Skip to content

v0.6.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 May 23:19
· 44 commits to main since this release
v0.6.1
6102f31
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

###v0.6.1 (2026-05-30)

  • Security (main): main-state.php no longer emits the per-boot CSRF token in its read-only JSON snapshot. The token is delivered solely via the #modernui-main-root data-csrf attribute (htmlspecialchars-escaped), which the front-end already treats as authoritative — keeping it out of a readable response body (data minimization / defense-in-depth). No functional change: action POSTs still read the token from the attribute.
  • Fix (main): Unassigned Devices "Historical (previous) devices" detection now compares serials exactly instead of with a loose bidirectional substring test. A previously-seen device whose serial happens to be a substring of an attached disk's serial (or vice-versa) is no longer wrongly treated as present and hidden from the Historical list.
Assets 3
Loading