v3.4.2

vectorize-io/hindsightv3.4.2Jul 28, 2026by UNITRONIX

Upgrading?

Release notes summary

This hotfix restores Web Remote functionality that was previously broken by an enrollment gate update, ensuring proper connection handling for unapproved clients.

Key Highlights

  • Fixed Web Remote broken after enrollment outbound gate
  • Override npm audit for brace-expansion vulnerability

New Features

  • Restored Web Remote connectivity
  • Security patch for npm audit

Full Release Notes

## Fixed
- **Web Remote broken after enrollment outbound gate (#313, #302):** PunchHole/RequestRelay from the panel `/ws/rendezvous` proxy (default loopback CIDRs via `PANEL_SIGNAL_PROXY_CIDRS`) are accepted again without requiring a registered RustDesk peer. Unapproved clients and anonymous public initiators remain blocked. Ships via panel update (Go signal restart). Native/all-in-one needs no env change; Docker split console↔server must set `PANEL_SIGNAL_PROXY_CIDRS` to the console CIDR if still denied.
- **npm audit (`brace-expansion`):** override bumped to `^5.0.8` (GHSA-mh99-v99m-4gvg) so Web Console CI `npm audit --omit=dev` passes on stable.

**Channel:** stable `main` → **3.4.2**
**Deploy:** ships via panel Settings → Updates (Go signal restart). Native/all-in-one: no manual env.
**Verify:** Web Remote to an online peer works (no generic Error / Device not found); signal log no longer shows `initiator_not_registered` for `::1` / `127.0.0.1` on Web Remote punch.

Related: https://github.com/UNITRONIX/BetterDesk/issues/313 · https://github.com/UNITRONIX/BetterDesk/issues/302


## What's Changed
* Hotfix: restore Web Remote after enrollment outbound gate (#313) by @UNITRONIX in https://github.com/UNITRONIX/BetterDesk/pull/316
* chore: release version 3.4.2 [version-bump] by @UNITRONIX in https://github.com/UNITRONIX/BetterDesk/pull/317


**Full Changelog**: https://github.com/UNITRONIX/BetterDesk/compare/v3.4.1...v3.4.2

Related Repositories