v3.4.3

honojs/honov3.4.3Jul 30, 2026by UNITRONIX

AI Summary

A hotfix release focused on security hardening, specifically masking client configuration keys and resolving OIDC authentication issues.

Key Highlights

Changed client configuration public key masking by default for improved security.
Fixed OIDC client login stuck on 'Waiting' by adding user.info to the auth-query payload.
Fixed viewer-only outbound ID issues and hardened enrollment pending_device logic.

Full Release Notes

## [3.4.3] — 2026-07-30

Hotfix from open-issue remediation. Ships via Settings → Updates (panel) unless noted.

### Changed
- Client Configuration public key masked by default (#319)
- Docker update channel (#299): GHCR uses BETTERDESK_IMAGE_TAG, not panel channel switch

### Fixed
- OIDC client stuck on Waiting account auth (#326 / #304) — user.info in auth-query payload
- Viewer-only outbound ID not found with service stopped (#327) — TCP RegisterPk IP bind + client login token
- Enrollment pending_device hardening (#302)
- Prior Unreleased: #313 SignedId, #315 admin delete, #325 native TLS, #320 enrollment UI, #321 MeshAgent web cert, #323 Unban kebab, #319 light theme

### Docs
- Caddy WSS / 308 (#294), Docker channel vs image tag (#299)

Verify: update panel → restart if prompted → retest linked issues.


## What's Changed
* hotfix: open issues remediation (3.4.3) by @UNITRONIX in https://github.com/UNITRONIX/BetterDesk/pull/328


**Full Changelog**: https://github.com/UNITRONIX/BetterDesk/compare/v3.4.2...v3.4.3