Skip to content
← Back to release notes
v0.50.2 beta

Release v0.50.2

Apr 01, 2026

Security hardening with agent token rotation, fail-closed revocation, and Redis authentication; backup cancellation and large file upload fixes.

Added

  • Agent token rotation — rotate agent credentials on demand with a 5-minute grace period so the agent transitions seamlessly without disconnecting.
  • Per-enrollment-key secrets — scope enrollment secrets to individual enrollment keys instead of using a single global secret.
  • Supply chain verification — recovery bundles and boot media are now cryptographically verified before assembly.

Improved

  • Redis now requires password authentication in all deployment modes.
  • Backup cancellation now reports dispatch status and surfaces any issues cancelling in-progress operations.
  • File uploads support files up to 64 MB with a 120-second timeout, up from the previous 1 MB / 30-second limits.
  • Desktop helper is now included in macOS release builds.

Fixed

  • Fixed a critical security issue where a Redis outage could silently re-enable revoked user sessions — token revocation is now fail-closed.
  • Fixed enrollment endpoint accepting connections without the required enrollment secret.
  • Fixed Windows agent updates failing when companion processes (helper, viewer) held file locks on the agent binary — the updater now cleanly stops them before applying the update.
  • Fixed orphaned backup and restore jobs getting stuck instead of reporting their failure.

This release focuses on security hardening across the agent control plane. Agent tokens can now be rotated on demand with a seamless 5-minute grace period, Redis connections require authentication, and token revocation is fail-closed — meaning a Redis outage can no longer silently restore access for revoked sessions.

Backup operations now cancel cleanly with proper status feedback, and file uploads handle much larger files (up to 64 MB). Windows agent updates also no longer fail when the desktop helper or viewer is running.