Build Time: 2026-09-26T02:54:16Z
• Repository: https://github.com/flohoss/gocron
• Platform: linux/amd64,linux/arm64
• Attestations: SLSA Provenance, SBOM

Improvements

• Added unified Prettier formatting through Docker Compose.
• Expanded test coverage for configuration, health checks, and database operations.
• Updated Go, Vue, Vite, TypeScript, Cypress, and related dependencies.
• Updated Docker Compose tooling and development workflows.
• Improved project and development documentation.
• Simplified the end-to-end dependency workflow by switching from Yarn to npm.

Changes in This Release

• [improve] Install dependencies before formatting in format service (c04835d) by @flohoss
• [docs] Standardize Git section in AGENTS.md and add VS Code settings (7e3fda1) by @flohoss
• [docs] Move development section to AGENTS.md and add common commands (c1d99fe) by @flohoss
• [refactor] Update dependencies (118a0ba) by @flohoss
• [refactor] Switch e2e to npm and rename prettierrc (5977951) by @flohoss
• [docs] Update star history chart links (460ff9f) by @flohoss
• [docs] Remove star history section (b262ef6) by @flohoss
• [refactor] Update npm dependencies (f3610e4) by @flohoss
• [improve] Update Go dependencies (d3644d8) by @flohoss
• [improve] Update web and e2e dependencies (1cbce5a) by @flohoss
• [meta] Bump pinned compose versions and document version sources (e2b455c) by @flohoss

Full Changelog: v0.10.0...v0.11.0

Docker Image

docker pull ghcr.io/flohoss/gocron:v0.11.0
docker pull ghcr.io/flohoss/gocron:latest

Binary Downloads

Download one of the attached binaries extracted from the release image:

• gocron_<version>_linux_amd64
• gocron_<version>_linux_arm64

Verify with ./gocron_<version>_linux_<arch> --version.

Image digest:

ghcr.io/flohoss/gocron:v0.11.0@sha256:d5deba8be477996c99aa4122e27d1feeff178736e56c822003875675037fd6b3

Build Information

• Version: v0.11.0
• Build Time: 2026-08-28T13:11:13Z
• Repository: https://github.com/flohoss/gocron
• Platform: linux/amd64,linux/arm64
• Attestations: SLSA Provenance, SBOM

⚠️ Breaking: Database history is purged on update

This release introduces a major change to how GoCron manages its database schema. Instead of building a complex migration system, GoCron now takes a simpler and more sustainable path: the database is purged and rebuilt from scratch whenever the schema version changes. A dedicated integer schema version is stored in a schema_version table on first start. On every startup, GoCron checks if the stored version matches the expected one — if not, the database file is deleted and recreated with the latest schema. This version is independent of the app version and only increments when the database schema actually changes.

What this means for you: When updating from any previous version to v0.10.0, your existing run history and logs will be deleted. The database is recreated from scratch on first start. This is intentional and unavoidable — the old schema (job_name_normalized) was replaced with job_slug for consistent lookups. No manual action is needed; gocron handles it automatically and logs a warning.

To be clear: only the run history and logs stored in the SQLite database are affected. Your jobs themselves are defined in config.yaml and are never touched — they will continue to run exactly as configured.
What you lose is the record of past executions and their output logs.

Note: This purge-on-update behavior is a pre-1.0.0 trade-off. Before the v1.0.0 stable release, GoCron prioritizes a clean and maintainable schema over preserving historical data. Once the schema stabilizes with v1.0.0, this approach will be replaced with proper migrations that preserve your run history and logs across updates.

Features

• Per-job timeout and retries — configure timeout and retries per job, with process-group kill on timeout and default inheritance from global config
• Graceful shutdown and job cancellation — running jobs are marked as canceled on shutdown, with real job names and canceled status shown in the UI
• Unified formatting via Docker Compose — docker compose run --rm format now handles SQL, JSON, YAML, and frontend files using prettier with prettier-plugin-sql
• Canceled status in UI — shows real job name and canceled state

Improvements

• Schema-version purge system — database is automatically purged and rebuilt when the schema version (a dedicated integer, independent of the app version) doesn't match, replacing fragile ad-hoc migrations
• Job slug for consistent lookups — job_name_normalized replaced with job_slug throughout
• Manual-only jobs — jobs without a cron expression are now treated as manual-only instead of crashing
• Zero-config quick start — GoCron creates a default config with example jobs on first start, so new users can just run the container and open the browser without any setup
• Clearer README — restructured documentation with a quick start guide, full configuration reference, failure semantics, and safety section for new users
• Iconify Tailwind utility classes — replaced unplugin-icons with direct Iconify usage
• Echo v5 migration — migrated to Echo v5 with explicit CORS config and pointer-based context API
• Comprehensive test coverage — added backend tests for ExecuteJob, IsIdle, StopRunning, and DB queries; added e2e tests for file ops, pipes, permissions, exit codes, timeouts, retries, stderr, and env edge cases
• CI improvements — e2e tests split by feature and added to CI, backend logs captured on failure

Fixes

• Jobs with no cron no longer crash on startup
• Command substitution e2e test output trimming
• VCS stamping disabled in e2e Go build
• Correct icon usage

Dependencies

• Bumped Go to 1.26.4
• Bumped actions/setup-go to 7, actions/checkout to 7
• Switched frontend workflow from Yarn to npm

Changes in This Release

• Bump Go version to 1.26.4 (4162a81) by @flohoss
• Bump actions/checkout from 6 to 7 in the github-actions group (7143eb2) by @dependabot[bot]
• Merge pull request #56 from flohoss/dependabot/github_actions/github-actions-640176b5ab (294c422) by @flohoss
• [refactor] Migrate to Echo v5 with explicit CORS config and pointer-based context API (7754ef9) by @flohoss
• [meta] Switch frontend workflow from Yarn to npm (c6a9ae0) by @flohoss
• [refactor] Replace unplugin-icons with Iconify Tailwind utility classes (74a5d9b) by @flohoss
• [improve] Update e2e test formatting and bump Cypress version (4bb989a) by @flohoss
• [docs] Add agent guidance file (f1e7d71) by @flohoss
• [fix] Use the correct icon (a74ed5c) by @flohoss
• [refactor] Format healthcheck test struct alignment (b5930d1) by @flohoss
• [feature] Add command timeout with process group kill (4812130) by @flohoss
• [feature] Add per-job timeout, retries, and default inheritance (ca7776c) by @flohoss
• [feature] Wire timeout, retries, and error logging into job execution (4180a6b) by @flohoss
• [feature] Add e2e tests for timeout, retries, envs, and fail-fast (dfff85c) by @flohoss
• [docs] Add safety section, config excerpt, and e2e instructions (a63867c) by @flohoss
• [feature] Add graceful shutdown and job cancellation semantics (58c7b6b) by @flohoss
• [feature] Show canceled status and real job name in UI (7cb1fd9) by @flohoss
• [improve] Enable air send_interrupt for dev graceful shutdown (93eb61b) by @flohoss
• [improve] Split e2e tests by feature and add to CI (0102ce2) by @flohoss
• [refactor] Bump manual job sleep duration for shutdown testing (35a99f7) by @flohoss
• [docs] Restructure README for new users (6bb9f64) by @flohoss
• Revert "[docs] Restructure README for new users" (346b657) by @flohoss
• [docs] Restructure README for new users (e0eed9b) by @flohoss
• [fix] Build and run binary directly in e2e instead of air (479db68) by @flohoss
• [fix] Build and run binary directly in e2e instead of air (463f427) by @flohoss
• Merge branch 'main' of https://github.com/flohoss/gocron (6b5a78f) by @flohoss
• [improve] Expand slugify tests to full coverage (f4d5ee5) by @flohoss
• [improve] Add tests for formatTime, timestamps, context cancel, and expand edge cases (c46ea80) by @flohoss
• Bump actions/setup-go from 6 to 7 in the github-actions group (f525004) by @dependabot[bot]
• [improve] Add tests for formatTime, timestamps, context cancel, and expand edge cases (0045c6c) by @flohoss
• Merge branch 'main' of https://github.com/flohoss/gocron (b26d4ac) by @flohoss
• Merge pull request #57 from flohoss/dependabot/github_actions/github-actions-e986305a06 (41d7160) by @flohoss
• [fix] Capture backend logs on e2e failure in CI (b34bd38) by @flohoss
• [fix] Disable VCS stamping in e2e go build (8e69ff4) by @flohoss
• [improve] Comment buildvcs flag and simplify CI e2e workflow (f196c5e) by @flohoss
• [improve] Add e2e tests for timeout+retry, stderr, empty output, and env edge cases (1e138d5) by @flohoss
• [docs] Clarify that commands run through sh -c, no need to wrap manually (34daff3) by @flohoss
• [improve] Add backend tests for ExecuteJob, IsIdle, StopRunning, and DB queries (1fcb5f5) by @flohoss
• [improve] Add e2e tests for file ops, pipes, permissions, and exit codes (b4da7b1) by @flohoss
• [refactor] Replace job_name_normalized with job_slug for consistent lookups (9df9d56) by @flohoss
• [fix] Add DB migration for old schema and fix frontend job reference (ad792cb) by @flohoss
• [fix] Trim wc output in command substitution e2e test (677fe0c) by @flohoss
• [fix] Treat jobs with no cron as manual-only instead of crashing (5cbc35e) by @flohoss
• [refactor] Replace ad-hoc migration with schema-version purge (c2fbb00) by @flohoss
• [feature] Add unified prettier formatting via Docker Compose (4675fa6) by @flohoss
• [docs] Update AGENTS.md and README (a890c91) by @flohoss
• [improve] Add tests for GetJobByName, GetDBName, GetAllCrons and healthcheck (ffc2fd5) by @flohoss
• [refactor] Use integer schema version independent of app version (18e844f) by @flohoss

Full Changelog: v0.9.14...v0.10.0

Docker Image

docker pull ghcr.io/flohoss/gocron:v0.10.0
docker pull ghcr.io/flohoss/gocron:latest

Binary Downloads

Download one of the attached binaries extracted from the release image:

• gocron_<version>_linux_amd64
• gocron_<version>_linux_arm64

Verify with ./gocron_<version>_linux_<arch> --version.

Image digest:

ghcr.io/flohoss/gocron:v0.10.0@sha256:ee5e887396e4ff21aa836336c6b1a6f033a045119bc1d1be9e43b295d816327a

Build Information

• Version: v0.10.0
• Build Time: 2026-08-03T06:16:53Z
• Repository: https://github.com/flohoss/gocron
• Platform: linux/amd64,linux/arm64
• Attestations: SLSA Provenance, SBOM

This release is primarily focused on maintenance and dependency updates to keep the project current, secure, and compatible with the latest tooling.

Highlights

• Updated Go module dependencies
• Updated web dependencies and development dependencies
• Upgraded Cypress to v15.16.0 and refreshed related test tooling
• Updated GitHub Actions dependencies, including actions/upload-artifact
• Bumped Go and Cypress versions across the project
• Refactored end-to-end GUI tests for improved maintainability

Documentation

• Added a RepoRanker badge to the README
• Improved README badge formatting and cleanup

No functional changes or new features are included in this release. This update focuses on project maintenance, dependency hygiene, and CI/CD improvements.

Changes in This Release

• Bump actions/upload-artifact from 4 to 7 in the github-actions group (765a06f) by @dependabot[bot]
• Merge pull request #55 from flohoss/dependabot/github_actions/github-actions-674967a53d (a43b8b9) by @flohoss
• Add RepoRanker badge to README (fc556e3) by @flohoss
• Add spacing between README badges (797943e) by @flohoss
• Update Go module dependencies (77d98c2) by @flohoss
• Bump web dependencies and devDependencies (b5d59f1) by @flohoss
• chore(e2e): bump Cypress to ^15.16.0 (6dcb088) by @flohoss
• Bump Go and Cypress versions (f33027c) by @flohoss
• Refactor e2e GUI test; remove README note (ec2f731) by @flohoss

Full Changelog: v0.9.13...v0.9.14

Docker Image

docker pull ghcr.io/flohoss/gocron:v0.9.14
docker pull ghcr.io/flohoss/gocron:latest

Binary Downloads

Download one of the attached binaries extracted from the release image:

• gocron_<version>_linux_amd64
• gocron_<version>_linux_arm64

Verify with ./gocron_<version>_linux_<arch> --version.

Image digest:

ghcr.io/flohoss/gocron:v0.9.14@sha256:a6384f7ad9cee2c5f781789ce683641a1333abd4c0062d0c134c273883821904

Build Information

• Version: v0.9.14
• Build Time: 2026-06-08T15:57:53Z
• Repository: https://github.com/flohoss/gocron
• Platform: linux/amd64,linux/arm64
• Attestations: SLSA Provenance, SBOM

Introduce a package-level httpClient (defaulting to http.DefaultClient) and use it for requests so tests can substitute a custom client/transport. Update healthcheck tests to avoid httptest.NewServer (which binds ports) by adding roundTripFunc and withTestClient helpers that install a custom http.Client Transport returning mocked http.Responses. Tests now use fixed example URLs and the mocked transport; the original client is restored via t.Cleanup.

Changes in This Release

• Make HTTP client injectable for tests (50fcf7c) by @flohoss

Full Changelog: v0.9.12...v0.9.13

Docker Image

docker pull ghcr.io/flohoss/gocron:v0.9.13
docker pull ghcr.io/flohoss/gocron:latest

Binary Downloads

Download one of the attached binaries extracted from the release image:

• gocron_<version>_linux_amd64
• gocron_<version>_linux_arm64

Verify with ./gocron_<version>_linux_<arch> --version.

Image digest:

ghcr.io/flohoss/gocron:v0.9.13@sha256:89db513849e4fa65e7376c18d28f11c9f84ec2a3c51b6cdec16b447e5e39c8ec

Build Information

• Version: v0.9.13
• Build Time: 2026-05-13T05:03:28Z
• Repository: https://github.com/flohoss/gocron
• Platform: linux/amd64,linux/arm64
• Attestations: SLSA Provenance, SBOM

Breaking Changes

The --config flag now expects a path to the actual YAML config file, not a config folder. For example, use /path/to/config.yaml instead of /path/to/config or ./config.
Existing setups that relied on the old config-folder flag behavior must update their startup arguments before upgrading.

The SQLite configuration is now defined under a dedicated db section. Database directory is configured with db.location, and database file name is configured with db.name.

Job detail routes now use generated URL-safe slugs instead of raw job names. Slugs are derived automatically from the configured job name and must be unique.

Migration

Update your startup command to point --config directly to the config file.
Move any SQLite path customization into the db section.
To keep the previous default behavior, set db.location to . (the same folder as the config file) and leave db.name as db.sqlite.
Ensure job names produce unique slugs if you use the web UI, since duplicate slugs are now rejected during config loading.

Changes in This Release

• Add reusable CI workflow and unit tests (f343e58) by @flohoss
• Replace Codecov with go-coverage-report (3d4cc33) by @flohoss
• Remove deprecated reuse-go input from go-coverage-report (473e5ae) by @flohoss
• Replace Codecov badge with go-coverage-report badge (b666f66) by @flohoss
• Add unit tests for config, buildinfo and CLI (4c1467f) by @flohoss
• Refactor Config File Path Handling (a8c3729) by @flohoss
• Add Configurable SQLite Database Settings (d16d5e1) by @flohoss
• Add Slug-Based Job Routes (26baabf) by @flohoss
• Clarify and reorder test instructions in README (6a99bbf) by @flohoss
• Merge pull request #54 from flohoss/53-refactor-config-path-handling-and-add-configurable-sqlite-db-namelocation (d86fc18) by @flohoss
• Rename upload-codecov to generate-coverage-report (6fadcde) by @flohoss

Full Changelog: v0.9.11...v0.9.12

Docker Image

docker pull ghcr.io/flohoss/gocron:v0.9.12
docker pull ghcr.io/flohoss/gocron:latest

Binary Downloads

Download one of the attached binaries extracted from the release image:

• gocron_<version>_linux_amd64
• gocron_<version>_linux_arm64

Verify with ./gocron_<version>_linux_<arch> --version.

Image digest:

ghcr.io/flohoss/gocron:v0.9.12@sha256:914f81c74d05623f94d70c021f6c8a8aac94d6f91f3cb3005289c3ff920d61f3

Build Information

• Version: v0.9.12
• Build Time: 2026-05-11T04:39:31Z
• Repository: https://github.com/flohoss/gocron
• Platform: linux/amd64,linux/arm64
• Attestations: SLSA Provenance, SBOM

This release improves standalone binary usage and deployment flexibility.

Added startup flag --config to use a custom config folder (config.yaml and sqlite DB are created/used there)
Added --version output with embedded build metadata
Embedded the web UI into the binary for a more self-contained runtime
Improved first-run config file creation behavior
Release artifacts now include Linux binaries for amd64 and arm64, plus checksums
Notes
Linux release binaries are attached as:

gocron_<version>_linux_amd64
gocron_<version>_linux_arm64

Use:
./gocron_<version>linux<arch> --version

Thanks @JuliusFreudenberger for porting this package to nix ❤️

Changes in This Release

• Make config paths configurable (2e41a8e) by @flohoss
• Add build metadata package (0a5aae4) by @flohoss
• Add --config and --version startup flags (8d6d7b2) by @flohoss
• Embed web UI into binary with filesystem fallback (028913a) by @flohoss
• Update Dockerfiles for embedded web UI and build metadata (5596ddf) by @flohoss
• Publish standalone linux binaries as release artifacts (fefacbd) by @flohoss
• Update .gitignore and README for standalone binary (c243ddd) by @flohoss
• Merge pull request #52 from flohoss/51-feat-standalone-binary-distribution-with-embedded-web-ui-and-cli-flags (3ca16f6) by @flohoss
• Fix README release binary wording and links (125174b) by @flohoss
• Add dedicated web/e2e Cypress package & compose services (34c84f0) by @flohoss
• Add Cypress tests for GUI navigation & modals (326cf9e) by @flohoss
• Add unit tests and CI test job (18d7e6c) by @flohoss
• Add tests for config and command execution (404de2d) by @flohoss
• Add default starter jobs and tests (b7b8472) by @flohoss
• Use 'UTC' as default timezone (2aed82e) by @flohoss

Full Changelog: v0.9.10...v0.9.11

Docker Image

docker pull ghcr.io/flohoss/gocron:v0.9.11
docker pull ghcr.io/flohoss/gocron:latest

Binary Downloads

Download one of the attached binaries extracted from the release image:

• gocron_<version>_linux_amd64
• gocron_<version>_linux_arm64

Verify with ./gocron_<version>_linux_<arch> --version.

Image digest:

ghcr.io/flohoss/gocron:v0.9.11@sha256:47a7af0e744a26d1c096a86212c2990723eff2a0ca82b43349aabf26ee271af2

Build Information

• Version: v0.9.11
• Build Time: 2026-05-08T18:35:14Z
• Repository: https://github.com/flohoss/gocron
• Platform: linux/amd64,linux/arm64
• Attestations: SLSA Provenance, SBOM

This is mostly a cleanup release to make sure all versions are working together.
Vite is pushing for v8 but non of the major packages are ready and working 100% yet.
I will keep everything at v7 for now and see when i can upgrade tailwind, daisyui etc.

Changes in This Release

• Use cypress image anchor in compose.yml (16e30bc) by @flohoss
• Bump Go, Air, and sqlc versions (ee25bdc) by @flohoss
• Bump sqlc generated version to v1.31.1 (139dc5d) by @flohoss
• Update Go module dependency versions (3babba6) by @flohoss
• Normalize dependabot.yml quoting and remove gomod (5002509) by @flohoss
• Update web dependencies and yarn.lock (732a574) by @flohoss

Full Changelog: v0.9.9...v0.9.10

Docker Image

docker pull ghcr.io/flohoss/gocron:v0.9.10
docker pull ghcr.io/flohoss/gocron:latest

Image digest:

ghcr.io/flohoss/gocron:v0.9.10@sha256:d105f241dbf65adf18a240c99144be2567dd992128e529a1740449eeab0416b1

Build Information

• Version: v0.9.10
• Build Time: 2026-05-03T10:37:24Z
• Repository: https://github.com/flohoss/gocron
• Platform: linux/amd64,linux/arm64
• Attestations: SLSA Provenance, SBOM

Bugs

Docker Image Tags

Previous releases were missing the latest tag and versioned aliases (v0.x, v0.x.x) on the GitHub Container Registry. Only the exact version tag (e.g. v0.9.9) was being pushed — latest and the shorter aliases were never published.

Root cause: The CI pipeline was using docker/build-push-action with Docker metadata to generate tags, but the image field in compose.yml was also being picked up by Bake and overriding all metadata-generated tags with a single bare image name, discarding everything else except the version tag.

What i changed:

The pipeline now drives builds directly from the compose file using Docker Bake — the same file used locally for development. This means the release build and the local build share a single source of truth.

As part of this, all tool versions (golang, node, debian, air, sqlc) are now centralized in the compose.yml under a single x-build-args block. CI reads them from there automatically, so there is no more version drift between local and production builds.

Tags are now fully managed by docker/metadata-action and correctly publish on every release:

• latest
• v0.9.9
• v0.9
• v0

A big thanks to @t4nki for reporting the missing latest tag and prompting this cleanup!

Changes in This Release

• Bump the gomod group with 2 updates (158819b) by @dependabot[bot]
• Bump the github-actions group with 4 updates (89f3a11) by @dependabot[bot]
• Merge pull request #47 from flohoss/dependabot/github_actions/github-actions-6534b7915f (8fd8c7e) by @flohoss
• Merge pull request #46 from flohoss/dependabot/go_modules/gomod-daad1015fd (d6e9299) by @flohoss
• Remove .templ build exclusion (9343715) by @flohoss
• Use docker bake in CI and unify container args (09f4b18) by @flohoss
• Bump Go to 1.26 and update indirect deps (374fa2e) by @flohoss
• Add V_NODE arg and specify release Dockerfile (d04459b) by @flohoss
• Bump softprops/action-gh-release from 2 to 3 in the github-actions group (54e53d9) by @dependabot[bot]
• Merge pull request #49 from flohoss/dependabot/github_actions/github-actions-e24c266ee1 (8d049e9) by @flohoss
• Add semver tags and use default image name (b600939) by @flohoss
• Make GH release draft; update compose & docs (470303a) by @flohoss

Full Changelog: v0.9.8...v0.9.9

Docker Image

docker pull ghcr.io/flohoss/gocron:v0.9.9
docker pull ghcr.io/flohoss/gocron:latest

Image digest:

ghcr.io/flohoss/gocron:v0.9.9@sha256:70aa2e54a6383f23a45daeedc4de0f1eb3555ab96ebdbba88755db1b99149465

Build Information

• Version: v0.9.9
• Build Time: 2026-05-03T09:53:40Z
• Repository: https://github.com/flohoss/gocron
• Platform: linux/amd64,linux/arm64
• Attestations: SLSA Provenance, SBOM

Changes in This Release

• Add sqlc/yarn services and wait-for-url script (ee362ed) by @flohoss
• Add Cypress E2E tests and selectors (54b0680) by @flohoss
• Add GitHub Actions workflow for tests (21ad324) by @flohoss
• Add /health endpoint and Docker healthchecks (f8057e4) by @flohoss
• Increase Docker healthcheck timing in compose.yml (2bb8223) by @flohoss
• Bump the gomod group with 2 updates (41f0cb2) by @dependabot[bot]
• Move changes and changelog earlier in release notes (7eb484d) by @flohoss
• Remove GitHub Actions test workflow (adff86c) by @flohoss
• Bump web dependencies and update lockfile (f744d27) by @flohoss
• Add 'Run tests' instructions to README (f02e881) by @flohoss
• Refactor router init and remove scalar API asset (ad87cc4) by @flohoss
• Bump Go deps; change README service to backend (fa2f157) by @flohoss
• Merge pull request #45 from flohoss/dependabot/go_modules/gomod-5b7dc2c640 (4dfbf15) by @flohoss
• Make command field required in OpenAPI (d0daaee) by @flohoss

Full Changelog: v0.9.7...v0.9.8

Docker Image

docker pull ghcr.io/flohoss/gocron:v0.9.8

Image digest:

ghcr.io/flohoss/gocron:v0.9.8@sha256:d1a9cfaf2f85b1acf50ea69e625bf8b3a0babe88b38ddef40fce771e6c5134ac

Build Information

• Version: v0.9.8
• Build Time: 2026-03-18T12:51:30Z
• Repository: https://github.com/flohoss/gocron
• Platform: linux/amd64,linux/arm64
• Attestations: SLSA Provenance, SBOM

Docker Image

docker pull ghcr.io/flohoss/gocron:v0.9.7

Image digest:

ghcr.io/flohoss/gocron:v0.9.7@sha256:ca3b58035b72f868aecb20fff0ecc1cbe40e6e511539d77244fadae89da9ee3f

Build Information

• Version: v0.9.7
• Build Time: 2026-02-09T20:07:05Z
• Repository: https://github.com/flohoss/gocron
• Platform: linux/amd64,linux/arm64
• Attestations: SLSA Provenance, SBOM

Changes in This Release

• Support disable_fail_fast in jobs (7ae596e) by @flohoss
• Navigate to root after reloading jobs (c614613) by @flohoss

Full Changelog: v0.9.6...v0.9.7

Docker Image

docker pull ghcr.io/flohoss/gocron:v0.9.6

Image digest:

ghcr.io/flohoss/gocron:v0.9.6@sha256:02ea25b974cebd355b3d84d08ed55bcbb903dfb32f0511a80f9d2e79716d38b6

Build Information

• Version: v0.9.6
• Build Time: 2026-01-29T21:10:55Z
• Repository: https://github.com/flohoss/gocron
• Platform: linux/amd64,linux/arm64
• Attestations: SLSA Provenance, SBOM

Changes in This Release

• Update Prettier config and minor Vue formatting (a2d3580) by @flohoss
• Inject APP_VERSION from environment into API config (99ebd73) by @flohoss
• Bundle Scalar API Reference locally and update usage (d503f01) by @flohoss
• Replace FontAwesome with unplugin-icons and Iconify (223db82) by @flohoss
• Update AppHeader labels and tooltips for clarity (607ec2d) by @flohoss

Full Changelog: v0.9.5...v0.9.6