Skip to content

aterkeep 1.1.0

Choose a tag to compare

@github-actions github-actions released this 10 Aug 15:42
· 34 commits to main since this release

If you are running 1.0.0, update. The 1.0.0 binaries were published before
the panel's cross-site scripting hole was closed, and the fix is not in them.

Security

  • Closed an XSS in the web panel. Server-supplied strings reached the DOM
    without escaping; a crafted server name or console line could run script in
    the panel's origin — the same origin that holds your session.
  • Removed a clause from the licence that was not enforceable as written.
  • Hardened CI: the private-crate token is now revoked before any third-party
    action runs, so no step after the build can see it.

Fixed

  • The anti-idle bot no longer fights itself. Two code paths could both hold
    a connection, so the bot's own joins looked like player activity and it kept
    waking a server that had nothing on it.
  • Split the daemon into modules and fixed what the audit turned up inside it.
  • Two measured defects in the panel's styling.

Added

  • Set up directly with an Aternos account, and renew the session without asking
    you to log in again.
  • The design system is applied across the panel — spacing, type and colour now
    come from one place instead of per-screen guesses.
  • A 30-second product video in each of the 14 supported languages.

Downloads

File For
aterkeep-windows.exe Windows
aterkeep-linux-amd64 Linux x86-64
aterkeep-macos-arm64 macOS, Apple Silicon
aterkeep-extras.zip Anti-idle bot, autostart scripts and docs — grab this too if you want either

Android/Termux builds locally: see docs/TERMUX.md.