PDQ Deploy: all versions and old releases

New Features
- Added an in-app warning when installed PDQ Deploy and PDQ Inventory versions do not match
- Added a Firewall Test (Help > Support > Firewall Test) that checks connectivity to PDQ service endpoints from both the console and the PDQ service and reports any that are blocked
- Added a built-in Performance Analyzer under the Help menu > Support that checks your settings and database health to recommend fixes for common performance issues
- Deploy: Added a Migrate Package(s) to Connect right click option that exports the selected packages and opens them in the PDQ Migrate tool, downloading or updating that tool automatically
- Inventory: Added a Migrate Collection(s) to Connect right click option that exports the selected collections and opens them in the PDQ Migrate tool

Improvements
- Inventory: Added a Help Manual reference documenting where every field in the Computer window comes from

Bug Fixes
- Deploy: Fixed a display error in the Command Line Reference section of the help documentation

Improvements
- Added the license contact and license ID to the License summary screen to help with support troubleshooting

Bug Fixes
- Improve console launch times by caching RBAC requests
- Deploy: Fixed Auto Download packages that were not appearing in the approvals pane

Security Enhancements
- Upgrade SQLite to 3.53.0 to remediate CVE-2026-11824

Improvements
- Changed Tree View selection behavior to allow pointer cancellation for better accessibility support (WCAG 2.5.2)
- Updated PDF report generation to conform to PDF/UA accessibility standard for improved screen reader compatibility
- Deploy: The Latest Version column in the Package Library Updates tab now shows a Convert to Standard Package button for Auto Download packages that can no longer receive updates

Bug Fixes
- Fixed dashboard text to respond to Windows text scaling and resolved menu item truncation at high scaling levels
- Deploy: Fixed issue where Auto Download approvals required the Approve Now button to be clicked twice before a download would start

New Features
- Added ExportSettings CLI command to export all preferences for automated backup and configuration management workflows
- Added BackupDatabase CLI command to create on-demand database backups with support for custom paths and automated workflows
- Added AI coding agent skill file documenting all CLI commands for use with Claude Code, OpenCode, and other AI-assisted tools and agentic workflows
- Added CLI commands to export and import custom variables.
- Added new dashboard widgets powered by custom SQL reports (SQL Metric, Bar Graph, Pie Graph, Multi Metric), a Collection Metric widget, a Changelog widget, clickable cards, and an improved widget library with previews, descriptions, and configuration
- Deploy: Added ARM64 processor support for package and step O/S architecture conditions
- Deploy: Added CLI command to approve auto-downloaded packages for integration with change management and automated approval workflows
- Inventory: Added support for scanning ARM64 processor targets, including a new processor Architecture field (for example 64-bit (ARM64)) available on the CPU page, in reports, and in collections
- Inventory: Added ability to automatically assign scan credentials via CLI parameter when using AddComputers

Improvements
- Deploy: Added -PrioritizeDeployment parameter to Deploy CLI command for urgent deployment scenarios
- Deploy: Include Schedule ID in the Audit Log Target Identifier for Deployment Schedules

Bug Fixes
- Deploy: Fixed `-OverrideTargetFilters` CLI flag so it correctly bypasses the target exclusion list when starting a deployment
- Deploy: Fixed Auto Download approvals not appearing until the Package Library window was manually refreshed
- Deploy: Fixed an issue where Auto Download packages would stop receiving updates if the downloaded version was pulled or pruned from the Package Library
- Inventory: Fixed Windows Feature scanner taking several minutes to complete and failing on Windows 11 Enterprise Multi-Session devices, and added a Server Features list (with install state) to the Windows Features page on Windows Server

Security Enhancements
- Upgrade SQLite to 3.53.0 to address flagging of CVE-2025-70873
- Updated the MailKit email library to address a STARTTLS response injection vulnerability (CVE-2026-41319)

New Features
- Added CLI commands to update and test credentials for automated password rotation workflows (SetServiceCredentials, UpdateDeployCredential, UpdateScanCredential, TestCredential)
- Added CLI command to create custom variables
- Deploy: Added CLI command to clean unused repository files for automated maintenance workflows
- Deploy: Added CLI commands to export and import packages
- Deploy: Added CLI command to query deployment status for monitoring, automation orchestration, and reporting integrations
- Deploy: Added CLI command to delete packages
- Inventory: Added CLI commands to export and import collections
- Inventory: Added CLI command to delete computers for automated cleanup and decommissioning workflows
- Inventory: Added -Wait flag to ScanComputers and ScanCollections commands for synchronous scanning in automated verification workflows
- Inventory: Added CLI command to manually trigger auto reports for integration with external automation workflows
- Inventory: Added CLI commands for network discovery enabling scheduled and automated scanning workflows (StartNetworkDiscovery, GetNetworkDiscoveryStatus, StopNetworkDiscovery)

Bug Fixes
- Deploy: Fixed issue where package order in schedules was not preserved after first save
- Inventory: Updated Help Manual for broken Link on Variables Windows Page

New Features
- Added High Contrast theme support for improved accessibility
- Added dynamic dashboard with customizable widget library for existing widgets (future widgets planned)

Bug Fixes
- Improve memory management related to RBAC window
- Fixed OAuth2 mail authentication failures showing a cryptic serialization error instead of the real error message
- Inventory: Improve memory management related to Auto Reports
- Inventory: Prevent lost changes to Dynamic Collections after refresh. Fix console behavior related to Static Collection deletion.

New Features
- Add Role-Based Access Control and Audit Logging

Improvements
- Fixed intermittent file / registry locking errors when checking file or registry conditions during package deployments

Bug Fixes
- Deploy: Additional fix: Steps column did not update while a package was being deployed.

Bug Fixes
- Inventory: Fixed issue where multiple PowerShell scanners in the same scan profile would merge results, causing data corruption and incorrect column values

Improvements
- Deploy: Fixed various auto-download bugs and performance issues
- Inventory: Fixed display issue with the tool window when the Multi-Line checkbox is used with High DPI Displays

Bug Fixes
- Inventory: Corrected collection of PowerShell 2.0 enablement status
- Inventory: Fixed deployment errors showing as multiline in Inventory deployments view
- Inventory: Corrected collection row count display when grouped by a column.
- Deploy: Fixed schedules using cached credentials instead of current credentials when running

Security Enhancements
- Added a best security practices alert notification system
- Checks and secures database in product to remove NT AUTHORITY\INTERACTIVE permission or notifies using alert system if fails
- Deploy: Secures repo on fresh install to remove NT AUTHORITY\INTERACTIVE permission
- Deploy: Checks for NT AUTHORITY\INTERACTIVE permission on repo folder and notifies using alert system if found (does not auto-fix)

Improvements
- Inventory: Added security notice to Network Discovery window informing users about credential exposure risks when scanning untrusted networks

Bug Fixes
- Inventory: Added new scan datapoint to reflect PDQ Connect Agent install status and version.
- Deploy: Re-add proxy config to Package Downloads
- Deploy: Fixed blank message body when sending Deployment Notifications using Microsoft Graph API.
- Deploy: Fix issue that interfered with Deployment notifications
- Deploy: Prevent Event Log error when there is a change to the list of computers in the deployment history of a Schedule

Bug Fixes
- Deploy: Fix exception when using Deploy Once with a Schedule

Improvements
- Force Update of existing installed 3rd party libraries for new certificate
- Inventory: Updated to better support accessibility needs
- Deploy: Added support for library packages over 2gb
- Deploy: Updated to better support accessibility needs

Bug Fixes
- Updated Email OAuth2 credentials scope for multi-user environments
- Fixed email attachment MIME types for all file types in auto-reports and notifications
- Fixed an issue that caused slow loading when searching in the treegrid for users in limited internet access environments
- Deploy: Additional Bug Fix for where steps column did not update as a package was being deployed
- Inventory: Updated to prevent deletion of a computer while editing a collection to prevent data inconsistencies

Changes/Improvements
- Update Certificate for Deploy and Inventory

Changes/Improvements
- Updated Signing Certificate

Changes/Improvements
- Upgrade SQLite to 3.50.4 to address flagging of CVE-2025-29087

Bug Fixes
- Fix lengthy version upgrade times after 19.4.77.0
- Fix sporadic occurrence of thread owner exceptions
- Fix display of disabled buttons when using a Windows 11 theme
- Deploy: Fixed bug where steps column did not update as a package was being deployed

Bug Fixes
- Inventory: Fixed occasional difference in the number of devices scanning between dashboard and bottom bar.
- Inventory: Fixed an issue with how Boolean values were displayed on the PowerShell Scanner results.

Bug Fixes
- Deploy: Fixed occasional occurrence of Recursive call to Automation Peer API exception

Changes/Improvements
- Updated dependencies
- Added support for Secure Email Authentication via Oauth2 (Microsoft and Google) and Microsoft Graph API
- Upgrade SQLite to 3.49.2 to address flagging of CVE-2025-29087
Bug Fixes
- Inventory: Move Windows Server 2025 collection to Servers parent collection

Changes/Improvements
- Updated dependencies
- Fixed GUI Parent-Child Visual Connect/Disconnect error that would occur when using RDP
Bug Fixes
- Inventory: Fixed issue with duplicating of column names for PowerShell Scanner

Bug Fixes
- Fixed broken links at top of Help Manual
- Fixed readability issue on Tools/Scan Profiles screens in Free Mode
- Added missing Enterprise Only locks to already disabled views
- Fixed verbiage and broken link when in Free Mode for a New Package Scan Step

Changes/Improvements
- Added measures to decrease chances of hitting a rate limit.

Bug Fixes
- Fixed display issue with outline when using Virtual Desktops
- Inventory: Updated BitLocker Protection status to directly report from WMI
- Inventory: Fixed error when duplicating tools in nested folders
- Inventory: Corrected issue with daily trigger for auto-reports
- Inventory: Fix issue with duplicate message in Add Console User Access Warning

Changes/Improvements
- Added Support for Windows Server 2025
- Added Product Market Fit Survey

Changes/Improvements
- Improved error handling for PowerShell scripts

Bug Fixes
- Revert changes in v19.3.615.0 in relation to removal of Win API Account impersonation

Bug Fixes
- Removed Win API account impersonation function causing login failures for multi-domain environments

Bug Fixes
- Prevent LAPS credentials from being saved without a LAPS user
- Inventory: Ensure selection-dependent Computer Information updates when switching computers

Changes/Improvements
- Added stack trace submission status notification
- Deploy: Detect missing Nested Packages during package export

Bug Fixes
- Fix local credential use when NTLM is restricted for domain users
- Replaced deprecated Forums links with links to PDQ Discord Community

Changes/Improvements
- Updated help text to include information regarding concurrent users

Bug Fixes
- Implemented consolidated analytics for improved product performance
- Provide a link to download installers manually when client is out of date and unable to update automatically
- Refined event log filter to display relevant data when submitting a ticket
- Inventory: Update the Regular Expression Resources link in the Value Filter Settings section of the Help Manual
- Deploy: Corrected search results for package library categories
- Deploy: Corrected issue causing nested package conditions to be ignored

Changes/Improvements
- Updated installer framework to WiX v5

Bug Fixes
- Fix the email registration window appearance when using the Metropolis Dark theme
- Inventory: Resolved inconsistent Boot Time related to Fast Boot

Bug Fixes
- Deploy: Fixed looping issue when repository is not accessible
- Inventory: Corrected bit locker reporting when suspended

Changes/Improvements
- .NET Framework has been updated to 4.7.2. This is the minimum required version.
- Updated DevExpress Dependencies to latest version (23.2.5)

Bug Fixes
- Fix how Deploy uses Inventory Scan User Credentials in multi-domain environments
- Deploy: Corrected Inventory credentials carryover setting for redeployment to failed targets
- Redundant locks in Free Mode locks are hidden and more uniform

Changes/Improvements
- Inventory: Users may now opt to suppress empty reports from being emailed to recipients

Bug Fixes
- Added identification for new .NET 4.8 Framework versions
- Deploy: Registry condition value defaults to 0, when text value is not convertible to number
- Inventory: Fixed broken links in Computer Details screen
- Deploy: Changed reboot step error message, removed note