Skip to content

Zync v2.38.0

Latest
Latest

Choose a tag to compare

View all tags
@gajendraxdev gajendraxdev released this 26 Oct 06:37
· 22 commits to main since this release
v2.38.0
407cb3a

Release Notes - Zync v2.38.0

Release date: 2026-10-26

What's New

Zync v2.38.0 introduces Security hardening audit for Linux SSH hosts: choose what to assess, review findings with supporting evidence, and save reports for later comparison. A global library brings saved reports from all hosts together. This release also adds a File Manager Up button and improves connection recovery and port-forwarding reliability.

Compare: v2.37.0...v2.38.0

Added

Security hardening audit

  • Choose your checks: Select from 183 checks and observations across 15 areas. Start with the 38-check Host baseline area, or include additional host protections, SSH connection-policy checks and application areas for Nginx, Apache, Docker, PostgreSQL, MySQL, Redis and Jenkins. Presets help choose a starting scope; only selected areas run. (b81abbd, 2dc52de, cc27338)
  • Evidence you can inspect: Review what was found, the expected setting, why it matters and the recommended next step. Expand change, verification, recovery and technical details when needed. Results distinguish attention items, informational observations, passed checks, unavailable evidence and checks that do not apply. (c1fb5bd, 36327af, cc27338)
  • Host and application context: Assess named service settings and, where selected, a bounded sample of running Docker containers or authenticated local application settings. Reports identify the evidence source and scope, so a service-file check is distinguishable from a running application observation. Docker workload checks support hosts using jq 1.6. (2dc52de, a5a7894, 94d4f06)
  • Explicit access: Run with your SSH account's existing access, or allow sudo for protected checks. Zync asks for a password when the server requires it and keeps it in memory for that run. Reports show the access used; eligible incomplete checks offer Retry with sudo or Try with sudo, with a new approval before rerunning. Optional application credentials are also per-run and are not saved, synced or exported. (b81abbd, a5a7894, cc27338)

Audits require a Linux SSH host and GNU coreutils timeout. They use existing host tools, require no Zync account or scanner/agent installation, and do not apply configuration changes. Opening a pane, selecting a host or reconnecting never starts an assessment automatically. (b81abbd, a5a7894)

Saved reports, exports and comparison

  • Keep a report: Save a new local report or explicitly replace a saved copy. Open reports after restarting Zync, even while the host is offline. Saving is manual; reports are not automatically uploaded or synced. (2dc52de, a5a7894)
  • Export and import: Export JSON, CSV or a formatted Excel workbook. JSON retains the report and its accepted-risk notes for import; spreadsheets organize findings for review and treat evidence as text. (2dc52de, cc27338)
  • Compare assessments: Review before/after evidence for compatible reports. Checks that become assessable after sudo appear as newly assessed; missing or unavailable evidence is not presented as a resolved finding. (a5a7894, cc27338)
  • Track accepted risks: Record a reason and expiry for a specific finding, then review or remove that decision from the host's Accepted risks list. Acceptance does not turn the underlying check into a pass. Deleting a report keeps independent accepted-risk decisions by default; an optional checkbox removes matching decisions too. (2dc52de, a5a7894, cc27338)

Global audit library

Open Security hardening audit from global navigation, the + menu or the command palette to browse saved reports across all hosts. Search, filter by host, open offline reports, export or delete saved copies. Reports remain available after their original saved host is removed. (9272802, a9c29d6, e6b3bbc)

Choose New audit to select a saved SSH host and open its assessment setup. Back retains library filters and your in-memory draft; Resume audit returns to that draft. Returning to the library refreshes saved-report metadata without interrupting an open report or visible draft. Browse labels respect the host-address privacy setting. (a9c29d6, 1fa69c8)

File Manager Up button

Use the new Up arrow beside Back and Forward to open the parent folder. The tooltip follows your configured shortcut; Alt + ↑ remains the default. The button respects drive and network-share roots, stays disabled for unresolved or relative locations, and navigates only the Files pane you use. (484ca1c, c96d801)

Changed

  • Consistent offline actions: Dashboard, per-host Port Forwarding and audit setup use shared Connect, Reconnect, Retry and Cancel controls. Saved reports and tunnel configurations remain accessible without connecting. Connecting through a feature preserves the workspace's terminal inventory and selected view. (87e62bb, 9ee6ba5)

Fixed

  • Tunnel start and cancellation: Single and grouped starts respect cancellation, wait for cleanup before a fresh attempt and avoid duplicate starts after automatic tunnel restoration. Stopping a forward no longer disconnects other host panes. (fa7ad8c, 2fa623e)
  • Tunnel reconnect state: Refresh active tunnel status after connecting, clear stale active flags on disconnect and preserve remembered forwards through repeated cleanup so reconnect can restore them. (fa7ad8c, 2fa623e)
  • Connection failure feedback: Tunnel connection errors are reported as failures rather than cancellations, including in grouped starts. An explicit cancellation still takes precedence for that attempt. (b534c07)
  • Reconnect focus: Visible but unfocused Files panes no longer take keyboard focus from the reconnect card. Only the focused restored terminal or Files pane owns the Enter-to-reconnect shortcut, and pending focus recovery does not interrupt navigation to another pane or control. (9ee6ba5, 2fa623e)

Thank You

Thank you to everyone who tested Zync and shared feedback on audit setup, report readability, saved reports and connection recovery.

Community feedback

  • u/vortige-sven on Reddit: Requested a visible parent-folder button after testing certificate authentication, helping shape the new File Manager Up action.

Quick Check After Upgrade

  1. Confirm Settings → About shows v2.38.0.
  2. Open Security hardening audit from global navigation, choose New audit, select a Linux SSH host and review the preset and selected areas before approving a run.
  3. Review the report's evidence and access coverage. If protected checks need more access, optionally use the offered sudo retry and approve the new run.
  4. Save a report, return to the global library and try opening it while the host is offline. Export a copy or compare another compatible saved report.
  5. Try Up and Alt + ↑ in Files, then use Back to return. Confirm the Up button stops at the filesystem or network-share root.

Feedback and Upgrade

Report problems through Settings → Feedback or GitHub issues. Include your OS, v2.38.0 and reproduction steps. Before sharing an audit export or screenshot, remove private host details and sensitive configuration evidence; do not include passwords or tokens.

Use Zync's updater or download your platform's installer from Releases - v2.38.0.

# Debian / Ubuntu
sudo apt update && sudo apt install zync

# Arch
sudo pacman -Syu zync

Full Changelog

See CHANGELOG.md for the technical change history.

Assets 16
Loading