coolify
v4.7.5An open-source, self-hostable PaaS alternative to Vercel, Heroku & Netlify that lets you easily deploy static sites, databases, full-stack applications and 360+ one-click services on your own servers.
- Maintenance
- Active2442 commits in 3 months · bus factor 1
- License
- Apache-2.0Permissive · OSI-approved
- Security
- 30 advisories3 critical, 14 high, 6 medium, 7 low
- Supported versions
- No scheduleendoflife.date does not track this project
66.1k stars · 6k forks · 259 open issues · last release 5 days ago · data checked 4 hours ago
Breaking changes
What to check before upgrading, taken from the notes of the last 30 releases.
- v4.7.0Nov 9, 2026
Breaking Changes
- Cancelled the older queued webhook deployments of an application by default when a newer push arrives, so only the latest commit is built (#10921, #7678)
- It works per application, pull request and server
Advanced>Deploymentandis_auto_cancel_queued_deployments_enabledin the applications API turn it off- Manual, API, restart and rollback deployments are never cancelled
- An opt-in setting,
is_auto_cancel_building_deployments_enabledin the API, also stops an older webhook deployment that is still building, a deployment that started to replace containers always finishes cancel_previous(none,queuedorbuilding) on/api/v1/deployand the MCPdeploytool cancels the older webhook, API and MCP deployments, the default isnone- Limited the cloud provider token API to team admins and owners
- Other members get
403 - Moved the Resend sender to the new
resend_from_addressandresend_from_namefields, API clients must use the new fields - A migration copies the current values
Removed
Copy from instance settingsfrom the email notification page, selectUse system-wide settingsinstead- The unused MinIO client from the Coolify image
- v4.6.0Nov 2, 2026
Breaking Changes
- Require the new
deleteability, orroot, for every delete through the API and the MCP server, an API token withwritealone can no longer delete resources, environment variables, storages, backups, scheduled tasks or tags, or detach a tag
Removed
- Remove the Windows support with Docker Desktop,
docker-compose.windows.ymland.env.windows-docker-desktop.example, and the testing host image on Docker Hub, which only it used - Remove the
next,sha-and-rc.N.image tags, prereleases and nightlies take their place, and themaintag on docker.io, it moves on ghcr.io alone - Remove the workflow that deleted every untagged image on ghcr.io, one run would delete the platform images and attestations of every release
- Remove the new team button from the team settings
- Remove the git-cliff workflow that generated
CHANGELOG.md, it is written by hand - Remove the temporary hotfix release workflow, patch branches release hotfixes
- Remove the workflow that moved pull requests to
mainornextby their category, for now - Remove the Claude workflow and the temporary workflow and image of the PHP base image
- Require the new
- v4.5.1Oct 27, 2026
Breaking Changes
- Removed the "Remove from Coolify only" service delete option. A normal delete now works when the server is unreachable, and the services API rejects
delete_from_coolify_onlywith 422. - Removed the Highlight log drain because the service ended. Coolify stops its running containers.
- Removed the "Remove from Coolify only" service delete option. A normal delete now works when the server is unreachable, and the services API rejects
- v4.5.0Oct 23, 2026
Breaking Changes
- API tokens now need the
deployability to run scheduled tasks, change the proxy or custom log drains, and trigger server side effects such as resource deletion, storage access, provider operations, and database imports (#12194, #12198) - API backup execution messages are hidden unless the token has the
read:sensitiveorrootability (#12151) - Removed the
POST /api/v1/enableAPI endpoint (#12163) - Docker Compose files with
scaleorreplicasgreater than one are now rejected (#12213, fixes #5480)
- API tokens now need the
- v4.3.22Sep 18, 2026
Breaking Changes
- Removed host-path configuration for persistent volumes from the UI and API. API requests that include
host_pathare now rejected.
- Removed host-path configuration for persistent volumes from the UI and API. API requests that include
- v4.3.19Sep 10, 2026
Breaking Changes (well not breaking, but kinda, not sure haha)
- Made Sentinel mandatory on regular servers. Existing regular servers were enabled automatically, and the enable or disable setting became read-only in the UI and API. This is mandatory for upcoming features. Sentinel will have a bigger responsibility.
Release history
All releases on GitHubAtom feed/feed/coollabsio/coolify
Badge
[](/p/coollabsio/coolify)
Fixed
- Crashed the
Keys & Tokens>API Tokenspage with a 500 error for a token with scopes stored in an unexpected format - Failed connection to SFTP backup storages on an IPv6 address, and a connection error without the network reason
- The error now shows the network reason, for example
Connection refusedorConnection timed out