Repository navigation
aterkeep 1.1.0
If you are running 1.0.0, update. The 1.0.0 binaries were published before
the panel's cross-site scripting hole was closed, and the fix is not in them.
Security
- Closed an XSS in the web panel. Server-supplied strings reached the DOM
without escaping; a crafted server name or console line could run script in
the panel's origin — the same origin that holds your session. - Removed a clause from the licence that was not enforceable as written.
- Hardened CI: the private-crate token is now revoked before any third-party
action runs, so no step after the build can see it.
Fixed
- The anti-idle bot no longer fights itself. Two code paths could both hold
a connection, so the bot's own joins looked like player activity and it kept
waking a server that had nothing on it. - Split the daemon into modules and fixed what the audit turned up inside it.
- Two measured defects in the panel's styling.
Added
- Set up directly with an Aternos account, and renew the session without asking
you to log in again. - The design system is applied across the panel — spacing, type and colour now
come from one place instead of per-screen guesses. - A 30-second product video in each of the 14 supported languages.
Downloads
| File | For |
|---|---|
aterkeep-windows.exe |
Windows |
aterkeep-linux-amd64 |
Linux x86-64 |
aterkeep-macos-arm64 |
macOS, Apple Silicon |
aterkeep-extras.zip |
Anti-idle bot, autostart scripts and docs — grab this too if you want either |
Android/Termux builds locally: see docs/TERMUX.md.