Devolutions Gateway: vanhemmat versiot ja versiohistoria

Fixes
- Minor update

New features
- Service - Add support for Session Recording Log (.slog) recording artifacts
Improvements
- Service - Automatically retry transient Kerberos (KDC) connection drops to avoid occasional authentication failures
- Service - Write a boot stack trace file when running as a service, making startup failures easier to diagnose

Improvements
- Service - Improve diagnostic logging for sessions to make troubleshooting easier
Fixes
- Service - Fix terminal session live-view (shadowing) display sizing and a crash that could occur with very long output lines

Fixes
- Service - Restore compatibility with version 1 update manifests so update checks work correctly with newer agents

New features
- Installer - Add certificate checks during installation so invalid certificate setups are caught earlier
- Service - Add experimental Kerberos-based credential injection support (behind unstable option)
Improvements
- Service - Improve network scanning with better targeting and more consistent scan results
- Service - Reject recording uploads when recording storage is full to prevent incomplete recordings

New features (1)
- Service - The Gateway and Agent now support automated and scheduled Agent self-updates. Administrators can query update status and configure update schedules via new API endpoints
Fixes
- Service - Fixed a startup failure on Windows Server 2016 caused by a missing Windows Error Reporting API; the service now starts correctly on all supported Windows versions
- Service - Fixed missing disk space metrics in the heartbeat response when the recording directory has not yet been created
- Service - Fixed silent shadow recording failures (close code 4002) that produced no log output; warning logs are now emitted on all internal error paths
- Service - Fixed systemd startup failures on RHEL/Rocky Linux and improved RPM/DEB package lifecycle handling (correct enable/restart/disable behaviour on install, upgrade, and removal)

New features (1)
- Installer - Added German language support
Improvements (4)
- Installer - Certificates that fail validation are now shown with a warning icon instead of being silently hidden from the list
- Service - Credentials stored in memory are now encrypted at rest, protecting against exposure in memory dumps
- Service - Reduced log noise: a missing recording storage disk is now only reported once at warning level instead of repeatedly
- Service - Session recordings now use periodic keyframes for improved seek performance during playback
Fixes
- Installer - Fixed an issue where semi-colons in certain configuration values could cause installation failures
- Service - Fixed an issue where certain service subcommands were not recognized correctly
- Service - Fixed recording storage space reporting for network drives and UNC paths on Windows
- Service - Fixed recording storage space reporting for network filesystems (NFS, Samba) on Linux and macOS
- Service - Fixed RPM package installing web application files under incorrect directory names
- Service - Fixed session recording playback failing with a "media could not be loaded" error
- Service - Fixed the Debian package incorrectly declaring a minimum system library version, preventing installation on some Linux distributions
- Service - Fixed video playback freezing during live session shadowing after brief recording pauses

New features (1)
- Service - Added options to use a dedicated certificate for CredSSP credential injection
Improvements (2)
- Service - Gateway now auto-generates a self-signed certificate for CredSSP when no TLS certificate is configured
- Service - Improved real-time performance of session shadowing

New features (3)
- Installer - Allow downloading keys even when the certificate isn't trusted (useful in restricted/air-gapped environments)
- Service - Add credential injection support for RDCleanPath
- Service - Add outbound HTTP/HTTPS/SOCKS4/SOCKS5 proxy configuration support
Improvements (2)
- Service - Add ARM64 Docker image support (run natively on ARM hosts)
- Service - Reduce noisy logs: benign client disconnects are now logged as DEBUG instead of ERROR
Fixes
- Installer - Fix handling of certificate passwords containing single quotes
- Service - Fix certificate store resolution error logging to include clearer failure details
- Service - Fix Docker image build to correctly generate a self-signed TLS certificate
- Service - Fix Linux container startup to honor the TCP_PORT environment variable

New features (6)
- Installer - CLI Generation Support: Supports command-line generation on release builds for automation scenarios
- Installer - DVLS Public Key Download: Automatically downloads public keys from Devolutions Server
- Service - AI Gateway (Experimental): Provides unified access to multiple AI providers (Mistral AI, OpenAI, Anthropic Claude, OpenRouter, Azure OpenAI, Ollama, and LM Studio) through a single endpoint with centralized API key management
- Service - Hub Service Auto-Updater: Supports automatic updates through the Hub Service
- Service - TLS Thumbprint Anchoring: Allows TLS connections when the client provides a matching certificate thumbprint, even without traditional certificate validation
- Standalone - VNC and RDP Client Updates: Updated clients with improved pixel format handling, fixed clipboard timing issues, better error messages, and updated security libraries
Improvements (4)
- Installer - Enhanced Reliability: Improved debouncer reliability and clearer port check result display
- Installer - Updated Translations: Includes updated localizations
- Service - Better Error Diagnostics: Displays full error traces for forwarding errors to aid troubleshooting
- Service - Traffic Audit ID Format (Breaking): Traffic audit IDs now use ULID format instead of integers to prevent overflow issues with large datasets
Fixes
- Installer - Debug Error Removal: Removed an annoying null reference exception that appeared in debug mode
- Installer - High DPI Display: Fixed UI display issues at high scaling factors
- Installer - Hyperlink Corrections: Corrected broken hyperlinks in the installer interface
- Installer - Public Key Action: Fixed the public key action to properly use the downloaded file
- Installer - Server Core Compatibility: Fixed crashes when running on Windows Server Core
- Installer - UI Visual Fixes: Fixed visual issues caused by tab stop configuration
- Service - RDP Proxy Compatibility: Fixed an issue that prevented Microsoft Remote Desktop Connection (mstsc) from working with the RDP proxy (for proxy-based credentials injection)
- Service - Systemd Integration: Improved systemd unit file installation on Linux distributions, particularly fixing issues on RHEL-based systems
- Standalone - Configuration Error Handling: Fixed TypeScript errors that occurred with invalid configuration

Improvements (5)
- Service - Better support for recordings when using RDP built-in seamless reconnection feature
- Service - Configuration warnings now distinguish between missing and explicitly disabled TlsVerifyStrict
- Service - Listener binding now auto-retries on transient errors (e.g., "address already in use") to reduce startup failures
- Service - Startup logs for listener initialization are clearer
- Standalone - Fixed VNC connections to servers using "None" authentication

- Service - Devolutions Gateway now records and expose traffic transferred over JMUX tunnels for auditing and usage insights
- Standalone - Added an MVP for self-contained session URLs so sessions can be launched or shared via a single link
- Standalone - SSH and Telnet web clients now support clipboard copy/paste
- Optimized binary size to reduce download and footprint
- Service - WebM video player now autoplays for smoother playback
- Standalone - Added a color format selector for VNC sessions to balance bandwidth and image quality
- Standalone - Clipboard features are disabled in non-secure contexts to protect data
- Standalone - Improved error handling across remote desktop clients for clearer, more actionable messages
- Standalone - Introduced manual clipboard mode for RDP, VNC, and ARD with Send Clipboard and Save Clipboard buttons; auto mode is toggleable and supported only on Blink-based browsers (e.g., Chrome)
- Standalone - Replaced TightLow/High with a granular JPEG Quality control for finer tuning of performance vs. clarity
- Standalone - The web app shows a fallback screen with guidance when an unsupported browser is detected
- Standalone - Fixed user domain parsing for UPN-formatted usernames during sign-in

- Service - Introduce TlsVerifyStrict option for enhanced TLS certificate validation, now enabled by default in new installs
- Service - Write startup errors to a boot.stacktrace file to simplify troubleshooting during initialization
- Service - Automatically detect proxy settings from environment variables for HTTP requests
- Service - Default TlsVerifyStrict to false when the key is missing, preserving compatibility with legacy certificates
- Service - Display the full path to the configuration file during initialization for easier debugging
- Standalone - Avoid errors when writing to the clipboard without window focus
- Standalone - Fix display scaling after server-initiated resize in VNC client
- Standalone - Fix fullscreen handling issues in the ARD client during and after session start
- Standalone - Prevent clipboard sync loop when receiving updates from the remote server
- Standalone - Reduce excessive scroll speed during remote sessions in VNC client

- Minor update

- Service - Optional support for session tokens to be reused in a limited way (useful for RDP built-in auto-reconnect)
- Service - Support port wildcards for JMUX sessions
- Standalone - The wheel speed factor can now be adjusted during the VNC and ARD sessions
- Service - Fix terminal recording player CSS issue causing the recording to not show up

- Service - Support for proxy-based credentials injection for RDP (PAM module integration is incoming)
- Standalone - Fix a typo in ARD connection form
- Standalone - Wheel speed factor setting for VNC and ARD clients

- Minor update

- Standalone - New settings for ARD: Resolution Quality, Quality Mode
- Standalone - New settings for RDP: Unicode mode, dynamic display (Display Control)
- Standalone - New Settings for VNC: Codec selection, Enable/disable cursor pseudo-encoding (control whether the server will blend the cursor or not)
- Service - Caching of system store certificates for better performance
- Service - Cross-file seeking for recording player
- Service - Extend net scanner capabilities
- Service - Improve system store certificate selection
- Service - properly order system certificates

- Service - Add --config-path command-line option to specify a custom configuration path without relying on environment variables
- Service - Improve debug logs for recording path canonicalization
- Service - Reopen the system certificate store for each HTTPS request, eliminating the need to restart the service when renewing the certificate