v1.0.235

Security fixes

• GHSA-59p9-8gwf-v9v7: Windows SFTP path traversal allows a malicious server to write files outside the selected download directory

Changes

• feat(core): add pinned tabs by @tyr1k in #11146
• Sort baud rate selector by numeric order by @bluekani in #11297
• feat: Add mouse wheel support for hotkeys by @bluekani in #11324
• [Feature] Group nesting "folders" & Profile tree view by @D3VL-Jack in #10788
• Make keyboard-interactive auth URLs clickable by @puneetdixit200 in #11327
• Bundle MSVC runtime DLLs in Windows portable packages by @bluekani in #11372
• Adding Cool Retro Term Amber theme by @saudiqbal in #11337
• [FEATURE] refresh Windows environment variables from registry for new sessions by @MicroGery in #11321
• fix(terminal): expose debug hotkeys in settings for remap/disable by @uadhran in #11420
• feat: add Connect, Disconnect, and Reconnect buttons to serial tab toolbar by @uadhran in #11288

Fixes

• fix: restore terminal redraw after tab reactivation by @uadhran in #11275
• fix: Plugins search by @bluekani in #11330
• fix(terminal): restore transparent background when vibrancy is enabled by @Specboss in #11326
• fix: Restore hotkey edit and remove actions by @bluekani in #11374
• fix: Exclude unnecessary Windows build artifacts by @bluekani in #11371
• fix: Pin Windows build runner to windows-2022 by @bluekani in #11370
• fix(terminal): reset stale DEC modes on connectable reconnect by @balajieswaramoorthi in #11368
• fix(ssh): prevent keepalive flooding by mapping null/0 keepaliveInterval to undefined by @linzack in #11340
• fix: ZMODEM transfer by @ruanimal in #11319
• fix(ssh): honor profile port settings on connect by @uadhran in #11366
• fix(terminal): robust context loss recovery and direct DOM fallback during GPU resets by @Gerry9000 in #11354
• fix(settings): guard hotkey config lookup for missing plugin paths by @uadhran in #11422
• fix(terminal): restart visual bell shake on repeated BEL by @uadhran in #11388
• fix: handle vault unlock modal cancellation gracefully by @uadhran in #11356
• feat: Add dropdown arrow to form-select elements by @bluekani in #11399
• fix(ssh): prevent SFTP path navigation freeze by @A-Words in #11393
• fix: replace exec() with execFile() to prevent shell injection in shellIntegration.service by @uadhran in #11290
• fix: replace exec() with execFile() to prevent shell injection in app.ts by @uadhran in #11289

New Contributors

• @cayenne17 made their first contribution in #11284
• @bluekani made their first contribution in #11297
• @D3VL-Jack made their first contribution in #10788
• @puneetdixit200 made their first contribution in #11327
• @Specboss made their first contribution in #11326
• @balajieswaramoorthi made their first contribution in #11368
• @linzack made their first contribution in #11340
• @saudiqbal made their first contribution in #11337
• @Gerry9000 made their first contribution in #11354
• @MicroGery made their first contribution in #11321
• @tyr1k made their first contribution in #11146
• @A-Words made their first contribution in #11393

Full Changelog: v1.0.234...v1.0.235