Upgrade js-yaml and quinn-proto to their patched releases to remove the reported denial-of-service vulnerabilities from the dependency graph.
Refs GHSA-5p4m-2wfm-xmqj; GHSA-4w2j-m93h-cj5j
Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)
Bring native Cliprdr/desktop file IPC from divergent orphan history onto current
dev, including base64 coerce and FILEGROUPDESCRIPTOR flags matching RustDesk.
Move Docker/CI/installers to Node 24 and Go 1.26 images, bump Alpine server runtime, apply safe npm/Go patch updates, migrate SNMP to pysnmp, and document deferred majors.
Added support for `allow-supports-multiple-windows` and `deny-supports-multiple-windows` permissions in the Windows schema. Updated existing permissions to include `allow-set-icon-with-as-template` and its denial counterpart.
Added a new API endpoint to list uploaded background images, enhancing the branding settings page with a background image library. Implemented UI components for selecting and displaying background images, including improved handling of background size and position. Updated tests to validate the new functionality and ensure proper integration with existing branding features.
Added functions to load and apply appearance settings dynamically based on user configuration. Introduced a search feature in the settings UI to filter through settings sections. Enhanced the branding readability alert to provide feedback on potential readability issues. Updated the backend to support a versioned appearance model and improved the branding API to include appearance data.
Bumped versions for several Tauri packages in Cargo.lock, including tauri (2.11.3), tauri-build (2.6.3), tauri-codegen (2.6.3), tauri-macros (2.6.3), tauri-runtime (2.11.3), tauri-runtime-wry (2.11.3), tauri-utils (2.9.3), and tray-icon (0.24.1). Also added .cargo-cache to .gitignore to exclude Cargo's cache directory from version control.
- Introduced server URL validation via `GET /api/bd/server-info` and `probe_server_url`.
- Added LAN discovery capabilities using UDP and optional mDNS for local network panel detection.
- Implemented a local settings window for managing URL, TLS settings, and user preferences.
- Enhanced dashboard with a unified sidebar and improved scrolling behavior.
- Updated documentation and pre-release checklist to reflect new features and requirements.
Enable vendor-aware VA-API/GStreamer and WebView2 hardware decode for smoother
remote video; fix Connect invoke, session back-to-close, and dashboard layout
with collapsible device list and sidebar sections that scroll inside the window.
- Fixed the address book list/grid scrolling behavior in the web dashboard to prevent it from stretching the whole page.
- Updated Tauri ACL permissions for the desktop client to ensure correct handling of `open_session` invokes with appropriate payloads.
- Improved CSS for the dashboard to ensure proper height management and overflow handling.
- Added a new Tauri v2 operator shell for RdClient desktop, featuring first-run panel URL setup and session management.
- Implemented automatic session detection for Linux and TLS support for both HTTP and HTTPS with various certificate options.
- Enhanced remote session opening functionality to utilize the new desktop client when available.
UNITRONIX