gsadmin/BetterDesk
1
0
Fork 0
mirror of https://github.com/UNITRONIX/BetterDesk.git synced 2026-09-10 17:45:42 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,217 Commits 23 Branches 13 Tags
dev
Commit Graph

14 Commits

Author SHA1 Message Date
UNITRONIX 3f35dda693 fix(security): patch Dependabot deps and harden scanner noise 
Bump echo, qs, and browserslist; redact CDAP command/session logs;
reject restore symlinks; expand CodeQL exclusions for known FPs.

Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)
 2026-09-06 01:19:25 +02:00
UNITRONIX 2eec0d2ceb feat(update): use commit-bound Go server artifacts 
Prefer verified GitHub Actions or exact Release binaries during native updates, with checksum validation and local compilation fallback. Defer Support Agent source synchronization and rebuild queueing until after the console restart.

Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)
 2026-08-23 20:56:45 +02:00
UNITRONIX 8e4b7c2652 fix(deps): patch high-severity dependency vulnerabilities 
Upgrade js-yaml and quinn-proto to their patched releases to remove the reported denial-of-service vulnerabilities from the dependency graph.

Refs GHSA-5p4m-2wfm-xmqj; GHSA-4w2j-m93h-cj5j

Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)
 2026-08-15 21:07:13 +02:00
UNITRONIX f06fb597e1 fix(console): share SQLite handle and bump better-sqlite3 for Node 24 (#353) 
Avoid parallel better-sqlite3 connections that race N-API cleanup hooks after event-bus connect; defer build workers until listen settles.
 2026-08-06 01:17:04 +02:00
UNITRONIX 6442b59902 feat(ci): add frontend JavaScript syntax check to CI workflow 
- Introduced a new step in the CI workflow to check browser JavaScript syntax using the `npm run check:frontend` command.
- Updated package version to 3.5.14 and bumped dependencies: nodemailer to 9.0.4 and ws to 8.21.2.
- Enhanced logging configuration to use NODE_ENV for determining log level.
- Improved accessibility styles for UX 3.5 and added focus outlines for help panel elements.
 2026-08-05 23:12:34 +02:00
UNITRONIX 150b63d34b fix(security): bump Dependabot deps and harden CDAP file-transfer callbacks 
Close brace-expansion, postcss, and quinn-proto alerts; validate request_id before invoking pending download callbacks (CodeQL).
 2026-08-05 17:13:27 +02:00
UNITRONIX abe0d52fe4 chore: refresh EOL runtimes and patch non-agent dependencies 
Move Docker/CI/installers to Node 24 and Go 1.26 images, bump Alpine server runtime, apply safe npm/Go patch updates, migrate SNMP to pysnmp, and document deferred majors.
 2026-08-01 09:19:42 +02:00
UNITRONIX 7cf7968d4c chore: sync main 3.4.2 into dev after Web Remote hotfix 
Keep dev at 3.4.12; bring stable Web Remote release notes and brace-expansion audit override from main.
 2026-07-28 17:34:58 +02:00
UNITRONIX c27eaf8ed6 fix(web-nodejs): bump brace-expansion override for npm audit CI 
GHSA-mh99-v99m-4gvg requires brace-expansion >=5.0.8; previous ^1.1.16 still failed Web Console CI audit on stable.
 2026-07-28 06:50:00 +02:00
UNITRONIX 5bc6fb08db fix(security): validate guest WS tokens and require OIDC device binding. 
Guest /ws upgrades must pass Go access-link validation; RustDesk OIDC auth-query rejects omitted id/uuid when pending has them; bump tar and golang.org/x/text for audit/govulncheck.
 2026-07-24 21:43:27 +02:00
UNITRONIX 9b102c6e58 fix(ci): unblock Go vet, Secret Scan, npm audit, and race flake 2026-07-21 12:08:33 +02:00
UNITRONIX 14fb1d9aec fix(security): patch Dependabot and CodeQL alerts on axios, mesh, OIDC 
Bump axios and brace-expansion; add mesh rate limits; harden OIDC redirect and ConnLimiter clamp for static analysis.
 2026-07-20 23:52:32 +02:00
UNITRONIX 655e20f512 chore: update dependencies and enhance security measures 
- Bumped `vitest` and `vite` versions in both root and agent-client lockfiles.
- Added `web-nodejs` overrides for `@babel/core` and `js-yaml` to address Dependabot alerts.
- Implemented `NewConnLimiterFromInt` for relay per-IP limits in the Go server, removing the deprecated `deepSet` function from the patch-role-scope-i18n script.
- Extended CodeQL coverage to include new query filters and improved npm audit configurations.
 2026-07-12 21:36:53 +02:00
UNITRONIX 648a8d4f8a security(3.4): harden console and Go server for pre-release audit 
Commit web-nodejs lockfile with tar override; CI uses npm ci and moderate npm audit.
Add LOG_LEVEL filtering and log redaction in Node console and Go server.
Validate WS tokens on bd-signal; require single-use token for remote-agent relay.
Limit active relay sessions per IP and block open enrollment without TLS.
 2026-07-12 20:44:46 +02:00