chore(release): prepare for 2026.2.4#1864
Merged
Merged
Conversation
Marc-André Moreau (mamoreau-devolutions)
approved these changes
Jul 24, 2026
Benoît Cortier (CBenoit)
enabled auto-merge (squash)
July 24, 2026 15:32
Contributor
There was a problem hiding this comment.
Pull request overview
Prepares the repository for the 2026.2.4 Gateway and Agent release.
Changes:
- Bumps release versions across Rust, .NET, PowerShell, and packaging metadata.
- Adds release and packaging changelogs.
- Documents included features and bug fixes.
Reviewed changes
Copilot reviewed 8 out of 10 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
VERSION |
Sets release version to 2026.2.4. |
Cargo.toml |
Updates the Rust workspace version. |
Cargo.lock |
Refreshes workspace package versions. |
fuzz/Cargo.lock |
Updates the fuzz target’s Gateway version. |
CHANGELOG.md |
Adds the 2026.2.4 release notes. |
package/Linux/CHANGELOG.md |
Adds the Gateway Linux packaging release. |
package/AgentLinux/CHANGELOG.md |
Adds the Agent Linux packaging release. |
powershell/DevolutionsGateway/DevolutionsGateway.psd1 |
Updates the PowerShell module version. |
dotnet/DesktopAgent/DesktopAgent.csproj |
Updates the desktop Agent version. |
crates/devolutions-pedm-shell-ext/AppxManifest.xml |
Updates the shell extension package version. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Comment on lines
+77
to
+78
| transient failures, spaced with equal-jitter exponential backoff (~1.5s | ||
| / 3s / 6s) so a loaded KDC gets breathing room and concurrent retries do |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Features
agent: add PSU agent functionality (#1840) (182abc28c4) (#1848) (a9a2bb508e) (#1851) (e962198fad)
Adding ability to Devolutions Agent to connect to PSU over gRPC and
start child processes to run PSRP requests from PSU.
webapp: align standalone UI with DVLS theme (#1845) (db5866b8a8)
Aligns the standalone Gateway webapp styling with the DVLS theme, adding
light and dark theme support and refreshing the main UI surfaces users
interact with.
This updates the sidebar, login page, session backgrounds, dropdowns,
reconnect form layout, and toast spacing so the standalone Gateway
webapp feels consistent with the DVLS experience.
webapp: add Active Directory web client (#1849) (264932d8ce)
Adds Active Directory support to the standalone Gateway web client,
allowing users to open LDAP and LDAPS sessions from the Gateway UI.
The new experience includes an Active Directory connection form, session
tab handling, LDAP-backed data operations, and theme-aligned Active
Directory UI integration using the published Active Directory web
component package.
dgw: add Session Recording Log artifacts (#1857) (e84baaa94b) (DGW-403)
Adds server-side support for Session Recording Log recording artifacts.
Gateway can now accept JREC recording pushes with
fileType=slog,persist the raw UTF-8 NDJSON stream as
.slog, and serve.slogdownloads with the
application/x-ndjsoncontent type. This establishesthe Gateway storage contract needed by AD Session Recording Log
producers and future viewers.
agent: implement package broker (#1847) (66c8377d40)
Introduces a package broker in Devolutions Agent that enables
policy-driven software installation and management. It supports winget
and PowerShell package managers, JSON and YAML policy definitions with
evaluation and schema generation, elevated and non-elevated execution
with user impersonation, and pipe-based authentication that validates
the effective user and calling executable signature.
Bug Fixes
dgw: write boot.stacktrace file when running as a service (#1838) (48a8512bf6) (DGW-401)
session: scope RDM jump host discovery to the current Windows session (#1839) (3c9fbf65c0)
Fixes RDM (Remote Desktop Manager) “jump host” discovery to only consider RDM instances running in the current Windows session, preventing cross-session collisions when the same user has multiple concurrent sessions.
agent-installer: fail the install if the agent tunnel can't reach the gateway (#1837) (559f4c2ba3)
agent: recover DVC initialization after session readiness (#1852) (b897c59b7c)
Improves Devolutions Agent reliability for RDP connections that use
multi-step authentication or reconnect an existing session. The session
host now waits for the appropriate Windows logon or unlock event before
starting, and transient virtual-channel initialization failures recover
automatically instead of ending the session immediately.
dgw: retry transient KDC connection drops (#1863) (de6c29e684) (DGW-423)
The KDC proxy path sometimes sees a connection accepted and then dropped
before a reply is returned (suspected DC-side load: connection
throttling or port exhaustion), surfacing to clients as a 502 Bad
Gateway. Direct KDC exchanges are now retried up to 3 times on such
transient failures, spaced with equal-jitter exponential backoff (~1.5s
/ 3s / 6s) so a loaded KDC gets breathing room and concurrent retries do
not synchronize into a storm. Permanent failures are still surfaced
immediately, and the KDC target host is now shown at info level for
easier diagnosis.