LoginSign Up
← Back to all sparks
W

Wakapi

PM
Velocity2.5

Self-hosted coding statistics and time tracking service

wakapi.dev ↗

Wakapi is quietly rebuilding itself around the login and container requirements teams ask for.

time-trackingself-hostedoidccontainer-hardeningthin-release-notes
◆Current state
Wakapi's recent releases cluster around identity and deployment rather than time tracking itself: OpenID Connect login, then an OIDC-only mode, multiple API keys per user, and a switch from Alpine to a distroless nonroot container image. The 2.17.x line has also carried a responsibly disclosed security fix and dropped its relay endpoint. Release notes are mostly bare issue numbers, so several entries state that something changed without saying what.
◆Where it's heading
The direction is a self-hosted tool making itself deployable somewhere other than one developer's server. External identity providers, an option to disable local login entirely, per-key credentials and a container that runs as a nonroot user with no shell are the requirements that come from someone else's security review, not from a hobbyist's wishlist. The corresponding cost is visible too: dropped MSSQL support and a Docker base change that forces SQLite users to fix directory permissions by hand.
◆Prediction
The identity and packaging thread is the only sustained one in this feed, so further hardening in that area is the most likely continuation; the sparse release notes make anything more specific guesswork.

◆Recent moves

  1. 19d ago

    Release 2.17.5

    Four contributor improvements listed as issue numbers with no descriptions, so the release's actual content is not readable from the notes. Consistent with how this project has been publishing recently.

    View source ↗
  2. 2mo ago

    Release 2.17.4

    One improvement and one bug fix, both identified only by issue number. Nothing in the entry indicates whether either affects users.

    View source ↗
  3. 4mo ago

    Release 2.17.3

    Carries a responsibly disclosed security fix, drops the relay endpoint, and clears several bugs. The note also warns that a custom language mapping bug may require regenerating summaries — an action item buried under a list of issue numbers.

    View source ↗
  4. 5mo ago

    Release 2.17.2

    Switches the Docker base image from Alpine to distroless nonroot, so Wakapi now runs as UID 65532 inside the container — a hardening change that requires SQLite users to fix data directory permissions before upgrading. It also fixes broken user registration.

    View source ↗
  5. 6mo ago

    Release 2.17.1

    Adds an OIDC-only login mode, letting operators disable local accounts entirely once an external identity provider is configured. It is the natural second step after OIDC support landed in 2.16.0, and the one that makes central account control real.

    View source ↗
  6. 7mo ago

    Release 2.17.0

    Introduces multiple API keys per user, so a machine, an editor plugin and a script no longer have to share one credential that must be rotated together. A small change with real consequences for anyone tracking time across several devices.

    View source ↗