v3.4.2
goauthentik/authentikv3.4.2Jul 28, 2026by UNITRONIX
Upgrading?
AI Summary
A hotfix restoring Web Remote functionality that was broken by previous security gate changes, alongside an npm security audit fix.
Key Highlights
- Restored Web Remote punch holes and relay requests after enrollment outbound gate.
- Fixed npm audit for `brace-expansion` vulnerability by overriding to `^5.0.8`.
- Allowed loopback CIDRs via `PANEL_SIGNAL_PROXY_CIDRS` for Docker split deployments.
New Features
- Web Remote functionality restored for unapproved clients.
- npm security overrides for production builds.
Full Release Notes
## Fixed - **Web Remote broken after enrollment outbound gate (#313, #302):** PunchHole/RequestRelay from the panel `/ws/rendezvous` proxy (default loopback CIDRs via `PANEL_SIGNAL_PROXY_CIDRS`) are accepted again without requiring a registered RustDesk peer. Unapproved clients and anonymous public initiators remain blocked. Ships via panel update (Go signal restart). Native/all-in-one needs no env change; Docker split console↔server must set `PANEL_SIGNAL_PROXY_CIDRS` to the console CIDR if still denied. - **npm audit (`brace-expansion`):** override bumped to `^5.0.8` (GHSA-mh99-v99m-4gvg) so Web Console CI `npm audit --omit=dev` passes on stable. **Channel:** stable `main` → **3.4.2** **Deploy:** ships via panel Settings → Updates (Go signal restart). Native/all-in-one: no manual env. **Verify:** Web Remote to an online peer works (no generic Error / Device not found); signal log no longer shows `initiator_not_registered` for `::1` / `127.0.0.1` on Web Remote punch. Related: https://github.com/UNITRONIX/BetterDesk/issues/313 · https://github.com/UNITRONIX/BetterDesk/issues/302 ## What's Changed * Hotfix: restore Web Remote after enrollment outbound gate (#313) by @UNITRONIX in https://github.com/UNITRONIX/BetterDesk/pull/316 * chore: release version 3.4.2 [version-bump] by @UNITRONIX in https://github.com/UNITRONIX/BetterDesk/pull/317 **Full Changelog**: https://github.com/UNITRONIX/BetterDesk/compare/v3.4.1...v3.4.2
Related Repositories
public-apis/public-apis★ 491,206
A collective list of free APIs
NousResearch/hermes-agent★ 256,070
The agent that grows with you
yt-dlp/yt-dlp★ 200,240
A feature-rich command-line audio/video downloader
microsoft/markitdown★ 191,555
Python tool for converting files and office documents to Markdown.
Significant-Gravitas/AutoGPT★ 187,699
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.