v0.6.47 v3.5.168
t8y2/dbxOct 17, 2026 → Oct 17, 20260 days between releases
What's New
UX 3.5 becomes default console shell with security hardening and OIDC/TOTP authentication
Breaking Changes
- JWT tokens issued before this version are rejected if they lack aud/iss/nbf claims
- Classic console shell removed; only UX 3.5 is supported
- CSP policy on /remote removed unsafe-inline and unsafe-eval
New Features
- UX 3.5 UI updates including Material Symbols and sticky settings tabs
- OIDC role mapping administration and discovery retry logic
- TOTP 2FA support for panel accounts
- Web Remote WebSocket bridge and offline connection policy
- Org credential vault (AES-GCM) for the address book
Improvements
- SSRF restrictions for GitHub fetches
- Path injection fixes in Multer and Generator
- Generic agent releases with QR activation
- Docker installer improvements
- Scheduled full-instance backups
Bug Fixes
- Path injection alerts closed in Multer and Generator
- GitHub fetch SSRF restrictions enforced
Upgrade Notes
Users must re-login as JWT tokens now require aud/iss/nbf claims. The classic console shell is no longer supported. Set CSP_RELAX_REMOTE=true if the /remote UI breaks due to CSP changes.
The Two Releases
DBX v0.6.47
Oct 17, 2026· 5 days ago
This release introduces proxy support for Cloudflare D1 and Turso, adds SQL generation capabilities for row selection to facilitate rollback scripts, and enhances the editor with new shortcuts. It also includes a wide range of bug fixes for interactions with various database systems including MySQL, PostgreSQL, Oracle, and SQL Server.
Full release notesBetterDesk 3.5.168
Oct 17, 2026· 5 days ago
A comprehensive stable update introducing UX 3.5 as the default console shell, extensive security hardening (SSRF, path injection), OIDC SSO-first login with TOTP, and enhanced remote capabilities like Web Remote and generic agent activation.
Full release notes