v3.4.3

NVIDIA/NeMo-Speech.cppv3.4.3Jul 30, 2026by UNITRONIX

AI Summary

A hotfix release that focuses on security and stability, including masking client public keys by default, improving Docker update channel handling, and fixing issues with OIDC authentication and device enrollment.

Key Highlights

Masked Client Configuration public key by default
Fixed OIDC client stuck on 'Waiting account auth'
Fixed Viewer-only outbound ID not found with service stopped
Hardened enrollment pending_device

Full Release Notes

## [3.4.3] — 2026-07-30

Hotfix from open-issue remediation. Ships via Settings → Updates (panel) unless noted.

### Changed
- Client Configuration public key masked by default (#319)
- Docker update channel (#299): GHCR uses BETTERDESK_IMAGE_TAG, not panel channel switch

### Fixed
- OIDC client stuck on Waiting account auth (#326 / #304) — user.info in auth-query payload
- Viewer-only outbound ID not found with service stopped (#327) — TCP RegisterPk IP bind + client login token
- Enrollment pending_device hardening (#302)
- Prior Unreleased: #313 SignedId, #315 admin delete, #325 native TLS, #320 enrollment UI, #321 MeshAgent web cert, #323 Unban kebab, #319 light theme

### Docs
- Caddy WSS / 308 (#294), Docker channel vs image tag (#299)

Verify: update panel → restart if prompted → retest linked issues.


## What's Changed
* hotfix: open issues remediation (3.4.3) by @UNITRONIX in https://github.com/UNITRONIX/BetterDesk/pull/328


**Full Changelog**: https://github.com/UNITRONIX/BetterDesk/compare/v3.4.2...v3.4.3