v0.61.0

## Release Notes for v0.61.0

### What's New
#### 🔐 Fine-Grained SSH Access Control (Breaking Change)

NetBird introduces **fine-grained SSH access control** with support for **explicit local OS users** on target machines.  
Administrators can now define which NetBird users or groups are allowed to connect **as specific local system users**, enabling safer, more predictable SSH access without relying on shared or implicit credentials.

<img width="600" height="600" alt="image" src="https://github.com/user-attachments/assets/31a9b321-3da7-4c71-a598-e68fe633e9e8" />


⚠️ **Breaking change for self-hosted deployments**  
Self-hosted installations **must upgrade the Management server** before upgrading their clients and enabling or using the new SSH access model.  
Failing to upgrade may result in SSH access issues or unexpected behavior.

Learn more at: https://docs.netbird.io/manage/peers/ssh#fine-grained-access-control

#### 🔄 Automatic Client Updates (Windows & macOS) - Beta

NetBird adds **automatic client update support** for **Windows and macOS**, helping users stay up to date with the latest fixes and features while maintaining full control over update behavior. This feature is currently in beta and administrators will be able to enable, disable, and configure a custom max version. 

A few notes on the behavior:
- Update check will happen on connection
- Supported on **Windows and macOS only**
- **Disabled by default**
- Can be enabled via **Settings → Client** in the NetBird application. See image below:

<img width="600" height="600" alt="image" src="https://github.com/user-attachments/assets/117ba70a-f189-43c2-b648-7a6b71b49c9a" />

Learn more at: https://docs.netbird.io/manage/peers/auto-update

#### Management Enhancements
- Added **fine-grained SSH access control** across client and management.  
  [#4969](https://github.com/netbirdio/netbird/pull/4969)

#### Client Enhancements
- Introduced **auto-update support** for the client to simplify upgrades.  
  [#4732](https://github.com/netbirdio/netbird/pull/4732)
- Improved **management domain lookup** by adding an additional timeout.  
  [#4983](https://github.com/netbirdio/netbird/pull/4983)
- Added **Android profile switching** for easier multi-profile usage.  
  [#4884](https://github.com/netbirdio/netbird/pull/4884)
- Fixed **Linux UI flickering** during state updates.  
  [#4886](https://github.com/netbirdio/netbird/pull/4886)
- Applied **DNS host configuration only on changes** to reduce unnecessary updates.  
  [#4695](https://github.com/netbirdio/netbird/pull/4695)

#### MISC
- Added **FreeBSD port release job** to GitHub Actions.  
  [#4916](https://github.com/netbirdio/netbird/pull/4916)
- Added **conditional checks for FreeBSD diff file generation** in CI.  
  [#5001](https://github.com/netbirdio/netbird/pull/5001)
- Updated to **new signing pipelines v0.1.0**.  
  [#4993](https://github.com/netbirdio/netbird/pull/4993)
- Fixed a **broken image link** in the README.  
  [#4876](https://github.com/netbirdio/netbird/pull/4876)
- Preset signal port on templates [#5004](https://github.com/netbirdio/netbird/pull/5004)

### New Contributors
- @hey-august made their first contribution in [#4876](https://github.com/netbirdio/netbird/pull/4876)

**Full Changelog**: [v0.60.8...v0.61.0](https://github.com/netbirdio/netbird/compare/v0.60.8...v0.61.0)