v3.41.3 v3.4.3
BITyia/DroneSplatJul 30, 2026 → Jul 30, 20260 days between releases
What's New
v3.4.3 appears to be a different product line than v3.41.3, so the delta is a hotfix bundle rather than a normal upgrade.
Breaking Changes
- The version string regresses from 3.41.3 to 3.4.3, so semver ranges or pins expecting >=3.41 will not resolve to this build.
- Docker update channel behavior changed: GHCR now keys off the BETTERDESK_IMAGE_TAG environment variable instead of the panel channel switch, so channel-based update automation must be reconfigured.
- Client Configuration public keys are masked by default, which can break scripts or tooling that scrape the key from the UI or API output.
New Features
- Public keys in Client Configuration are masked by default to reduce accidental exposure.
- Enrollment flow gains hardened handling of pending_device records.
- Docker update channel selection is now driven by an explicit image tag variable.
Improvements
- Documentation added for Caddy WSS/308 proxying and for the Docker channel vs. image tag distinction.
- Bundled previously unreleased work including native TLS, MeshAgent web certificate handling, and a light theme.
- Admin delete, SignedId, and enrollment UI items from the prior unreleased set are now shipped.
Bug Fixes
- OIDC client login no longer hangs on the 'Waiting' account-auth state; user.info is now included in the auth-query payload.
- Viewer-only outbound ID is now found when the service is stopped, via TCP RegisterPk IP bind plus client login token.
- Enrollment pending_device handling was hardened against malformed or stale records.
- Unban kebab-menu action corrected as part of the rolled-up unreleased fixes.
Upgrade Notes
Confirm you are actually upgrading the intended repository: the older tag belongs to a VPN port-forwarding project while the newer tag belongs to a remote-desktop panel, so these notes describe an unrelated codebase rather than a forward delta. If you are on the panel product, set BETTERDESK_IMAGE_TAG for GHCR-based updates instead of relying on the panel channel switch, then update, restart when prompted, and retest the linked OIDC and viewer-only issues. Expect masked public keys in Client Configuration and adjust any automation that reads them.
The Two Releases
v3.41.3
Jul 30, 2026· 3 months ago
A critical fix for a VPN server port forwarding deadlock bug that was introduced during the back-porting process from the master branch to v3.41.2.
Full release notesBetterDesk 3.4.3
Jul 30, 2026· 3 months ago
Security and reliability hotfixes including masking public keys, fixing OIDC login issues, and correcting viewer-only client identifiers.
Full release notes