v3.4.3

roboflow/supervisionv3.4.3Jul 30, 2026by UNITRONIX

AI Summary

A hotfix release focused on remediation of open issues, fixing OIDC authentication, viewer login failures, and masking client configuration keys.

Key Highlights

OIDC client stuck on 'Waiting account auth' is fixed by correcting user.info in auth-query.
Viewer-only outbound ID not found when service stopped is resolved via TCP RegisterPk IP bind.
Client Configuration public key is masked by default.
Docker update channel logic uses GHCR tag instead of panel channel switch.

Full Release Notes

## [3.4.3] — 2026-07-30

Hotfix from open-issue remediation. Ships via Settings → Updates (panel) unless noted.

### Changed
- Client Configuration public key masked by default (#319)
- Docker update channel (#299): GHCR uses BETTERDESK_IMAGE_TAG, not panel channel switch

### Fixed
- OIDC client stuck on Waiting account auth (#326 / #304) — user.info in auth-query payload
- Viewer-only outbound ID not found with service stopped (#327) — TCP RegisterPk IP bind + client login token
- Enrollment pending_device hardening (#302)
- Prior Unreleased: #313 SignedId, #315 admin delete, #325 native TLS, #320 enrollment UI, #321 MeshAgent web cert, #323 Unban kebab, #319 light theme

### Docs
- Caddy WSS / 308 (#294), Docker channel vs image tag (#299)

Verify: update panel → restart if prompted → retest linked issues.


## What's Changed
* hotfix: open issues remediation (3.4.3) by @UNITRONIX in https://github.com/UNITRONIX/BetterDesk/pull/328


**Full Changelog**: https://github.com/UNITRONIX/BetterDesk/compare/v3.4.2...v3.4.3