Skip to content
← Back to release notes
v0.66.0 stable

Release v0.66.0

May 19, 2026

Bulk Wake-on-LAN, a security-report hardening pass, and a multi-org discovery fix.

Added

  • Bulk Wake-on-LAN. Select multiple devices on the Devices page, choose "Wake Selected" from the bulk menu, and wake them in a single action. Results are grouped by reason (successful wakes, devices with no online peer to relay through, devices missing a MAC address, and so on) so you can see at a glance which devices need attention. Builds on the single-device Wake-on-LAN shipped in v0.65.16.

Improved

  • Hardening pass from the May security review. Closed several findings around multi-tenant isolation on the mobile companion app (device-binding is now signed into the session rather than read from a header), tightened the failure mode of the partner-scope guard so it fails closed on database errors, removed token-hash fields from a couple of API responses where they shouldn't have appeared, and made the TURN relay refuse to start with an empty shared secret instead of silently accepting one.

Fixed

  • Network discovery actions for partners managing multiple organizations now respect the organization you've selected, instead of falling back to an ambient default. Affects starting and viewing scans on the Discovery page.

A smaller release between the v0.65.16 feature push and the v0.67.0 reliability and watchdog work. The headline addition is bulk Wake-on-LAN: select a set of devices, pick “Wake Selected” from the bulk menu, and Breeze fans the wake packets out in parallel through each device’s site relay. The result toast groups outcomes by reason so a mixed batch tells you exactly which devices couldn’t be reached and why.

Alongside that, this release lands a focused security hardening pass driven by the May security review. The user-visible changes are subtle (most of the work tightens internal trust boundaries and fail-closed behavior), but the mobile companion app’s device-binding is now bound into the signed session rather than read from a request header, which closes the most material item in the review. Partner admins managing multiple organizations also get a discovery fix: starting or viewing a scan now honors the organization you’ve explicitly selected.