trqsh CLI v0.1.6

Changelog

• 7ad24dd chore(deps): bump next, postcss, sharp, js-yaml, and golang.org/x/{crypto,text,net}
• 25d7f37 feat(cli): implement real self-update for trqsh update
• 72b662d feat(ops): add container HEALTHCHECK to all 5 images
• 8937218 feat(release): keyless-sign checksums.txt with cosign/Sigstore
• f09e7c3 fix(ci): build golangci-lint from source, not a possibly-stale prebuilt release
• c11ba6c fix(ci): fix golangci-lint (56 errcheck/staticcheck) and a flaky race test
• 9a7e8de fix(cli): correct stale ~/.trqsh-uz config path in help text and docs
• b069fb8 fix(cli): reject non-http(s) URLs in openBrowser
• 4ef3e8a fix(cli): stop printing every error two or three times
• b75b4fd fix(deploy): add pod securityContext hardening to the Helm chart
• 655511b fix(deploy): fix Terraform CI failures — fmt alignment + cloudflare_load_balancer schema
• 0b2aced fix(deploy): harden Terraform — firewall, SSH keys, k8s auto-upgrade, bucket versioning
• 8cccbde fix(deploy): make the releases Spaces bucket private, document per-object ACL
• 03c9719 fix(install): resolve latest version dynamically instead of a hardcoded pin
• f8a3495 fix(npm): stop interpolating paths into a PowerShell -Command string
• 19ab170 fix(pypi): validate archive member paths before extracting (zip-slip)
• 457a707 fix(release): stamp Commit and BuildDate ldflags in goreleaser
• 7cea3e0 fix(security): resolve gosec + CodeQL log-injection findings
• a8d37e1 fix(server): send WWW-Authenticate so --basic-auth tunnels prompt in-browser
• 8d84d2a fix(web): CodeQL findings — temp file, sanitization, unvalidated fetches

trqsh CLI v0.1.5

Changelog

• 83c9592 chore(release): bump CLI wrapper packages to 0.1.5
• f8c084d chore(site): point desktop downloads at v0.3.1
• b63b030 docs(pypi): enrich the PyPI README — hook, badges, a Why trqsh section
• ba0ef0c fix(dashboard): add favicon (was missing, browser showed a generic icon)

trqsh CLI v0.1.4

Changelog

• 1a8c622 docs(packaging): document uninstall, fix npm package name, bump to 0.1.4
• cfc2daf feat(cli): add uninstall command to clear local data

trqsh CLI v0.1.3

Changelog

• e237584 chore(ci): remove the unused Helm deploy.yml workflow
• 0eae605 chore(deploy): wire TRQSH_ADMIN_USER/PASSWORD into the api service
• 3312a31 chore(site): stop tracking the web/site TypeScript build cache
• e58c901 ci(gui): GOWORK=off so go build uses the gui module
• 595334a ci(gui): build the Go binary directly (go build -H windowsgui), skip wails3 task
• ca204e7 ci(gui): wails3 alpha.11 build takes no -tags/-clean flags
• a0ece8c ci: add manual gui-build workflow (Windows, unsigned)
• 301c839 docs(packaging): document new CLI commands, credit maintainer, bump to 0.1.3
• eee40ce feat(api): add an unauthenticated public plan catalog endpoint
• 83095ab feat(api): distributed rate limiting, Redis-backed OAuth/device login, /metrics
• c44234c feat(cli): browser login, account commands, and background tunnels
• ac15af3 feat(deploy): harden production deploy, add observability, prep multi-server infra
• a15cc35 feat(desktop): bundle the agent sidecar from a trqsh-uz/cli release
• fe8fb29 feat(desktop): native Tauri v2 app + agent daemon mode + cross-OS CI
• 1986e3a feat(desktop): operator-console redesign + Billing screen
• b85fa0c feat(desktop): real update check + on-launch update banner; fix New-tunnel dialog focus
• 1ec9218 feat(server): real cross-edge forwarding, shared Redis TLS storage, pooled proxy
• 5fbdf4c feat(site): 3D hero + carousel redesign, custom cursor, header cleanup
• 9244a0f feat(site): fetch pricing + OpenAPI over HTTP instead of local backend files
• 67c3e16 feat(site): point desktop downloads at v0.2.3
• fb9b154 feat(site): wire desktop downloads to the v0.2.0 Tauri installers
• 2e2d5fa feat: desktop control panel + OAuth, plan-expiry fix, manual upgrades
• 25de402 fix(api): include the rest of the previous commit's config/device-store changes
• 2bdd157 fix(api): restrict the admin console to approve. in production
• 3b01ae7 fix(desktop): background tray, working inspector clear, persistent uptime, boot splash
• 9e38be0 fix(desktop): live traffic refresh, stop inspector with tunnel, app.trqsh.uz links
• 48c0393 fix(desktop): spawn the agent via std::process next to the app exe
• 5682259 fix(desktop): stop the agent before install/uninstall so updates don't fail
• b4bd253 fix(gui): port Wails shell to v3 alpha2.117 manager API
• 21c68d4 gui: bump wails/v3 alpha.11 -> alpha2.117 to match the code's API
• 7a1e007 gui: commit tidied go.mod + go.sum (full Wails v3 dep tree)
• cf0c19b perf(agent): pool local forwarding, stream bodies, weld upgrades, tune QUIC
• a587c8d release: fill scoop v0.1.2 windows SHA256 hashes
• 80eb1ab release: split downloads repo into cli + gui; site GUI-first

trqsh desktop v0.3.1

Unsigned preview build. Windows SmartScreen may warn 'unknown publisher' — click More info then Run anyway. macOS: right-click → Open the first time.

trqsh GUI v0.3.0

Unsigned preview build. Windows SmartScreen may warn 'unknown publisher' — click More info then Run anyway. macOS: right-click → Open the first time.

trqsh GUI v0.2.3

Fixes: New-tunnel form input focus (Name/subdomain/basic-auth), working update check + on-launch update banner, background system tray (close hides to tray, tunnels keep running), inspector Clear now clears history, tunnel uptime survives reload, and the installer now stops the running agent so updates don't fail with a file-in-use error. Unsigned preview build — Windows SmartScreen may warn 'unknown publisher': click More info, then Run anyway. macOS: right-click the app, then Open the first time.

trqsh GUI v0.2.0

Unsigned preview build. Windows SmartScreen may warn 'unknown publisher' — click More info then Run anyway. macOS: right-click → Open the first time.

trqsh GUI v0.1.2

Unsigned preview build. Windows SmartScreen may warn 'unknown publisher' — click More info then Run anyway.

trqsh CLI v0.1.2

Changelog

• 10799f6 feat(api): OAuth callback sets shared session cookies and redirects to the dashboard
• bfca0b6 feat(auth): store OAuth avatar, harden CSRF state + domain-scoped logout, show avatar
• 7a10059 feat(dashboard): adopt the site's trqsh dark brand + add a responsive mobile nav
• 60557ee feat(edge): reverse-proxy app+api reserved hosts; deploy dashboard at app.trqsh.uz
• f428499 feat(npm): scope package as @trqsh-uz/trqsh + standalone publish workflow
• ae7b2db feat(site): editorial type system for trqsh.uz (Instrument Serif + Onest + JetBrains Mono)
• 385bc46 fix(api): read GitHub primary email from /user/emails when the profile hides it
• 5fb5c9c fix(dashboard): add public/ dir so the Docker build can COPY it
• 5041283 fix(dashboard): drop stray pnpm-workspace.yaml so pnpm 9 builds standalone
• 56d2154 fix(dashboard): use pnpm 9 so dependency build scripts (sharp) run
• ad7ccdb fix(edge): force HTTPS on reserved hosts; point the CLI at the prod edge
• 3021dc2 fix(site): CLI-first download page (drop GUI, add npm/pip, point at downloads release)
• 4136609 fix(site): robust hero z-layering, mobile height, animated hero text + typewriter logo
• 8cd6891 redesign(site): 3D tunnel hero, shorter layout, wordmark logo, system fonts
• 1398adf release: prep v0.1.2 packaging + real version stamp