v3.4.1

3.4.1 (2026-08-18)

Bug Fixes

• add try/catch to Page.removeScriptToEvaluateOnNewDocument to catch invalid idents (5e09bdf)
• cdp: fix pipe drain thread deadlock on windows (1da6863)
• ffi-binder: fix use-after-free on cdp reconnect (e0a84af)
• Fix Millennium crashing on the latest Steam beta (787064e)
• Fix Millennium crashing on the latest Steam beta release (f75db4f)
• frontend: guard against undefined webpack class names (c580b85)
• locales: localize theme installer status messages (5dcda8e)
• logger: don't feed strftime an invalid tm when localtime_s fails (42b462b)
• loopback: guard ipc message dispatch against malformed fields (a154b3e)
• loopback: reject path traversal in steamloopback urls (6b1b978)
• loopback: release resource handler on request cancellation (68a8341)
• loopback: validate css class rewrite before serving (c5bd3e1)
• lua-host: cap json to lua conversion recursion depth (ba4d360)
• lua-host: stop pdeathsig from swallowing kill escalation (a3d4125)
• starlight: canonicalize paths with dunce to avoid \?\ verbatim prefix on Windows (1285026)
• starlight: canonicalize paths with dunce to avoid \?\ verbatim prefix on Windows (ca78964)
• ttc: remove unused fs placeholder dependency. Closes #874 (f7b9347)
• ttc: remove unused fs placeholder dependency. Closes #874 (44e01eb)
• updater: apply --beta flag to linux install script when beta channel is enabled. Closes #856 (9a7b3ff)
• updater: apply --beta flag to linux install script when beta channel is enabled. Closes #856 (b28d60a)
• webkit: avoid holding mutex across blocking cdp calls (f18e92d)