This is the first release since SOSI adopted formal version numbering, and it covers roughly two months of changes.

New features

• LDAP/AD self-service password changes: users can change their own directory password and are warned before it expires, so they no longer need an administrator to do it for them.
• Access logging: SOSI now records who watched, replayed, or downloaded a session recording, and when — bringing access to the recordings themselves under the same controls.
• Field-level detail in audit records: audit entries now show the specific before and after values of each change, instead of only telling you that something was modified.
• Semi-automatic LDAP/AD configuration: enter the server address and sync credentials and SOSI proposes a complete configuration; tick the groups you want to sync and the query filter is generated for you, cutting out most of the manual entry and trial and error.
• Clearer disk usage: site settings now show actual recording storage usage as cards with progress bars.
• File transfer records can be toggled: administrators choose whether “File transfer records” appears in the sidebar.
• Better search: the device picker in access authorisation forms is now searchable and shows IP and port; the device list can be searched by name as well as IP or hostname.
• More flexible watermarking: watermarks can be waived per role, and the watermark image is now sized from your settings so it no longer covers the watermark text.
• Clearer connection failure messages: when a connection fails because of SFTP configuration, SOSI says so directly instead of reporting a generic upstream error.

Fixes

• Force disconnect failed: forcibly ending a connection always failed and raised an error. It now works correctly.
• Stale connection state: connections that had already dropped could remain shown as “connected”. Timed-out connections are now cleaned up automatically.
• Audit record noise: the periodic keep-alive during a session no longer creates an audit entry every minute.
• Audit coverage: changes to site settings and authentication methods are now audited.
• LDAP encryption: certificate settings were being ignored, and choosing “none” as the encryption method was still treated as an encrypted connection. Both are fixed.
• Disk monitoring silently broken: the recordings directory was not mounted correctly, which disabled both the low-space warning and the usage display.
• Permissions display: connection record permissions are now limited to “read only” and “hidden”; role permission forms no longer show authorisation options when authorisation groups are disabled.
• Connection list: tapping a user’s name on mobile no longer opens a blank page.
• Language setting: switching language no longer reverts to the previous one.
• Other: device addresses now have surrounding whitespace trimmed, and some interface colours were corrected to match the design.

Maintenance and security

• Upgraded to Ruby 4.0.6 and Rails 8.1.
• Updated a number of dependencies to patch known security vulnerabilities.