WebSSH 2.3.0

WebSSH 2.3.0 improves everyday terminal and file workflows, adds account and session controls, and strengthens authentication and resource isolation.

Highlights

• Choose a per-user browser session duration, with matching cookie lifetimes.
• Link an existing account to OIDC through a verified self-service flow.
• Improve mobile terminal input, Android IME handling, selection copying, and tmux clipboard support.
• Restore touch scrolling and focus behavior in the mobile file manager, and make connection and file actions more consistent.
• Queue transfers while copies are active while preserving serialized execution.
• Fix terminal uploads and make note saving reflect confirmed persistence, including recovery after failed or timed-out saves.
• Improve connection replacement, cancellation, retry behavior, pane launching, and diagnostics.
• Reduce initial page-load overhead and improve static asset delivery and caching.

Security and maintenance

• Harden SSH input/output backpressure, acknowledgement deadlines, terminal replay, and session/resource boundaries.
• Strengthen LDAP revalidation, SMB path handling, Tailscale, recovery, and OIDC account-linking boundaries.
• Refresh dependencies and locked requirements, and expand regression and responsive browser coverage.

Container

Available as ghcr.io/bifrost0x/webssh:2.3.0 for Linux AMD64 and ARM64, with SBOM and provenance attestations.

Full Changelog: v2.2.1...v2.3.0