Skip to main content

Release 2.13.0 — On-prem password recovery, a signed and lighter CLI, DORA UI improvements

Release date: 2026-10-19

On-prem users can finally reset a forgotten password without a database edit, the CLI plugin ships under a real code-signing certificate on Windows and uses noticeably less CPU and memory, and the DORA module's interface was improved — from the metric cards to the ingest log.

Release 2.13.0 — on-prem passwords, a lighter CLI, DORA UI improvements

Components included:

PanDev Metrics Core​

Version: 5.13.0

PanDev Metrics Web (backoffice)​

Version: 2.13.0

PanDev Metrics CLI​

Version: 2.5.22 (Homebrew, Windows MSIX)

The Chrome extension and the IDE plugins ship unchanged — they stay on the versions published with 2.11.0 (Chrome 3.3.0, Cursor / Antigravity 2.5.0, DBeaver 1.2.0, Eclipse 1.4.5).

Highlights​

  • Forgot your password on-prem? Use the license key. Change your password in the profile, reset a forgotten one with your email and the license key, or let the Owner set a new password for an employee. Any password change signs the user out of the web on every device; the IDE plugin token keeps working.
  • A properly signed Windows CLI. The MSIX package is signed with an SSL.com OV certificate, so the installer no longer needs administrator rights, and existing installs move to the new package with their data intact.
  • Optimized CLI plugin resource usage. An idle watcher no longer re-reads the whole Claude history every 3 seconds and returns freed memory to the system; the first analysis after install or upgrade and the dashboard are faster, and the dashboard page is about half the size.
  • DORA UI improvements. All four metrics share one card layout with an Elite–High–Medium–Low maturity scale and a trend badge; Lead Time shows its stages — coding, review, pipeline, deploy — as one bar with whole-number percentages; the ingest log colour-codes each event's outcome and opens its JSON payload and headers on click; and the Connect page gives you the ingest URL and a masked token ready to copy.
  • Roles right in the user card. Company and department roles, Team Lead and "Revoke access" are managed in the user card, and actions you aren't allowed to perform are shown as inactive.
  • People from your tracker, even when we can't match them. The task card shows the tracker's author and assignee as plain text when they don't match a PanDev employee, instead of "Not assigned".
  • Integrations that don't lose data. Jira works again for affected customers, the Epic Link syncs on Jira Server/DC, YouTrack maps Feature tasks and old-version assignees correctly, and saving a department no longer recreates every integration's webhooks.

PanDev Metrics Core 5.13.0​

  • On-prem passwords. Endpoints for changing your password, resetting a forgotten one with the license key, and an Owner setting an employee's password. Repeated wrong attempts trigger growing lockouts that survive a restart, and LDAP accounts are refused with a pointer to the directory admin.
  • Archived means signed out. An archived account is logged out right away, a failed LDAP login no longer says "User not found in LDAP", and each email maps to one profile — existing duplicates were merged.
  • Integrations. Teams connects only with your own app credentials (the shared PanDev app mode was removed — no customer used it), the GitLab webhook mode re-syncs projects periodically so a lost project_create event no longer drops a project for good, git-project sync stops rewriting unchanged rows, and GitHub App pagination above 100 repositories no longer archives the rest.
  • Data safety. Analysing one git project no longer wipes the intermediate files of every other project and company.
  • API consistency. Stable operationIds and property order in OpenAPI, telemetry with a broken body gets 400, error responses carry an error code, and team membership checks the company on every change.
  • Teams lists that scale. GET /departments/{id}/teams gained sorting, pagination and search, and duplicate teams can no longer be created.

PanDev Metrics Web 2.13.0​

  • Passwords on-prem. "Change password" in the profile, "Forgot password?" on the sign-in screen and "Change password" in the employee card, with lockout timers and clear LDAP messages.
  • Roles in the user card. Company and department roles, Team Lead and "Revoke access" are managed right in the user card, following the new design; actions the current user isn't allowed to perform are shown as inactive. A user's base role reads "Member" instead of "Not assigned", a Viewer can no longer edit names and departments, and a Maintainer can't open another Maintainer's work schedule for editing.
  • Archived users. An archived user can't be archived again, and their details can still be updated.
  • Integrations. Teams has a single own-credentials form with the full list of required Microsoft Graph permissions; Linear requires your own key; re-saving a form no longer wipes a stored secret.
  • DORA. Metric cards on one layout with a maturity scale and trend badges, a Lead Time stages bar with an interactive legend, deploy and failure modals that keep long commit messages and hashes in bounds, an ingest log with outcome badges and an expandable event view, a masked token with copy on the Connect page, and calculation settings as switches. An empty period shows an empty state instead of broken charts.
  • Task Flow. Change a task's status right from the backlog table, open images full screen, create a task even when the URL has no board, and the task-relations graph is styled correctly again in production.
  • Plugins page. New install and upgrade commands for the CLI from the pandev-cli repository, for macOS, Linux and Windows.
  • Quality of life. "Personal activity" is now "Working time" in the heatmap tooltip, the teams pagination no longer jumps or hangs on an empty page, the calendar day status has a separate "Reset" button, and Datavisor got a visual refresh.

PanDev Metrics CLI 2.5.22​

  • Signed Windows build. MSIX is signed with the SSL.com certificate, the installer runs without administrator rights, and an existing installation migrates to the new package automatically.
  • Faster first run and dashboard. Logs are read by bytes with a safe line pre-filter and parsed in parallel; the dashboard builds task details in one pass, stores each prompt once and keeps parsed data in memory.
  • Lower resource usage. The idle watcher no longer walks the entire Claude history every 3 seconds and returns freed native memory; the dashboard daemon keeps parsed data in memory instead of unpacking its disk cache on every rebuild.
  • Right model on every turn. Claude turns are reported with the model of that turn, not unknown, <synthetic> or the previous turn's model.
  • Fixes. The parse cache works on the release runtime, opencode 2 sessions are tracked, cost profile --json prints JSON, and uninstall and autostart behave on Linux without systemd.

Upgrade notes​

  1. Core 5.13.0 and Web 2.13.0 upgrade together — the password, integration and Teams changes span both.
  2. Teams: if a department relied on the shared PanDev app, reconnect it with your own Tenant ID, Client ID and Client Secret. Linear requires your own Personal API Token.
  3. Windows CLI: the old test certificate stays in TrustedPeople on machines that had it; the installer prints the command an administrator can use to remove it.
  4. Homebrew users: the CLI moved to the pandev-metriks/pandev-cli tap — reinstall with the command below to keep receiving updates.

Download Release:

  • PanDev Metrics Core 5.13.0: docker pull pandevofficial/pandev-metrics:5.13.0
  • PanDev Metrics Web 2.13.0: docker pull pandevofficial/pandev-metrics-backoffice:2.13.0
  • PanDev Metrics CLI 2.5.22 (macOS, Linux): brew tap pandev-metriks/pandev-cli https://github.com/pandev-metriks/pandev-cli && brew install pandev-metriks/pandev-cli/pandev-cli-plugin (or brew upgrade pandev-metriks/pandev-cli/pandev-cli-plugin)
  • PanDev Metrics CLI 2.5.22 (Windows): iwr https://raw.githubusercontent.com/pandev-metriks/pandev-cli/main/install.ps1 -UseBasicParsing | iex
  • Chrome 3.3.0, Cursor 2.5.0, Antigravity 2.5.0: update automatically from their stores
  • DBeaver 1.2.0 and Eclipse 1.4.5: from the Plugins page of your workspace