Tesria 0.5

Tesria 0.5, released September 24, 2026, is the first numbered release. It includes everything below. If you ran a build from before it, read Before you upgrade first: a few things now work differently.

Before you upgrade

These only matter if you already run Tesria from a build made before 0.5.

• API tokens now expire. A token made before 0.5 expires 90 days after the upgrade. A week before, its owner is told in the app and by email, and can make a new one. See API tokens.

• A token can no longer manage its account. Scripts using a token cannot make or revoke tokens, or change a password, sessions or two-factor settings. Do those in the browser.

• Administrators may need two-factor sign-in. If your Tesria requires it for administrators, an administrator who has not turned it on has no administration rights until they do. Everything else keeps working for them.

• Two new rights. Resetting another administrator’s password or two-factor is for the Owner only, unless the Owner gives the right to administrators. Saving a template for the whole wiki needs its own right, which administrators have. See Roles.

• Other people’s email addresses are shown only to people who may view users, and to each person for their own account.

New in 0.5

Email

• Send email by signing in to Gmail or Outlook, instead of typing a mail server’s password, with guides for iCloud, Zoho, Fastmail and Proton as well. See Email.

• Invite people by email, with a message you can edit before it is sent.

Reaching Tesria

• From anywhere, with Tailscale. An optional part joins your tailnet and gives Tesria a private address with a real certificate, reachable only from your own devices. See Reaching Tesria from anywhere with Tailscale.

• Trust this device: a page that walks any computer or phone through trusting a server on your own network, so the browser stops warning.

Security

• API tokens expire, after 30 days, 90 (the default), a year, or never, chosen when you make one.

• Tighter limits on what a token can reach: a token for showing one page can reach only that page.

• Drafts and the trash stay private everywhere: comments, history, attachments and labels of a draft are seen only by the people who may see the draft.

• A space you cannot see answers “not found” everywhere, not just on its pages.

• Security alerts and admin notifications are explained, with what to do about each. See Security.

Backups

• How far back each copy can take you, and diagrams of how backups and offsite copies work. See How backups work.

Versions

• One version number, shown on the dashboard, in the API and on exported sites. Upgrading records where you came from in the audit log.

• Wiki packs keep working. A pack made by 0.5 or later imports into every later version, and the import says which version made it. See Wiki packs.

The page tree and pages

• Numbered or bulleted trees, and a filter to find a page in a long tree.

• An emoji before a page’s title.

Fixes

• A PDF in a file block downloaded when its page was opened. It now shows in the page.

• The list of your sessions grew without end. It shows the five most recently ended.

• The setup wizard said a brand new Tesria had been upgraded.

• An invite used while registration was open still said “Unused”.

• New accounts could skip saving their recovery codes.

Everything in 0.5

Writing

• A block editor with a slash menu and a wide range of elements: panels, layouts, tables, code, diagrams, math, charts, galleries, video, animations, embeds and more. See Elements.

• Twelve kinds of live content, from the pages under this one to a report of open tasks. See Live content.

• Templates for pages that should start alike. See Templates.

Working together

• Several people editing a page at once, with changes from scripts and assistants shown as tracked changes to accept or reject.

• Comments on a page or on a few words of it, mentions, watching, and notifications in the app and by email.

• A page’s full history, with any version brought back in one click.

Organizing and sharing

• Spaces with permissions for people and groups, restrictions on single pages, labels, and a trash.

• Full-text search across everything you can see.

• Exports as Markdown, HTML and PDF, a whole space as a website or a wiki pack, and public reading for the spaces you choose.

• A REST API with read-only and full tokens, webhooks, and a built-in MCP server for AI assistants.

Running it

• One Docker Compose file, with HTTPS set up by itself.

• A setup wizard, a guided tour, and tips for new people.

• Backups from the first start, with point-in-time recovery, restore and undo from the browser, offsite copies to the cloud, a network drive or a removable drive, and restore drills that prove they work.

• Roles with rights you can change, security alerts, rate limits and lockouts, two-factor sign-in, single sign-on, and an audit log that shows if it has been tampered with.

• Your own name, logo, favicon and colors.

• Every screen made for phones and tablets as well as computers.