1006 Commits

Author SHA1 Message Date
UNITRONIX fadc548c4d Merge pull request #343 from UNITRONIX/release/3.5.4-hotfix
hotfix: BetterDesk 3.5.4 — Address Book ACL and role CHECK (#342)
v3.5.4
2026-08-01 16:56:50 +02:00
UNITRONIX 272dad3d10 docs(changelog): fold #336 into 3.5.4 stable release notes 2026-08-01 16:56:42 +02:00
UNITRONIX 49a84e10af Merge origin/main into release/3.5.4-hotfix 2026-08-01 16:56:23 +02:00
UNITRONIX 2e4bca238a chore: release version 3.5.4 [version-bump]
Stable hotfix: Address Book ACL (#342) and legacy SQLite role CHECK migration.
2026-08-01 16:54:51 +02:00
github-actions[bot] 5fcef34581 chore: bump version to 3.5.5 [version-bump] 2026-08-01 14:53:51 +00:00
UNITRONIX 1408f904f3 fix(security): Address Book ACL filter and legacy role CHECK migration (#342)
Restrict GET /api/ab peers/tags to device-group scope and migrate upgraded
SQLite users tables off the pre-Phase-52 role CHECK so console sync works.
Refs #342.
2026-08-01 16:53:18 +02:00
UNITRONIX e971a2dc4c chore: update .gitignore to include temporary file patterns and remove unused .tmp-pr-body.md 2026-08-01 16:52:56 +02:00
github-actions[bot] 2dcd034002 chore: bump version to 3.5.4 [version-bump] 2026-08-01 07:20:03 +00:00
UNITRONIX 5a139fb9a7 Merge branch 'dev' of https://github.com/UNITRONIX/BetterDesk into dev 2026-08-01 09:19:45 +02:00
UNITRONIX abe0d52fe4 chore: refresh EOL runtimes and patch non-agent dependencies
Move Docker/CI/installers to Node 24 and Go 1.26 images, bump Alpine server runtime, apply safe npm/Go patch updates, migrate SNMP to pysnmp, and document deferred majors.
2026-08-01 09:19:42 +02:00
github-actions[bot] f1543acfc4 chore: bump version to 3.5.3 [version-bump] 2026-08-01 07:18:13 +00:00
UNITRONIX 62752125df fix(console): validate deploy-string public key and fall back to Go (#340)
Reject placeholder/invalid id_ed25519.pub values in Dashboard client config, prefer live Go /api/server-key, and set PUB_KEY_PATH in Windows NSSM console env.
2026-08-01 09:17:44 +02:00
UNITRONIX 7fa7d10a8f Enhance BetterDesk release workflow documentation to clarify branch targeting and release processes. Added mandatory branch roles for dev and main, detailed guidelines for when to use each, and emphasized the importance of syncing after merges. Updated descriptions and structured sections for better readability. 2026-07-31 22:20:54 +02:00
UNITRONIX 28893f8117 fix(mesh): emit stable 96-hex MeshID in download.msh (Fixes #336)
Replace the hardcoded 40-char MeshID placeholder with a persisted per-group SHA-384 id so MeshAgent no longer fails with bad size on panel-downloaded .msh files.
2026-07-31 22:11:55 +02:00
github-actions[bot] c17521b3e6 chore: bump version to 3.5.2 [version-bump] 2026-07-31 20:01:53 +00:00
UNITRONIX ca2efc9fb8 Merge pull request #339 from UNITRONIX/main
docs: sync sponsors list (Redspin, MyNameisStitch) to dev
2026-07-31 22:01:29 +02:00
UNITRONIX 87e6cd7320 docs: add Redspin to Individual Backers
Also add always-apply Cursor rule to update SPONSORS.md and push to main promptly when a new supporter arrives.
2026-07-31 21:59:15 +02:00
UNITRONIX 8e2f8fd67c docs: add MyNameisStitch to Individual Backers
Acknowledge Buy Me a Coffee support and the Web Remote report (#329).
2026-07-31 20:49:59 +02:00
github-actions[bot] eeb4389cc2 chore: bump version to 3.5.1 [version-bump] 2026-07-31 18:39:05 +00:00
UNITRONIX 8dc9728ef7 Merge pull request #338 from UNITRONIX/sync/main-to-dev-3.5.0
sync: main 3.5.0 → dev (post-release baseline)
2026-07-31 20:38:43 +02:00
UNITRONIX cc885d327c Merge pull request #337 from UNITRONIX/release/3.5.0-bump
chore: release version 3.5.0 [version-bump]
v3.5.0
2026-07-31 20:34:26 +02:00
UNITRONIX 98fea11ca3 chore: release version 3.5.0 [version-bump]
Manual completion after version-bump-main could not push to protected main.
2026-07-31 20:31:00 +02:00
UNITRONIX 8a78d3a63a Merge pull request #334 from UNITRONIX/release/3.5.0-stable
Release: BetterDesk 3.5.0 (stable) — classic default, UX 3.5 Beta opt-in
2026-07-31 20:23:48 +02:00
UNITRONIX c2dc06fc8f chore(release): curate gentle 3.5.0 notes (UX 3.5 opt-in Beta)
Frame dual-mode chrome with classic as the default production UI and UX 3.5
as optional Beta, plus OIDC/Docker/FreeBSD items shipping with the merge.
2026-07-31 20:20:09 +02:00
github-actions[bot] ede02cb927 chore: bump version to 3.4.15 [version-bump] 2026-07-31 18:17:36 +00:00
UNITRONIX efccd2aac6 Merge pull request #333 from UNITRONIX/feat/ux35-beta-label
feat(console): label UX 3.5 shell switch as Beta
2026-07-31 20:16:46 +02:00
UNITRONIX 8956ec653d feat(console): label optional UX 3.5 shell switch as Beta
Keep classic as the default production chrome. Mark the opt-in switcher
with a BETA badge/tooltip and show a topbar chip while UX 3.5 is active.
2026-07-31 20:12:42 +02:00
github-actions[bot] 8cbb7a3f6c chore: bump version to 3.4.14 [version-bump] 2026-07-31 17:58:34 +00:00
UNITRONIX 54aca708a7 Merge pull request #330 from UNITRONIX/sync/main-to-dev-3.4.3
sync: main 3.4.3 → dev (#302 enrollment hardening)
2026-07-31 19:57:01 +02:00
UNITRONIX a8f73b05b9 fix(ci): replace operator LAN IP in OIDC redirect URL test
Use documentation-range 203.0.113.10 so Secret Scan (betterdesk-internal-lan-ip) passes on the main→dev sync PR.
2026-07-31 19:53:36 +02:00
UNITRONIX 6a1806b8f3 chore: sync main 3.4.3 into dev (#302 enrollment hardening)
Bring stable signal outbound gate hardening (initiator_pending_enrollment),
Web Remote SignedId verify, and open-issue hotfixes onto dev while keeping
the 3.4.13 development version baseline.
2026-07-31 19:48:44 +02:00
UNITRONIX 7ff1222b94 docs(proxy): clarify Web Remote vs native WSS paths (Refs #329)
Never route /ws/rendezvous to Go :21118; document /ws/relay collision and Close 1000 framing mismatch.
2026-07-31 07:05:36 +02:00
UNITRONIX 689494d4fa chore: release version 3.4.3 [version-bump] v3.4.3 2026-07-30 19:31:11 +02:00
UNITRONIX 80f23218cd Merge pull request #328 from UNITRONIX/hotfix/3.4.3-open-issues
hotfix: open issues remediation (3.4.3)
2026-07-30 19:15:53 +02:00
UNITRONIX 93b9682a4e chore(release): prepare 3.4.3 notes for open-issue fixes
Promote [Unreleased] changelog into 3.4.3 for the hotfix release
(OIDC Waiting, viewer-only outbound, Docker channel, prior Unreleased fixes).
2026-07-30 19:14:27 +02:00
UNITRONIX 0189bcb25f fix(auth,signal): OIDC user.info, viewer-only outbound, Docker channel UX
RustDesk 1.4.x ignored OIDC auth-query success without user.info (#326).
TCP RegisterPk IP bind + client login token restore service-off outbound
without weakening managed pending rejection (#327/#302). Document Caddy
WSS/308 and clarify GHCR channel is image-tag based (#294/#299).

Refs #302 #304 #314 #315 #319 #320 #321 #323 #325 #326 #327 #294 #299
2026-07-30 19:10:44 +02:00
UNITRONIX 6767b41b97 fix(web-remote): harden SignedId key verify after #313 (Refs #313)
Reload id_ed25519.pub per viewer render and verify RelayResponse.pk then SignedId with the correct RustDesk key chain so base64 Keys work; desktop signature-mismatch without Key remains expected config.
2026-07-29 20:10:01 +02:00
UNITRONIX 21e0d02e3d fix(users): fail closed on last-admin delete mirror (Fixes #315)
Prevent false UI success when Go refuses deleting the last Super Admin on dual-SQLite; mirror before local delete and keep installer admin reset unchanged.
2026-07-29 19:59:37 +02:00
UNITRONIX b6185426bd fix(betterdesk.sh): keep self-signed cert when deploy src==dest (Fixes #325)
_safe_cp_tls_file no longer deletes betterdesk.crt when source and dest are the same real file after openssl generates certs in place.
2026-07-29 19:47:32 +02:00
UNITRONIX 8297eaf48f fix(ui): light theme Client Config contrast and mask public key (Fixes #319) 2026-07-29 19:33:59 +02:00
UNITRONIX 870f2b6431 fix(registrations): improve UI layout and styling for search and table columns
- Adjusted search icon positioning and added styles to prevent overlap.
- Centered content in Platform, Version, Status, Requested, and Actions columns.
- Updated action button and platform icon wrappers for better alignment and display.
- Enhanced table header classes for improved styling consistency.
2026-07-29 19:25:29 +02:00
UNITRONIX 59e14f7576 fix(mesh): PEM web cert hash and MESH_WEB_CERT_FILE for reverse proxy (Fixes #321)
MeshAgent behind TLS-terminating proxies was rejected with bad web cert hash when Go hashed TLS_CERT incorrectly (raw PEM) or used an internal cert instead of the public LE cert agents see.
2026-07-29 19:15:23 +02:00
UNITRONIX 7b30765efe fix(devices): kebab Unban no longer calls Ban API (Fixes #323) 2026-07-29 19:05:46 +02:00
github-actions[bot] 0c66f872a2 chore: bump version to 3.4.13 [version-bump] 2026-07-28 15:35:53 +00:00
UNITRONIX 7cf7968d4c chore: sync main 3.4.2 into dev after Web Remote hotfix
Keep dev at 3.4.12; bring stable Web Remote release notes and brace-expansion audit override from main.
2026-07-28 17:34:58 +02:00
UNITRONIX fe1c3963dc Merge pull request #317 from UNITRONIX/release/3.4.2-bump
chore: release version 3.4.2 [version-bump]
v3.4.2
2026-07-28 07:06:57 +02:00
UNITRONIX 0f8273ebb7 chore: release version 3.4.2 [version-bump]
Stable hotfix: restore Web Remote after enrollment outbound gate (Refs #313).
2026-07-28 06:54:54 +02:00
UNITRONIX c1cfd8f765 Merge pull request #316 from UNITRONIX/hotfix/313-web-remote-panel-proxy
Hotfix: restore Web Remote after enrollment outbound gate (#313)
2026-07-28 06:53:50 +02:00
UNITRONIX c27eaf8ed6 fix(web-nodejs): bump brace-expansion override for npm audit CI
GHSA-mh99-v99m-4gvg requires brace-expansion >=5.0.8; previous ^1.1.16 still failed Web Console CI audit on stable.
2026-07-28 06:50:00 +02:00
UNITRONIX a749827ae0 fix(signal): restore Web Remote after enrollment outbound gate (Refs #313)
Accept PunchHole/RequestRelay from PANEL_SIGNAL_PROXY_CIDRS (default loopback) so panel-proxied Web Remote works again without weakening #302.
2026-07-28 06:46:17 +02:00