Termix v26.11.2 Beta 2

Warning

This is a beta of the next Termix release, built from dev-26.11.2. It can have bugs, so keep a backup and don't use it where you can't afford problems.

Found a bug or have feedback? Send beta feedback. It is the fastest way to get it fixed before the stable release.

How to get it

• Docker: ghcr.io/termix-ssh/termix:beta follows every beta. ghcr.io/termix-ssh/termix:26.11.2-beta.2 stays on this one.
• Desktop: download an installer from the assets below.
• Going back: switch to the latest image or a stable installer. Keep a backup of your data folder, since a beta can change the database.

Changes in 26.11.2 Beta 2

Features

• harden the desktop app with app://, an IPC guard, signed updates and fuses
• harden server headers, cookies, rate limits and key rotation
• add authorization matrix test and tighten access checks
• add sdk net-guard so plugin sockets get the outbound address check
• attest and sign release files, signed SHA256SUMS, cosign images
• add supply chain checks, SBOM, pinned base images and scripts off installs

Fixes

• run the macOS sharp check with node since the app can't run as node
• tighten sign in answers and cookie origin checks
• sign docker hub images before the termixssh login replaces it
• log in to GHCR as lukegus so the personal image mirror still gets pushes
• find the draft release by id and keep its tag on every edit
• rework the sdk sudo helper and bump the sdk to 1.1.6
• wait for a new draft release to show up before reading its id
• skip the slow api key hash on repeat requests
• require full length tags on AES-GCM decrypts
• keep database restore paths inside the data folder
• tighten the desktop login frame handoff
• keep cpu-features out after the sharp installs in desktop builds
• drop unbuilt cpu-features in CI installs and stamp beta version on Windows
• report failed database saves to the caller
• tie live connections to the login that opened them
• share one view check across host read routes
• keep use only shared logins on the server
• refuse unchecked host keys when nobody can confirm them
• pin proxy test connections to the checked address
• keep database export files inside their temp folder
• stop the desktop backend and its children when the app quits

Other changes

• matrix cache key, lockfile aliases, rsa test host key and progress
• update translations and plugin pins
• bundle opkssh 0.19.2 and drop npm from the image
• plugin guide release page for immutable releases
• keep core releases as drafts until every file is uploaded
• note that a plugin's own postinstall still runs in CI
• note the workflow lint in the plugin guide
• harden workflows, pin actions and add workflow lint and CODEOWNERS
• stop the sync id resolver test timing out under load
• use the CI app and environment secrets in workflows
• update dependencies with security fixes
• drop links to the deleted Support repo
• update the demo video link

Full diff