v1.13.42 ()
-
Feat: On managed Windows installs, the agent now keeps its configuration, database and log next to the agent at a custom install location, and added a
prey config migrate_filescommand to safely copy existing data from the legacy location (originals are preserved as backups). Standard installs are unaffected. (SoraKenji) -
Feat: Added coherent, timestamped location storage: every accepted location is now recorded in a local audit table with the date it was obtained, and a dedicated
location_data.jsonis included in log retrieval so installations can be reviewed with a clear location timeline. (SoraKenji) -
Feat: Improved schedule-aware forced location with a smarter interval and safer handling around the configured tracking schedule. (SoraKenji)
-
Fix: Forced location is now gated on connectivity, avoiding failed location attempts while the device is offline. (SoraKenji)
-
Fix: Hardened Windows data collection by forcing a safe working directory for provider processes, preventing crashes (EROFS) under restricted filesystem conditions. (SoraKenji)
-
Fix: Improved resilience to transient network and socket errors (connection, TLS read, write and WebSocket abort errors), which are now handled gracefully instead of crashing or being over-reported. (SoraKenji)
-
Fix: Device state changes that fail while the device is offline are now persisted and retried once connectivity is restored, so no state update is lost. (SoraKenji)
-
Fix: The HTTP user agent is now always set, avoiding requests with an undefined user-agent header. (SoraKenji)
-
Fix: Hardened file retrieval parsing and stopped counting the expected "No active session" case against the error-reporting quota. (SoraKenji)
-
Fix: Hardened configuration handling by guarding settings updates against missing values and tolerating a closed output pipe (EPIPE) when printing synced output. (SoraKenji)
-
Chore: Updated dependencies to address multiple security advisories reported by npm audit (including axios, ip-address SSRF, xmldom, adm-zip, qs, brace-expansion, markdown-it, js-yaml, moment and http-cache-semantics), and removed the vulnerable sonarqube-scanner / node-forge chain. (SoraKenji)