• Agent released this 2026-09-08 16:33:57 -06:00 | 17 commits to main since this release

    Same-day patch release for v2026.9.8.

    Fixed

    • RDP TLS certificate verification was completely disabled. Every RDP server's certificate was silently accepted, including a changed certificate — indistinguishable from an active MITM attack. RDP connections now use trust-on-first-use certificate verification (matching SSH's known-hosts behavior): first connections trust and store the certificate silently, and a changed certificate now correctly refuses the connection with a clear warning instead of connecting anyway.

    Other

    • Flatpak packaging prepared for Flathub submission: pinned reproducible git source, narrowed sandbox permissions (--filesystem=home--filesystem=~/.ssh), expanded AppStream metadata (screenshots, release info, developer/project URLs), and verified against Flathub's own linter.
    • Upgraded the Flatpak's KDE runtime to 6.11.

    Known limitations

    • All installers are unsigned (no purchased code-signing certificates yet), so first launch will trigger OS warnings:
      • Windows: SmartScreen "Windows protected your PC" — click "More info" -> "Run anyway"
      • macOS: Gatekeeper "unidentified developer" warning — right-click the app -> Open
    • The Flatpak bundle contains only OrbitHub itself, not its runtime. Install the org.kde.Platform 6.11 runtime first if it's not already present:
      flatpak install flathub org.kde.Platform//6.11
      
    • VNC support is not yet implemented (deferred to a later milestone)

    See docs/PROGRESS.md for full milestone details.

    Downloads