v3.4.2

UNITRONIX/BetterDeskv3.4.2Jul 28, 2026by UNITRONIX

AI Summary

A hotfix restoring Web Remote functionality that was broken after the enrollment outbound gate changes, alongside an npm audit security fix.

Key Highlights

Restored Web Remote functionality after enrollment outbound gate changes.
Fixed npm audit vulnerability for the brace-expansion package.

Full Release Notes

## Fixed
- **Web Remote broken after enrollment outbound gate (#313, #302):** PunchHole/RequestRelay from the panel `/ws/rendezvous` proxy (default loopback CIDRs via `PANEL_SIGNAL_PROXY_CIDRS`) are accepted again without requiring a registered RustDesk peer. Unapproved clients and anonymous public initiators remain blocked. Ships via panel update (Go signal restart). Native/all-in-one needs no env change; Docker split console↔server must set `PANEL_SIGNAL_PROXY_CIDRS` to the console CIDR if still denied.
- **npm audit (`brace-expansion`):** override bumped to `^5.0.8` (GHSA-mh99-v99m-4gvg) so Web Console CI `npm audit --omit=dev` passes on stable.

**Channel:** stable `main` → **3.4.2**
**Deploy:** ships via panel Settings → Updates (Go signal restart). Native/all-in-one: no manual env.
**Verify:** Web Remote to an online peer works (no generic Error / Device not found); signal log no longer shows `initiator_not_registered` for `::1` / `127.0.0.1` on Web Remote punch.

Related: https://github.com/UNITRONIX/BetterDesk/issues/313 · https://github.com/UNITRONIX/BetterDesk/issues/302


## What's Changed
* Hotfix: restore Web Remote after enrollment outbound gate (#313) by @UNITRONIX in https://github.com/UNITRONIX/BetterDesk/pull/316
* chore: release version 3.4.2 [version-bump] by @UNITRONIX in https://github.com/UNITRONIX/BetterDesk/pull/317


**Full Changelog**: https://github.com/UNITRONIX/BetterDesk/compare/v3.4.1...v3.4.2