Commit Graph

243 Commits

Author SHA1 Message Date
github-actions[bot] 061e6ad164 chore: bump version to 3.4.3 [version-bump] 2026-07-25 06:43:37 +00:00
github-actions[bot] 1d30717a2e chore: bump version to 3.4.2 [version-bump] 2026-07-25 06:19:05 +00:00
UNITRONIX eeb201981e chore: release version 3.4.1 [version-bump]
Stable hotfix for betterdesk.sh Console start after GitHub update (Refs #306).
2026-07-25 08:13:10 +02:00
UNITRONIX 05003cd952 chore: release version 3.4.0 [version-bump]
Manual stable bump after version-bump-main could not push to protected main.
2026-07-24 22:00:34 +02:00
github-actions[bot] b6e5425fbc chore: bump version to 3.3.174 [version-bump] 2026-07-24 19:43:49 +00:00
UNITRONIX 5bc6fb08db fix(security): validate guest WS tokens and require OIDC device binding.
Guest /ws upgrades must pass Go access-link validation; RustDesk OIDC auth-query rejects omitted id/uuid when pending has them; bump tar and golang.org/x/text for audit/govulncheck.
2026-07-24 21:43:27 +02:00
github-actions[bot] ba3f233c1f chore: bump version to 3.3.173 [version-bump] 2026-07-24 19:33:39 +00:00
github-actions[bot] 0062cb77cb chore: bump version to 3.3.172 [version-bump] 2026-07-24 19:06:32 +00:00
github-actions[bot] b0b2861e74 chore: bump version to 3.3.171 [version-bump] 2026-07-24 16:07:55 +00:00
github-actions[bot] a181684885 chore: bump version to 3.3.170 [version-bump] 2026-07-24 05:03:59 +00:00
github-actions[bot] a9e76d5bdc chore: bump version to 3.3.169 [version-bump] 2026-07-23 15:38:16 +00:00
github-actions[bot] 64ef253e70 chore: bump version to 3.3.168 [version-bump] 2026-07-23 15:31:45 +00:00
github-actions[bot] c0ec373595 chore: bump version to 3.3.167 [version-bump] 2026-07-22 21:00:28 +00:00
github-actions[bot] 0f93ee85c9 chore: bump version to 3.3.166 [version-bump] 2026-07-22 20:37:33 +00:00
github-actions[bot] b7db8283c5 chore: bump version to 3.3.165 [version-bump] 2026-07-22 18:58:58 +00:00
github-actions[bot] 1b81774b69 chore: bump version to 3.3.164 [version-bump] 2026-07-22 16:22:11 +00:00
github-actions[bot] 840a58ca1d chore: bump version to 3.3.163 [version-bump] 2026-07-22 16:04:17 +00:00
github-actions[bot] 3067a6713d chore: bump version to 3.3.162 [version-bump] 2026-07-22 15:58:48 +00:00
github-actions[bot] 121678cde1 chore: bump version to 3.3.161 [version-bump] 2026-07-22 04:47:15 +00:00
github-actions[bot] b03e736033 chore: bump version to 3.3.160 [version-bump] 2026-07-21 15:45:25 +00:00
github-actions[bot] e6a3a5cc20 chore: bump version to 3.3.159 [version-bump] 2026-07-21 15:33:05 +00:00
github-actions[bot] 7a527a954b chore: bump version to 3.3.158 [version-bump] 2026-07-21 10:52:35 +00:00
github-actions[bot] 07f3964f5f chore: bump version to 3.3.157 [version-bump] 2026-07-21 10:44:37 +00:00
UNITRONIX 9b102c6e58 fix(ci): unblock Go vet, Secret Scan, npm audit, and race flake 2026-07-21 12:08:33 +02:00
github-actions[bot] 7f60fda86b chore: bump version to 3.3.156 [version-bump] 2026-07-20 21:52:52 +00:00
UNITRONIX 14fb1d9aec fix(security): patch Dependabot and CodeQL alerts on axios, mesh, OIDC
Bump axios and brace-expansion; add mesh rate limits; harden OIDC redirect and ConnLimiter clamp for static analysis.
2026-07-20 23:52:32 +02:00
github-actions[bot] 1d32b34099 chore: bump version to 3.3.155 [version-bump] 2026-07-20 21:45:42 +00:00
github-actions[bot] 936c27a86b chore: bump version to 3.3.154 [version-bump] 2026-07-20 21:30:09 +00:00
github-actions[bot] 421acd2791 chore: bump version to 3.3.153 [version-bump] 2026-07-20 21:07:30 +00:00
github-actions[bot] af7d103e58 chore: bump version to 3.3.152 [version-bump] 2026-07-20 16:07:17 +00:00
github-actions[bot] 755933ff7d chore: bump version to 3.3.151 [version-bump] 2026-07-18 13:07:35 +00:00
github-actions[bot] b6d76a735c chore: bump version to 3.3.150 [version-bump] 2026-07-18 10:37:02 +00:00
github-actions[bot] e97e9328b5 chore: bump version to 3.3.149 [version-bump] 2026-07-18 10:28:12 +00:00
github-actions[bot] 915cd72f31 chore: bump version to 3.3.148 [version-bump] 2026-07-18 09:55:14 +00:00
github-actions[bot] 07d99777b9 chore: bump version to 3.3.147 [version-bump] 2026-07-16 18:06:36 +00:00
github-actions[bot] ec6da61cb7 chore: bump version to 3.3.146 [version-bump] 2026-07-16 17:40:03 +00:00
github-actions[bot] 11b25ce054 chore: bump version to 3.3.145 [version-bump] 2026-07-14 20:06:03 +00:00
github-actions[bot] 2791ed4b29 chore: bump version to 3.3.144 [version-bump] 2026-07-14 20:00:11 +00:00
github-actions[bot] d519dc14df chore: bump version to 3.3.143 [version-bump] 2026-07-14 19:43:06 +00:00
github-actions[bot] c2924e8933 chore: bump version to 3.3.142 [version-bump] 2026-07-14 16:00:48 +00:00
github-actions[bot] 3fb31b4576 chore: bump version to 3.3.141 [version-bump] 2026-07-14 15:53:14 +00:00
github-actions[bot] a5f43df346 chore: bump version to 3.3.140 [version-bump] 2026-07-14 15:40:40 +00:00
github-actions[bot] a820a50add chore: bump version to 3.3.139 [version-bump] 2026-07-14 15:36:10 +00:00
github-actions[bot] ca927f89aa chore: bump version to 3.3.138 [version-bump] 2026-07-13 15:36:13 +00:00
github-actions[bot] e19b76e7f5 chore: bump version to 3.3.137 [version-bump] 2026-07-12 19:37:13 +00:00
UNITRONIX 3508de1513 Merge branch 'dev' of https://github.com/UNITRONIX/BetterDesk into dev 2026-07-12 21:36:55 +02:00
UNITRONIX 655e20f512 chore: update dependencies and enhance security measures
- Bumped `vitest` and `vite` versions in both root and agent-client lockfiles.
- Added `web-nodejs` overrides for `@babel/core` and `js-yaml` to address Dependabot alerts.
- Implemented `NewConnLimiterFromInt` for relay per-IP limits in the Go server, removing the deprecated `deepSet` function from the patch-role-scope-i18n script.
- Extended CodeQL coverage to include new query filters and improved npm audit configurations.
2026-07-12 21:36:53 +02:00
github-actions[bot] 8caa8501f6 chore: bump version to 3.3.136 [version-bump] 2026-07-12 18:51:49 +00:00
github-actions[bot] 431da52084 chore: bump version to 3.3.135 [version-bump] 2026-07-12 18:45:07 +00:00
UNITRONIX 648a8d4f8a security(3.4): harden console and Go server for pre-release audit
Commit web-nodejs lockfile with tar override; CI uses npm ci and moderate npm audit.
Add LOG_LEVEL filtering and log redaction in Node console and Go server.
Validate WS tokens on bd-signal; require single-use token for remote-agent relay.
Limit active relay sessions per IP and block open enrollment without TLS.
2026-07-12 20:44:46 +02:00