This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+2 more
ReleasePort's take
Light signalThe Windows agent now reliably cleans up temporary SSH keys and resolves related permission errors.
Why it matters: Fixes a failure in Windows agent SSH key cleanup that caused permission errors; critical for agents handling secure connections.
Summary
AI summaryUpdates Highlights, Upgrade notes, and 24h across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Admin dashboard redesigned with new Server Health, Backup Summary, and Jobs widgets. Admin dashboard redesigned with new Server Health, Backup Summary, and Jobs widgets. Source: granite4.1:30b@2026-05-25-audit Confidence: low |
— |
| Bugfix | Medium |
Fixes Windows agent SSH key cleanup failure and permission error. Fixes Windows agent SSH key cleanup failure and permission error. Source: llm_adapter@2026-05-25 Confidence: high |
— |
Full changelog
Highlights
Dashboard redesign
The admin dashboard has been substantially refreshed:
- Server Health is now a three-tile widget: a semicircular CPU dial with status text (Healthy / Moderate / High Usage), a vertical memory thermometer with total / used / % on the side, and a focused disk strip for
/var/bbswith the percentage centered inside the bar and used / total beside it. - Backup Summary is now a 3×2 grid of compact stat tiles with colored circular icons: Recovery Points, Original Data, On Disk, Dedup Savings, Last Backup, and a new Backups (24h) counter.
- Jobs (Last 24h) chart fills the row's available height instead of being locked to a fixed size, keeping the two adjacent cards visually balanced.
Windows agent SSH key fix (#283)
The temporary per-job SSH key on Windows was being locked down with read-only ACLs for SYSTEM, which meant:
- The agent could not delete the key in its cleanup path (silently failing every run, leaking the file).
- On retry,
open(..., 'w')failed with a permission error because the existing file blocked the overwrite — the symptom in the issue.
SYSTEM now gets FullControl on the temp key (Administrators stay at Read; OpenSSH on Windows only refuses keys when other users can read). Pre-existing locked files from older agents are cleaned up automatically on next run.
Upgrade notes
- Agents will auto-update to 2.54.0 on their next poll. No action required on Windows clients — the launcher will pick up the new
bbs-agent.pyon its next restart. - Server upgrade:
sudo /var/www/bbs/bin/bbs-update /var/www/bbs
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]