What's Changed in v2.0.7

--update BROKEN! Sorry to inform you, that with renaming the archives to include the version (e.g. goshs_v2.0.7_linux_x86_64.tar.gz instead of goshs_linux_x86_64.tar.gz) the update mechanism broke. It will work again in v2.0.8 then. Sorry for the inconvenience :(

As a workaround use go install goshs.de/goshs/v2@latest or download the corresponding binary below and replace the binary on your file system.

Security

• Security Update: The auto-update check now verifies the download against MITM attacks using the checksum
• Fixed GHSA-mxg3-432p-mr72: A mismatched host key during tunnel setup exits the process immediately instead of silently continuing

Bug Fixes

• Fixed SMB credential logging being silently dropped when -b (basic auth) was active
• Fixed HTTP collaborator frontend incorrectly parsing certain base64-encoded log entries

Distribution

• Windows releases now ship as .zip archives (previously .tar.gz)
• Linux releases now include .deb and .rpm packages for direct installation
• Winget support added (winget install PatrickHener.Goshs) — pending first-submission approval
• Added installation instructions for Arch (AUR), openSUSE, Parrot OS, and NixOS

Documentation

• Added demo page and live demo link to README
• Updated documentation link to docs.goshs.de
• Updated SECURITY.md with advisory details and remediation guidance

Maintenance

• Bumped Go version in Dockerfile
• Updated goreleaser-action to v7.2.1
• Updated codeql-action to v4.35.3