Skip to main content

2026 Changelog

1.0.0-beta.2 (in progress)​

January – May 2026

⚠ Breaking Changes​

Web Scraping & Trackers​

Features​

  • web-scraping: implement API trackers - track changes in arbitrary HTTP API responses alongside page trackers (secutils@2c1f687)
  • web-scraping: add debug functionality to page trackers with live execution output (secutils@ed867f5)
  • web-scraping: capture page screenshots in debug mode (secutils@c7083c9)
  • web-scraping: support "Camoufox" browser engine for page trackers to improve stealth scraping (secutils@c88c540)
  • web-scraping: add support for tracker execution log (secutils@3b5a80e)
  • web-scraping: introduce support for scheduled_at and last_ran_at tracker fields (secutils@61febb8)
  • web-scraping: add support for importing Playwright scenarios as page tracker extractor scripts (secutils@1947376)
  • web-scraping: allow users to configure page trackers to bypass HTTPS errors (secutils@98a9134)
  • web-scraping: make tracker schedule picker more flexible (secutils@563d1e0)
  • web-scraping: switch to Monaco-based diff viewer for tracker revisions (secutils@3cb086a)
  • web-scraping: add diffs to tracker notification emails (secutils@58688f3)
  • web-scraping: support new Chart mode for numeric tracker revision values (secutils@0c7d5a5)
  • web-scraping: support full screen mode for Chart tracker revision view (secutils@faf8f56)
  • web-scraping: make Retrack webhook payload size configurable and raise the default from 2 MB to 10 MB (secutils@8e70d34)

Fixes​

  • web-scraping: keep non-scheduled trackers at the bottom when sorting by next/last run (secutils@dcdc040)
  • web-scraping: properly handle non-string engine type (secutils@d2e3288)

Webhooks​

Features​

  • webhooks: add support for MITM responders - intercept, inspect, and modify requests forwarded to an upstream server (secutils@7f25620)
  • webhooks: add support for response tracking in MITM mode (secutils@a518340)
  • webhooks: add support for insecure proxy requests and custom proxy request timeouts (secutils@a157c79)
  • webhooks: auto-decompress proxy response body and simplify body handling in scripts (secutils@ba7ab83)
  • webhooks: drop support for path-based responders and allow subdomains for all subscriptions (secutils@6690e63)
  • webhooks: split proxy and non-proxy headers in the request history grid, hiding proxy headers by default (secutils@7f15c45)
  • webhooks: add examples for securing responders (secutils@58945e9)

Fixes​

  • webhooks: enforce HTTP/1.1 in op_proxy_request (secutils@c7dcd4c)
  • webhooks: capture real client IP via X-Real-IP / X-Forwarded-For proxy headers (secutils@f05dbb7)

Digital Certificates​

Features​

  • certificates: add support for importing certificate templates (secutils@969eef4)

Fixes​

  • certificates: improve private key handling error messages (secutils@8b69f91)
  • certificates: properly parse Distinguished Name fields with commas (secutils@7d79d37)

Platform​

Features​

  • platform: add support for user tags - label and filter items across all utilities (secutils@c56d3a7)
  • platform: introduce support for user scripts - reusable JavaScript/TypeScript snippets (secutils@3427ec8)
  • platform: introduce support for user secrets - securely store and reference sensitive values in scripts (secutils@9d9bc39)
  • platform: add support for data export and data import (secutils@a879a84)
  • platform: include user settings in data export/import (secutils@a1afefc)
  • platform: store global scope value as a user setting (secutils@8f0b9f4)
  • platform: use dedicated "empty state" for the case when no items are visible due to filters (secutils@2e3b608)
  • platform: add support for user API keys (secutils@64a261b)
  • platform: add support for a dedicated notification email destination with verification flow, separate from the login email (secutils@81379e2)
  • platform: implement RFC 8058 one-click unsubscribe for product notification emails (secutils@81379e2)
  • platform: make top-level sidebar groups collapsible (secutils@0df267e)

Fixes​

  • platform: properly handle import conflicts in responders (secutils@8adaf82)
  • platform: properly handle large import sizes (secutils@4438a40)
  • platform: fix import for responders without history (secutils@53de317)
  • platform: disable bulk conflict resolution actions if there are no conflicts selected (secutils@8c88a5b)
  • platform: properly strip responder sub-domain prefixes during import when necessary (secutils@1afd567)
  • platform: consistently handle expired session (secutils@50b8ea1)

UI Improvements​

Features​

Fixes​

  • ui: update all util tables to default sort by "Last updated" descending (secutils@c2e7897)
  • ui: improve handling of the tags column width (secutils@0e5c06a)
  • ui: increase spacing between icons in responder and tracker grids (secutils@0217c33)

Performance​

HTML Apps​

  • html-app: create JWT Debugger HTML app (secutils@893e871)
  • html-app: create SAML Decoder HTML app (secutils@8b609a8)
  • html-app: create SAML Mock IDP HTML app (secutils@af75f92)
  • html-app: create Markdown-to-HTML converter HTML app (secutils@c2cac23)
  • html-app: extend Markdown-to-HTML app with PDF export (secutils@936b6f7)
  • html-app: extend SAML Decoder HTML app to support both SAML responses and requests (secutils@203a5b6)
  • html-app: improve SAML Mock IdP HTML app to auto-extract destination from SAML request (secutils@024cc93)
  • html-app: create PEM Certificate Decoder HTML app for X.509 inspection (secutils@82fea3d)
  • html-app: create HTTP Echo / Mock Response HTML app for sharing pre-baked mock responses via a single URL (secutils@ff940c0)
  • html-app: create PDF Extractor HTML app with optional OCR (secutils@84dac28)
  • html-app: create Forecast HTML app for in-browser time-series forecasting (secutils@27afe8f)
  • html-app: introduce per-tool AI-agent skills convention (<tool>.skill.md) so coding assistants can drive each tool from a single fetch (secutils@f0ab52d)

API & OpenAPI​

Features​

Documentation​

  • docs: allow importing samples directly from documentation (secutils@748c60f)
  • docs: migrate towards fully automated docs screenshot generation (secutils@20fe1b8)
  • docs: add ARCHITECTURE.md (secutils@b4ec50f)
  • docs: rename /llms.txt to /llms-index.txt and /llms-full.txt to /llms.txt (secutils@71e2f70)
  • docs: add a Notification Email guide covering verification, change/remove flow, and RFC 8058 one-click unsubscribe (secutils@81379e2)
  • docs: publish per-guide SKILL.md companions under /docs/guides/**/SKILL.md so AI agents can pull condensed, task-shaped instructions (secutils@0b2d0df)
  • docs: refresh all blog posts with up-to-date project information (secutils@12ae0bf)

Infrastructure & DevOps​

Enhancements​

  • api: migrate from unmaintained trust_dns_resolver to hickory_resolver (secutils@2770170)
  • security: upgrade to Ory Kratos v26.2.0 (secutils@6d48a86)
  • api: switch to jemalloc memory allocator (secutils@398a2fb)
  • api: improve DB connection reliability and include DB status in API status (secutils@0586ac2)
  • build: introduce E2E test infrastructure with Playwright and Docker Compose (secutils@663ad4c)
  • build: add commands to deploy components to private Docker registry (secutils@dd62fd0)
  • build: self-host Google fonts (secutils@c6208be)
  • build: pin base Docker images (secutils@b9c44a6)
  • web-security: use BTreeSet instead of HashSet for CSP directives for stable ordering (secutils@3f52864)
  • Dependency upgrades across all components