Skip to content

WebSSH v2.6.0

Latest
Latest

Choose a tag to compare

View all tags
@bifrost0x bifrost0x released this 23 Oct 07:23
· 10 commits to main since this release
Immutable release. Only release title and notes can be modified.
v2.6.0
6806b56
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

WebSSH 2.6.0 brings a redesigned workspace, trusted SSH connections, reviewable server operations, local Nerd Fonts and a more capable File Manager.

Highlights

  • Work with floating and split terminal windows, clearer host groups, favorites, layouts and responsive navigation. Personalize theme scenes, backgrounds and terminal appearance.
  • Review and accept new target and jump-host fingerprints before authentication. Changed host keys remain blocked. Preview OpenSSH/JSON host imports, map existing keys and jump hosts, and export connection metadata without credentials.
  • Keep private per-host notes, favorite directories and assigned command sets. Insert parameterized commands as quoted POSIX arguments after review.
  • Inspect services, containers, processes and logs in the server-management workspace. Optional mutations require an owned session, a reviewed one-use intent and account reauthentication; reboot also requires the exact host text.
  • Create files directly in the File Manager. Review edits with colored, numbered line changes and download the original bytes before saving. Existing SFTP/SMB conflict handling is preserved.
  • Change ordinary Unix permission bits for one or up to 20 selected SFTP files/directories. Every target is checked individually; requests are sequential, non-recursive and stop at the first conflict or error. Partial and uncertain outcomes are shown explicitly.
  • Choose locally served JetBrains Mono, Hack, Fira Mono or Source Code Pro, with Nerd Font icons and regular/bold faces. Live TUI state, scrollback, input modes and colours survive saved appearance changes.

Fixes, performance and maintenance

  • Defer terminal fonts and syntax highlighting until needed, keeping the initial Overview lighter.
  • Preserve open host/command-set actions and keyboard focus during asynchronous list refreshes.
  • Fix authentication redirects and Socket.IO proxy handling for deployments under subfolders, with expanded Apache and HAProxy examples.
  • Improve instance status, session diagnostics and administrator controls for individual browser connections, SSH sessions and transfers.
  • Preserve split UTF-8 terminal characters and final buffered output, and synchronize PTY dimensions after font metrics settle.
  • Harden container packaging and tracked-file leak checks, update locked dependencies, and shorten CI through weighted parallel browser/Python gates without dropping coverage.
  • Refresh the product website, documentation and product tour.

Activation and upgrade notes

Existing deployment settings remain in place. Two capabilities are disabled by default:

  • Add or uncomment SFTP_CHMOD_ENABLED=true in the Compose environment and recreate the WebSSH container to enable permissions editing. The SFTP server must advertise lsetstat@openssh.com v1 for safe no-follow updates. This applies to SFTP, not SMB ACLs; it grants no additional remote privileges. Recursive chmod and special permission bits are not offered.
  • Set SERVER_OPERATIONS_ENABLED=true to enable the reviewed server-mutation workflow. Remote account permissions still apply; optional sudo is non-interactive. See the server-management guide before enabling it.

Back up the complete data directory and matching secret before upgrading. Session profile metadata is migrated additively, and private host context is included in backups. After adopting parameterized argv command-set steps, older versions cannot read those collections. Remove such sets through the updated UI before downgrading, or restore a consistent pre-upgrade data/secret backup. An in-place downgrade after using new formats is not guaranteed.

Containers and validation

Linux AMD64 and ARM64 images are published as ghcr.io/bifrost0x/webssh:2.6.0, :2.6 and :latest, with SPDX SBOM and SLSA provenance attestations. Release CI passed on 6806b56cafd3445f0abd14ff2aef5b6b3883504b.

Immutable image: ghcr.io/bifrost0x/webssh@sha256:27bcf7bf013a39243192dccc6ca9078bd7bb610e5e9295fd83ee7cecb1bf0b37. Both native candidates passed the required Trivy and compatible/hardened runtime checks; no fixable HIGH/CRITICAL findings were reported. Downloadable image identity, per-architecture SPDX SBOM/provenance and checksums are attached to this release.

Automated CI does not certify every operator's deployment. Real identity-provider/browser approvals, native-device input behaviour and deployment-specific upgrade, restore and rollback rehearsals remain environment-specific acceptance work. Unrun final-revision checks are tracked in #288; the closed v2.5.0 follow-up #254 is historical evidence, not proof of v2.6.0 acceptance.

Full changelog: v2.5.0...v2.6.0

Assets 9
Loading