RhodeCode Enterprise 5.12.0 Release Notes

Release Date

  • 2026-04-28

New Features

  • Authentication: plugins can now declare accepted_extern_types to authenticate users bound to a different (but compatible) extern_type. The LDAP plugin uses this to transparently accept users previously created by the LDAP group plugin.

  • Admin: added settings_system_info_rcstack_update route to support triggering rcstack updates from the System Information page.

General

  • Dependencies: upgraded Pyramid to 2.1.0.

  • Dependencies: upgraded Celery to 5.6.3, gevent to 26.4.0, gunicorn to 25.3.0, greenlet to 3.4.0, zope.interface to 8.3.

  • Dependencies: upgraded requests to 2.33.1, cryptography to 46.0.7, orjson to 3.11.8, markdown to 3.8.1, pygments to 2.20.0.

  • Dependencies: upgraded lxml to 6.1.0, xmlsec to 1.3.17, nbconvert to 7.17.1, tornado to 6.5.5, aiohttp to 3.13.4, pyasn1 to 0.6.3.

  • Dependencies: upgraded pytest to 9.0.3 and related test plugins.

  • Dependencies: bumped rhodecode-tools to 4.5.0.

  • VCS: available_aliases now respects the order configured in vcs.backends instead of using a hard-coded order, while still ensuring Mercurial remains internally available.

  • Archive cache: filesystem metadata writes are now atomic (tmp file + os.replace) so concurrent writers can no longer leave a torn JSON key file behind.

Security

Fixes

  • archive-cache: corrupt or torn metadata key files are now pruned during eviction and reported via a new corrupt_removed field instead of aborting the sweep.

  • archive-cache: access-stat updates are now best-effort and a failed write no longer interrupts the archive fetch or corrupts the key file.

  • archive-cache: get_statistics skips corrupt metadata files instead of raising.

  • auth: fixed docs links on the authentication plugin admin pages so they point to the 5.x documentation.

Upgrade notes

  • RhodeCode 5.12.0 is a scheduled feature release.

  • Pyramid has been upgraded from 2.0.2 to 2.1.0; review any custom Pyramid extensions or rcextensions hooks that depend on internal Pyramid APIs.

  • LDAP deployments: the LDAP plugin now also authenticates users whose extern_type is ldap_group, enabling transparent migration from the LDAP group plugin.

  • To enable UI-based rcstack updates, run ./rcstack update-server up on your host machine.