689494d4fa
chore: release version 3.4.3 [version-bump]
2026-07-30 19:31:11 +02:00
80f23218cd
Merge pull request #328 from UNITRONIX/hotfix/3.4.3-open-issues
...
hotfix: open issues remediation (3.4.3)
2026-07-30 19:15:53 +02:00
93b9682a4e
chore(release): prepare 3.4.3 notes for open-issue fixes
...
Promote [Unreleased] changelog into 3.4.3 for the hotfix release
(OIDC Waiting, viewer-only outbound, Docker channel, prior Unreleased fixes).
2026-07-30 19:14:27 +02:00
0189bcb25f
fix(auth,signal): OIDC user.info, viewer-only outbound, Docker channel UX
...
RustDesk 1.4.x ignored OIDC auth-query success without user.info (#326 ).
TCP RegisterPk IP bind + client login token restore service-off outbound
without weakening managed pending rejection (#327/#302). Document Caddy
WSS/308 and clarify GHCR channel is image-tag based (#294/#299).
Refs #302 #304 #314 #315 #319 #320 #321 #323 #325 #326 #327 #294 #299
2026-07-30 19:10:44 +02:00
6767b41b97
fix(web-remote): harden SignedId key verify after #313 (Refs #313 )
...
Reload id_ed25519.pub per viewer render and verify RelayResponse.pk then SignedId with the correct RustDesk key chain so base64 Keys work; desktop signature-mismatch without Key remains expected config.
2026-07-29 20:10:01 +02:00
21e0d02e3d
fix(users): fail closed on last-admin delete mirror ( Fixes #315 )
...
Prevent false UI success when Go refuses deleting the last Super Admin on dual-SQLite; mirror before local delete and keep installer admin reset unchanged.
2026-07-29 19:59:37 +02:00
b6185426bd
fix(betterdesk.sh): keep self-signed cert when deploy src==dest ( Fixes #325 )
...
_safe_cp_tls_file no longer deletes betterdesk.crt when source and dest are the same real file after openssl generates certs in place.
2026-07-29 19:47:32 +02:00
8297eaf48f
fix(ui): light theme Client Config contrast and mask public key ( Fixes #319 )
2026-07-29 19:33:59 +02:00
870f2b6431
fix(registrations): improve UI layout and styling for search and table columns
...
- Adjusted search icon positioning and added styles to prevent overlap.
- Centered content in Platform, Version, Status, Requested, and Actions columns.
- Updated action button and platform icon wrappers for better alignment and display.
- Enhanced table header classes for improved styling consistency.
2026-07-29 19:25:29 +02:00
59e14f7576
fix(mesh): PEM web cert hash and MESH_WEB_CERT_FILE for reverse proxy ( Fixes #321 )
...
MeshAgent behind TLS-terminating proxies was rejected with bad web cert hash when Go hashed TLS_CERT incorrectly (raw PEM) or used an internal cert instead of the public LE cert agents see.
2026-07-29 19:15:23 +02:00
7b30765efe
fix(devices): kebab Unban no longer calls Ban API ( Fixes #323 )
2026-07-29 19:05:46 +02:00
fe1c3963dc
Merge pull request #317 from UNITRONIX/release/3.4.2-bump
...
chore: release version 3.4.2 [version-bump]
2026-07-28 07:06:57 +02:00
0f8273ebb7
chore: release version 3.4.2 [version-bump]
...
Stable hotfix: restore Web Remote after enrollment outbound gate (Refs #313 ).
2026-07-28 06:54:54 +02:00
c1cfd8f765
Merge pull request #316 from UNITRONIX/hotfix/313-web-remote-panel-proxy
...
Hotfix: restore Web Remote after enrollment outbound gate (#313 )
2026-07-28 06:53:50 +02:00
c27eaf8ed6
fix(web-nodejs): bump brace-expansion override for npm audit CI
...
GHSA-mh99-v99m-4gvg requires brace-expansion >=5.0.8; previous ^1.1.16 still failed Web Console CI audit on stable.
2026-07-28 06:50:00 +02:00
a749827ae0
fix(signal): restore Web Remote after enrollment outbound gate (Refs #313 )
...
Accept PunchHole/RequestRelay from PANEL_SIGNAL_PROXY_CIDRS (default loopback) so panel-proxied Web Remote works again without weakening #302 .
2026-07-28 06:46:17 +02:00
6d324cade6
Merge pull request #308 from UNITRONIX/release/3.4.1-bump
...
chore: release version 3.4.1 [version-bump]
2026-07-25 08:16:25 +02:00
eeb201981e
chore: release version 3.4.1 [version-bump]
...
Stable hotfix for betterdesk.sh Console start after GitHub update (Refs #306 ).
2026-07-25 08:13:10 +02:00
f624b3878b
Merge pull request #307 from UNITRONIX/hotfix/306-console-start-after-update
...
Hotfix: start Console after betterdesk.sh GitHub update (#306 )
2026-07-25 08:12:04 +02:00
a73a3a40b3
fix(betterdesk.sh): start Console after GitHub update (Refs #306 )
...
Prevent set -e abort on sqlite3 API-key sync so betterdesk-console is always started after Online GitHub update; fail the update loudly when Console stays inactive. Hotfix PRs on main use patch bumps (3.4.x).
2026-07-25 08:09:05 +02:00
decee448f9
Merge pull request #305 from UNITRONIX/release/3.4.0-bump
...
chore: release version 3.4.0 [version-bump]
2026-07-24 22:01:34 +02:00
05003cd952
chore: release version 3.4.0 [version-bump]
...
Manual stable bump after version-bump-main could not push to protected main.
2026-07-24 22:00:34 +02:00
8acdbd9051
Merge pull request #268 from UNITRONIX/dev
...
Release: BetterDesk 3.4.0 (stable)
2026-07-24 21:58:24 +02:00
a8172fe9e6
docs(changelog): restore [Unreleased] curated notes for 3.4.0 [version-bump]
...
Keep operator-facing release summary under Unreleased so merge to main promotes it to 3.4.0; slim 3.3.174 to the security patch bullets.
2026-07-24 21:47:53 +02:00
b6e5425fbc
chore: bump version to 3.3.174 [version-bump]
2026-07-24 19:43:49 +00:00
5bc6fb08db
fix(security): validate guest WS tokens and require OIDC device binding.
...
Guest /ws upgrades must pass Go access-link validation; RustDesk OIDC auth-query rejects omitted id/uuid when pending has them; bump tar and golang.org/x/text for audit/govulncheck.
2026-07-24 21:43:27 +02:00
ba3f233c1f
chore: bump version to 3.3.173 [version-bump]
2026-07-24 19:33:39 +00:00
0541ad15bc
Prepare 3.4.0 stable release notes and fix default-admin bootstrap.
...
Populate CHANGELOG [Unreleased] with curated operator highlights since main 3.3.39, and remove illegal const password reassignment in ensureDefaultAdmin.
2026-07-24 21:33:17 +02:00
0062cb77cb
chore: bump version to 3.3.172 [version-bump]
2026-07-24 19:06:32 +00:00
b476621be8
feat(auth): OIDC login for stock RustDesk desktop clients ( #304 )
...
Advertise oidc providers via login-options and add /api/oidc/auth + auth-query, reusing panel IdP config to issue client sessions.
2026-07-24 21:06:08 +02:00
b0b2861e74
chore: bump version to 3.3.171 [version-bump]
2026-07-24 16:07:55 +00:00
cdf950130a
fix(docker): repair fresh install path for GHCR and single layout ( #299 )
...
Sync install.sh image pin with VERSION, fix split DB_PATH/SQLITE_READONLY, resolve AIO container for password reset, and write bootstrap files as betterdesk under cap_drop.
2026-07-24 18:07:20 +02:00
a181684885
chore: bump version to 3.3.170 [version-bump]
2026-07-24 05:03:59 +00:00
8ecfd2a38b
fix(signal): block outbound sessions from unapproved initiators
...
Require a live registered initiator on PunchHole/RequestRelay, and an approved DB peer in managed/locked modes, so pending enrollment cannot bypass quarantine. Refs #302
2026-07-24 07:03:37 +02:00
a9e76d5bdc
chore: bump version to 3.3.169 [version-bump]
2026-07-23 15:38:16 +00:00
2e677a4f58
Merge branch 'dev' of https://github.com/UNITRONIX/BetterDesk into dev
2026-07-23 17:37:52 +02:00
57030269cf
fix(auth): scan Postgres client session created_at as text ( #300 )
2026-07-23 17:37:45 +02:00
64ef253e70
chore: bump version to 3.3.168 [version-bump]
2026-07-23 15:31:45 +00:00
cbc534f3a5
fix(users): stop username unique INSERT retry loop on Postgres ( #301 )
...
Skip mirrorCreate on shared Postgres, block 409→create recursion, COALESCE totp_secret on Go ListUsers, and return username_exists on DB unique violations.
2026-07-23 17:31:24 +02:00
c0ec373595
chore: bump version to 3.3.167 [version-bump]
2026-07-22 21:00:28 +00:00
f80b4bdc53
fix(relay): preserve WSS message boundaries for large E2EE frames ( #293 )
...
io.Copy over websocket.NetConn split video frames into ~32KiB WS messages and broke decryption after PeerInfo. Forward complete binary frames end-to-end and raise the WS read limit to 16MiB.
2026-07-22 23:00:08 +02:00
0f93ee85c9
chore: bump version to 3.3.166 [version-bump]
2026-07-22 20:37:33 +00:00
cca56c7e4f
Merge branch 'dev' of https://github.com/UNITRONIX/BetterDesk into dev
2026-07-22 22:37:11 +02:00
ac61d3e7dc
fix(users): tolerate NULL last_login on SQLite user scans ( #292 )
...
Never-logged-in Go SQLite users no longer break ListUsers/delete/demote (500), so panel userSync can mirror instead of restoring phantom accounts on restart.
2026-07-22 22:36:54 +02:00
b7db8283c5
chore: bump version to 3.3.165 [version-bump]
2026-07-22 18:58:58 +00:00
801f28d784
Merge branch 'dev' of https://github.com/UNITRONIX/BetterDesk into dev
2026-07-22 20:58:35 +02:00
96660c2452
fix(signal): recognize HttpProxyRequest after secure TCP ( #296 )
...
Schema stopped at field 26 so field-27 HttpProxyRequest left Union nil and closed the session; reply not-supported instead of opaque unhandled type.
2026-07-22 20:58:24 +02:00
1b81774b69
chore: bump version to 3.3.164 [version-bump]
2026-07-22 16:22:11 +00:00
ce988724c1
fix(console): share one WebSocket upgrade dispatcher ( #295 )
...
Collapse 11 per-service upgrade listeners into wsUpgradeRouter so Node no longer emits a false MaxListenersExceededWarning at panel startup.
2026-07-22 18:21:50 +02:00
840a58ca1d
chore: bump version to 3.3.163 [version-bump]
2026-07-22 16:04:17 +00:00
UNITRONIX