chore: upgrade guidance for non-root container change

Author: blegesse-w

content/influxdb3/explorer/install.md

@@ -213,6 +213,25 @@ docker-compose up -d
 > [!Important]
 > Without a mounted `./db` directory, application data is lost when the container is deleted.
 
+> [!Warning]
+> **Upgrading from Explorer v1.6.x or earlier?**
+>
+> Starting with v1.7.0, the Explorer container runs as a non-root user (`influxui`, uid 1500) for improved security. If you're upgrading from an older version with existing mounted volumes, you'll need to update file ownership.
+>
+> When you start the upgraded container, you may see an error like:
+> ```
+> ERROR: Directory '/db' is owned by root and not accessible to the 'influxui' user.
+> ```
+>
+> To fix this, change ownership of your mounted directories to uid 1500:
+>
+> ```bash
+> sudo chown -R 1500:1500 /path/to/your/db
+> sudo chown -R 1500:1500 /path/to/your/config  # if using config volume
+> ```
+>
+> After updating ownership, restart the container. Fresh installations are unaffected.
+
 ### Pre-configure InfluxDB connections
 
 Instead of configuring connections through the UI, you can pre-define connection settings using a `config.json` file. This is useful for:

content/influxdb3/explorer/release-notes/_index.md

@@ -16,6 +16,25 @@ To upgrade, pull the latest Docker image:
 docker pull influxdata/influxdb3-ui
 ```
 
+## v1.7.0 {date="2026-04-02"}
+
+#### Breaking changes
+
+- **Container user change**: The Docker container now runs as non-root user `influxui` (uid 1500) instead of root for improved security.
+
+  **Action required for upgrades:** If you're upgrading from v1.6.x or earlier with mounted volumes (e.g., `/db`, `/app-root/config`), you must update file ownership before the container will start:
+
+  ```bash
+  sudo chown -R 1500:1500 /path/to/your/db
+  sudo chown -R 1500:1500 /path/to/your/config
+  ```
+
+  The container will exit with a clear error message and instructions if it detects root-owned files. Fresh installations are unaffected.
+
+#### Features
+
+- **Security**: Container now runs as non-root user (uid 1500) for improved security posture.
+
 ## v1.6.3 {date="2026-02-19"}
 
 #### Features