Merge release/2.1 to main - #1127
Closed
t-aleksander wants to merge 155 commits into
Closed
Conversation
* report pre-release version * fix cve
* nix flake update * initial work on posture checks on old UI * nix flake update * posture check for non-mfa locations * posture checks during MFA connection flow * cargo update; extend glib trivyignore * fix clippy issue * fix typing * update protos, restructure protos module * fix proto imports; only windows gets postures from service * remove console.logs * allow dead code * fix location id; better error message * whitelist new tauri commands * fix windows compilation * import Id * remove unused command argument * post_with_headers helper * fix windows proto import * update proto submodule * move non-mfa posture connection fully to backend
* report number of days * format * proto
* migrate from poc * ui fixes and fix swapping windows * clippy fix * update styles * clippy fixes * Update mod.rs
* fix window spawning behaviour * fix platform specific clippy error
* handle posture check in new UI MFA flow * fix formatting * add posture data to all MFA connection requests * startClientMfaSession helper, deduplicate mfa flow code * display posture check errors * handleMfaStartError helper * make shouldShowPostureError a type guard * handle posture errors during posture-only connect flow * posture check error styling * fix "Try again" button behavior * fix errors in old ui * docstrings * fix error typing * MfaMethod "enum"
* rounded corners for tray window on macos * Update ConnectionsWatcher.tsx
* make sure all posture checks on windows are prepared by the daemon * fix os_version reporting on windows * fix windows os_version - take 2
* rust side * update ui deep link handler * Update defguard-client.rs
* old ui project removed * fix lint e2e, update trivy ignore * update workflows cache logic * fix cache storage path * add missing page to nix package * bump wdio versions, fixes broken tests on node 26 * use action cache v5 --------- Co-authored-by: Maciej Wójcik <maciej@defguard.net>
Use sysfs instead of lsblk command for disk-encryption signal gathering.
Fixes excessive disk writes caused by an inefficient stats query: - Adds upload_diff / download_diff columns to location_stats and tunnel_stats, computed once at insert time - Rewrites the stats queries to read those precomputed diffs, replacing the window-function CTE with a plain GROUP BY aggregate - no more large SQLite temp files - Drops stats retention from 30 days to 28 hours, since the UI only ever charts the last 24h - Adds covering indexes on (location_id, collected_at) and (tunnel_id, collected_at) so the aggregate queries resolve via an index search instead of a full table scan
* update proto submodule * add migration * update model structs * update query data * add helper method to derive flag status * update query data * gate tunnel-related commands * update InstanceInfo * handle in instance update function * add override to persist flag immediately if a connection is active * add helper to disconnect all active tunnels * wire the helper in polling loop and enrollment process * update frontend types * add mirror event for re-enabling tunnels * add event listeners * add route guards * hide Add tunnel card * hide UI elements * don't trigger MFA for tunnels * update notification wording * formatting * gate CLI commands * add helper for error guards * extract duplicate logic * emit events when adding/removing instance * replace macros * update proto submodule * update flake inputs * fix fetcher version * use shared source for node & pnpm version in nix setup * align node version across the repo
* add service error to posture checks * trigger connection error in both views * split on error type
* posture check authenticates the device with polling token * bump proto * fix CVE * chore(nix): update new-ui pnpm deps hash --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
fix disconnect tunnel from connection watcher
Adds posture-check support for service locations.
…#1086) - Distinguish definitive posture rejection from transient authorization failures. - Disconnect connected service-location tunnels after posture rejection. - Fix service-locations file permissions when creating the file. - Fix windows build after cli merged with main binary.
- Initialize sccache before installing tauri-cli in the macOS release workflow. - Install Linux system dependencies, including build-essential, before compiling tauri-cli. - Apply the dependency-order fix to both Ubuntu container and self-hosted Linux builds. - Remove obsolete defguard-cli archive creation and release upload steps. - Stop expecting and signing the removed defguard-cli.exe Windows binary. - Remove obsolete macOS defguard-cli bundle metadata and workflow updates. - Update the integrated CLI command name and documentation to defguard-client.
…uration (#1123) * replace old CIDR regex * add helpers for normalizing IP addresses * normalize before configuring interface * rename helper * format imports * deduplicate IP validation * normalize allowed IPs in dg CLI * add short explanation for extra check * use existing constants * remove duplicate import * simplify bit operations
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
6 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.