Devolutions/devolutions-gateway v2026.2.4

on GitHub

Features

• agent: add PSU agent functionality (#1840) (182abc28c4) (#1848) (a9a2bb508e) (#1851) (e962198fad)

  Adding ability to Devolutions Agent to connect to PSU over gRPC and
  start child processes to run PSRP requests from PSU.

• webapp: align standalone UI with DVLS theme (#1845) (db5866b8a8)

  Aligns the standalone Gateway webapp styling with the DVLS theme, adding
  light and dark theme support and refreshing the main UI surfaces users
  interact with.

  This updates the sidebar, login page, session backgrounds, dropdowns,
  reconnect form layout, and toast spacing so the standalone Gateway
  webapp feels consistent with the DVLS experience.

• webapp: add Active Directory web client (#1849) (264932d8ce)

  Adds Active Directory support to the standalone Gateway web client,
  allowing users to open LDAP and LDAPS sessions from the Gateway UI.

  The new experience includes an Active Directory connection form, session
  tab handling, LDAP-backed data operations, and theme-aligned Active
  Directory UI integration using the published Active Directory web
  component package.

• dgw: add Session Recording Log artifacts (#1857) (e84baaa94b) (DGW-403)

  Adds server-side support for Session Recording Log recording artifacts.

  Gateway can now accept JREC recording pushes with fileType=slog,
  persist the raw UTF-8 NDJSON stream as .slog, and serve .slog
  downloads with the application/x-ndjson content type. This establishes
  the Gateway storage contract needed by AD Session Recording Log
  producers and future viewers.

• agent: implement package broker (#1847) (66c8377d40)

  Introduces a package broker in Devolutions Agent that enables
  policy-driven software installation and management. It supports winget
  and PowerShell package managers, JSON and YAML policy definitions with
  evaluation and schema generation, elevated and non-elevated execution
  with user impersonation, and pipe-based authentication that validates
  the effective user and calling executable signature.

Bug Fixes

• dgw: write boot.stacktrace file when running as a service (#1838) (48a8512bf6) (DGW-401)

• session: scope RDM jump host discovery to the current Windows session (#1839) (3c9fbf65c0)

  Fixes RDM (Remote Desktop Manager) “jump host” discovery to only consider RDM instances running in the current Windows session, preventing cross-session collisions when the same user has multiple concurrent sessions.

• agent-installer: fail the install if the agent tunnel can't reach the gateway (#1837) (559f4c2ba3)

• agent: recover DVC initialization after session readiness (#1852) (b897c59b7c)

  Improves Devolutions Agent reliability for RDP connections that use
  multi-step authentication or reconnect an existing session. The session
  host now waits for the appropriate Windows logon or unlock event before
  starting, and transient virtual-channel initialization failures recover
  automatically instead of ending the session immediately.

• dgw: retry transient KDC connection drops (#1863) (de6c29e684) (DGW-423)

  The KDC proxy path sometimes sees a connection accepted and then dropped
  before a reply is returned (suspected DC-side load: connection
  throttling or port exhaustion), surfacing to clients as a 502 Bad
  Gateway. Direct KDC exchanges are now retried up to 3 times on such
  transient failures, spaced with equal-jitter exponential backoff (~1.5s
  / 3s / 6s) so a loaded KDC gets breathing room and concurrent retries do
  not synchronize into a storm. Permanent failures are still surfaced
  immediately, and the KDC target host is now shown at info level for
  easier diagnosis.