49a84e10af
Merge origin/main into release/3.5.4-hotfix
2026-08-01 16:56:23 +02:00
2e4bca238a
chore: release version 3.5.4 [version-bump]
...
Stable hotfix: Address Book ACL (#342 ) and legacy SQLite role CHECK migration.
2026-08-01 16:54:51 +02:00
5fcef34581
chore: bump version to 3.5.5 [version-bump]
2026-08-01 14:53:51 +00:00
1408f904f3
fix(security): Address Book ACL filter and legacy role CHECK migration ( #342 )
...
Restrict GET /api/ab peers/tags to device-group scope and migrate upgraded
SQLite users tables off the pre-Phase-52 role CHECK so console sync works.
Refs #342 .
2026-08-01 16:53:18 +02:00
2dcd034002
chore: bump version to 3.5.4 [version-bump]
2026-08-01 07:20:03 +00:00
5a139fb9a7
Merge branch 'dev' of https://github.com/UNITRONIX/BetterDesk into dev
2026-08-01 09:19:45 +02:00
abe0d52fe4
chore: refresh EOL runtimes and patch non-agent dependencies
...
Move Docker/CI/installers to Node 24 and Go 1.26 images, bump Alpine server runtime, apply safe npm/Go patch updates, migrate SNMP to pysnmp, and document deferred majors.
2026-08-01 09:19:42 +02:00
f1543acfc4
chore: bump version to 3.5.3 [version-bump]
2026-08-01 07:18:13 +00:00
28893f8117
fix(mesh): emit stable 96-hex MeshID in download.msh ( Fixes #336 )
...
Replace the hardcoded 40-char MeshID placeholder with a persisted per-group SHA-384 id so MeshAgent no longer fails with bad size on panel-downloaded .msh files.
2026-07-31 22:11:55 +02:00
c17521b3e6
chore: bump version to 3.5.2 [version-bump]
2026-07-31 20:01:53 +00:00
eeb4389cc2
chore: bump version to 3.5.1 [version-bump]
2026-07-31 18:39:05 +00:00
98fea11ca3
chore: release version 3.5.0 [version-bump]
...
Manual completion after version-bump-main could not push to protected main.
2026-07-31 20:31:00 +02:00
ede02cb927
chore: bump version to 3.4.15 [version-bump]
2026-07-31 18:17:36 +00:00
8cbb7a3f6c
chore: bump version to 3.4.14 [version-bump]
2026-07-31 17:58:34 +00:00
6a1806b8f3
chore: sync main 3.4.3 into dev ( #302 enrollment hardening)
...
Bring stable signal outbound gate hardening (initiator_pending_enrollment),
Web Remote SignedId verify, and open-issue hotfixes onto dev while keeping
the 3.4.13 development version baseline.
2026-07-31 19:48:44 +02:00
689494d4fa
chore: release version 3.4.3 [version-bump]
2026-07-30 19:31:11 +02:00
0189bcb25f
fix(auth,signal): OIDC user.info, viewer-only outbound, Docker channel UX
...
RustDesk 1.4.x ignored OIDC auth-query success without user.info (#326 ).
TCP RegisterPk IP bind + client login token restore service-off outbound
without weakening managed pending rejection (#327/#302). Document Caddy
WSS/308 and clarify GHCR channel is image-tag based (#294/#299).
Refs #302 #304 #314 #315 #319 #320 #321 #323 #325 #326 #327 #294 #299
2026-07-30 19:10:44 +02:00
59e14f7576
fix(mesh): PEM web cert hash and MESH_WEB_CERT_FILE for reverse proxy ( Fixes #321 )
...
MeshAgent behind TLS-terminating proxies was rejected with bad web cert hash when Go hashed TLS_CERT incorrectly (raw PEM) or used an internal cert instead of the public LE cert agents see.
2026-07-29 19:15:23 +02:00
0c66f872a2
chore: bump version to 3.4.13 [version-bump]
2026-07-28 15:35:53 +00:00
0f8273ebb7
chore: release version 3.4.2 [version-bump]
...
Stable hotfix: restore Web Remote after enrollment outbound gate (Refs #313 ).
2026-07-28 06:54:54 +02:00
a749827ae0
fix(signal): restore Web Remote after enrollment outbound gate (Refs #313 )
...
Accept PunchHole/RequestRelay from PANEL_SIGNAL_PROXY_CIDRS (default loopback) so panel-proxied Web Remote works again without weakening #302 .
2026-07-28 06:46:17 +02:00
c5a1c754fc
chore: bump version to 3.4.12 [version-bump]
2026-07-26 19:58:42 +00:00
4429e7787b
chore: bump version to 3.4.11 [version-bump]
2026-07-26 19:42:00 +00:00
7bba9cfce5
chore: bump version to 3.4.10 [version-bump]
2026-07-26 18:06:44 +00:00
62e4fc80a9
Merge origin/dev into local dev
2026-07-26 20:06:24 +02:00
fbcc93dd77
fix(signal): restore Web Remote after enrollment outbound gate
...
Accept PunchHole/RequestRelay from PANEL_SIGNAL_PROXY_CIDRS (default loopback) so panel-proxied Web Remote works again without weakening #302 . Also default Docker AIO NTP/billing env vars (#299 ).
Refs #302
2026-07-26 19:53:55 +02:00
439b836b30
chore: bump version to 3.4.9 [version-bump]
2026-07-26 08:37:48 +00:00
bf228d7b0b
chore: bump version to 3.4.8 [version-bump]
2026-07-26 08:31:06 +00:00
9b2acec008
chore: bump version to 3.4.7 [version-bump]
2026-07-26 08:17:11 +00:00
a2ad9dc7ac
chore: bump version to 3.4.6 [version-bump]
2026-07-26 08:14:52 +00:00
f8ef03a2d5
chore: bump version to 3.4.5 [version-bump]
2026-07-26 08:10:14 +00:00
5164cdff37
chore: bump version to 3.4.4 [version-bump]
2026-07-26 08:00:34 +00:00
061e6ad164
chore: bump version to 3.4.3 [version-bump]
2026-07-25 06:43:37 +00:00
1d30717a2e
chore: bump version to 3.4.2 [version-bump]
2026-07-25 06:19:05 +00:00
eeb201981e
chore: release version 3.4.1 [version-bump]
...
Stable hotfix for betterdesk.sh Console start after GitHub update (Refs #306 ).
2026-07-25 08:13:10 +02:00
05003cd952
chore: release version 3.4.0 [version-bump]
...
Manual stable bump after version-bump-main could not push to protected main.
2026-07-24 22:00:34 +02:00
b6e5425fbc
chore: bump version to 3.3.174 [version-bump]
2026-07-24 19:43:49 +00:00
5bc6fb08db
fix(security): validate guest WS tokens and require OIDC device binding.
...
Guest /ws upgrades must pass Go access-link validation; RustDesk OIDC auth-query rejects omitted id/uuid when pending has them; bump tar and golang.org/x/text for audit/govulncheck.
2026-07-24 21:43:27 +02:00
ba3f233c1f
chore: bump version to 3.3.173 [version-bump]
2026-07-24 19:33:39 +00:00
0062cb77cb
chore: bump version to 3.3.172 [version-bump]
2026-07-24 19:06:32 +00:00
b476621be8
feat(auth): OIDC login for stock RustDesk desktop clients ( #304 )
...
Advertise oidc providers via login-options and add /api/oidc/auth + auth-query, reusing panel IdP config to issue client sessions.
2026-07-24 21:06:08 +02:00
b0b2861e74
chore: bump version to 3.3.171 [version-bump]
2026-07-24 16:07:55 +00:00
a181684885
chore: bump version to 3.3.170 [version-bump]
2026-07-24 05:03:59 +00:00
8ecfd2a38b
fix(signal): block outbound sessions from unapproved initiators
...
Require a live registered initiator on PunchHole/RequestRelay, and an approved DB peer in managed/locked modes, so pending enrollment cannot bypass quarantine. Refs #302
2026-07-24 07:03:37 +02:00
a9e76d5bdc
chore: bump version to 3.3.169 [version-bump]
2026-07-23 15:38:16 +00:00
2e677a4f58
Merge branch 'dev' of https://github.com/UNITRONIX/BetterDesk into dev
2026-07-23 17:37:52 +02:00
57030269cf
fix(auth): scan Postgres client session created_at as text ( #300 )
2026-07-23 17:37:45 +02:00
64ef253e70
chore: bump version to 3.3.168 [version-bump]
2026-07-23 15:31:45 +00:00
cbc534f3a5
fix(users): stop username unique INSERT retry loop on Postgres ( #301 )
...
Skip mirrorCreate on shared Postgres, block 409→create recursion, COALESCE totp_secret on Go ListUsers, and return username_exists on DB unique violations.
2026-07-23 17:31:24 +02:00
c0ec373595
chore: bump version to 3.3.167 [version-bump]
2026-07-22 21:00:28 +00:00
UNITRONIX