RhodeCode Enterprise 5.14.0 Release Notes

Release Date

  • 2026-09-10

New Features

  • UI: refreshed the main RhodeCode interface with updated navigation, styling, repository pages, and file browsing layout.

  • Repository permissions: repository admins can now assign existing user groups, including externally synchronized LDAP groups, to repositories they administer.

  • SSH operations: added a process health probe for the sshd container that can detect accumulated SSH wrapper and Git transport processes.

  • rcstack: added Git-over-SSH smoke and stress checks to validate clone, commit, push, and cleanup workflows through the full SSH path.

General

  • SSH: Git-over-SSH operations now run through a managed subprocess lifecycle with process group cleanup and configurable timeouts.

  • SSH: added configurable Git operation timeout, Git hook timeout, and termination grace settings for SSH Git commands.

  • Authentication: added rc-normalize-extern-type to normalize external authentication extern_type values before downgrade to older releases.

  • Authentication: improved compatibility for users whose external authentication provider stores a different canonical uid than its legacy plugin name.

Security

  • Repository permissions: regular users still need repository.admin on a repository before they can assign user groups to that repository. Managing the user group object itself continues to require user group permissions.

Fixes

  • SSH: fixed Git-over-SSH subprocess cleanup so interrupted or timed out Git transport commands do not leave stale child processes behind.

  • SSH: fixed Git pre/post pull hook waits so SSH wrapper processes do not wait indefinitely for stalled hook results.

  • Hooks: the SSH hook callback daemon now respects runtime Celery broker, result backend, and hook timeout environment overrides.

  • Authentication: fixed downgrade compatibility for users created by LDAP group, CAS, token, and SAML authentication providers.

  • Pull requests: fixed EE reviewer rule user autocomplete behaviour.

Upgrade notes

  • RhodeCode 5.14.0 is a scheduled feature release.

  • Review the new SSH Git operation settings for large repositories or long-running SSH Git operations. New installations get the defaults from the generated configuration: ssh.executable.git_ext_config enabled, ssh.git.operation_timeout_seconds = 3600, and ssh.git.terminate_grace_seconds = 10. Existing live configuration files may need these settings added explicitly after upgrade.

  • The SSH process healthcheck is opt-in and requires RC_SSH_HEALTH_* environment variables in the sshd service. Without those variables the process healthcheck stays inactive. Recommended production values are RC_SSH_HEALTH_MAX_WRAPPERS = 40, RC_SSH_HEALTH_MAX_GIT_PROCESSES = 60, RC_SSH_HEALTH_MAX_PROCESS_AGE_SECONDS = 7200, and RC_SSH_HEALTH_MAX_RSS_MB = 4096.

  • LDAP and other external authentication deployments that plan to downgrade to older releases should run rc-normalize-extern-type before downgrade and keep the dry-run output as an audit trail.

  • If rcstack is used, upgrade rcstack as well so the SSH healthcheck wiring and SSH smoke/stress tooling are available.