Changelog

What changed in each release, newest first. Brain releases are the brain on Linux, Mac and Windows, the romanvaxman/bananana-brain Docker image (tagged with the same version) and the TrueNAS app; agent releases are the bananana-node agent on your computers. Versions are dates: 2026.11.2 is the first release of 2 November 2026, 2026.11.2.3 the third that day. Brains update themselves every night (Docker: pull the new image); each brain's Updates page shows this list too.

Brain 2026.11.5

5 November 2026

• Batch: a dropped device shows Disconnected instead of Shell exited
• Dashboard: a fresh browser opening a device's #services or #docker lands there, not on the Overview (app.js re-routes once the device's features arrive)
• Demo brain: everything on the dashboard works in the demo
• Demo brain for recording: --demo / BANANANA_DEMO=1 runs a separate brain on made-up data (Juniper Lane Studio: four Linux servers, a Mac, a Windows PC) beside a real one, with stable bananana.<screen>

Agent 2026.11.5

5 November 2026

• Batch: a dropped device shows Disconnected instead of Shell exited

Brain 2026.11.4.18

4 November 2026

• Maintenance and small fixes.

Brain 2026.11.4.17

4 November 2026

• The brain's link to a device, after a review of Noise and the admin pages
• The relay can stop seeing dashboards. bananana-edge (edge/) forwards <name>.bananana.dev by TLS server name, with no keys of its own
• A bananana.dev account alone can't act on a brain
• Noise link, relay and enrollment hardening

Agent 2026.11.4.3

4 November 2026

• The relay can stop seeing dashboards. bananana-edge (edge/) forwards <name>.bananana.dev by TLS server name, with no keys of its own
• Noise link, relay and enrollment hardening

Brain 2026.11.4.16

4 November 2026

• OS updates and rollouts, after a review. An update could only run 10 minutes: agents take 3600 seconds at most and use 600 for anything above, so the 3 hours asked for became 10 minutes and a long upd

Brain 2026.11.4.15

4 November 2026

• Who can reach what, tested on every deploy: portal/test_access.py tries every route and action on the brain as every role, as a role with one permission, as someone scoped to one group and signed out,

Brain 2026.11.4.14

4 November 2026

• Security review, second round. The relay no longer holds every brain to 25 connections, which turned away device 26 even on paid plans (Pro allows 100, Business 300): it allows 2000 per brain, limits

Brain 2026.11.4.13

4 November 2026

• Maintenance and small fixes.

Agent 2026.11.4.2

4 November 2026

• Maintenance and small fixes.

Agent 2026.11.4

4 November 2026

• Maintenance and small fixes.

Brain 2026.11.4.12

4 November 2026

• Security fixes from the penetration review

Brain 2026.11.4.11

4 November 2026

• Automatic OS updates: weekly, Sunday 02:00 to 05:00 brain time, through the rings

Brain 2026.11.4.10

4 November 2026

• Dashboard v2 on bananana.dev/admin: a sidebar at full width, built from modules (admin.MODULES, each joining with add()

Brain 2026.11.4.9

4 November 2026

• Brains report their real version: brainconf.VERSION read portal/VERSION, a hand-written file last changed on 28 Oct, so every brain told bananana.dev 2026.10.28

Brain 2026.11.4.8

4 November 2026

• One authenticator for a brain and bananana.dev: a new Owner's is shared at first run (POST /v1/brains/totp, brain key plus Owner's email)

Brain 2026.11.4.7

4 November 2026

• Branded emails; customers and Roman get different ones; portal cancellations noticed

Brain 2026.11.4.6

4 November 2026

• Real logos for devices: Windows, Apple, Linux and the common distros

Brain 2026.11.4.5

4 November 2026

• Paid plans: Stripe billing on bananana.dev, built and switched off

Brain 2026.11.4.4

4 November 2026

• Maintenance and small fixes.

Brain 2026.11.4.3

4 November 2026

• Compliance: a Windows device with one drive no longer takes the whole page down (its agent sends a lone drive outside a list)
• Take romanvaxman.com out of the product: contact email and retired dashboard address
• AI model page: a connection dropped during the sign-in tool's download fails with a message instead of hanging
• AI model page: ChatGPT and Claude plans now work on every brain

Brain 2026.11.4.2

4 November 2026

• Unraid and TrueNAS onboarding: /start asks "Where will you run your brain?" with Unraid and TrueNAS beside Docker and shows only the bst_ token with where to paste it

Brain 2026.11.4

4 November 2026

• AI model page: the sign-in no longer disappears after saving a plan, and the page is reworked

Brain 2026.11.3.6

3 November 2026

• Live Defender and firewall events on Windows: the agent subscribes to their event logs (no commands run) and tells the brain within seconds

Agent 2026.11.3

3 November 2026

• Live Defender and firewall events on Windows: the agent subscribes to their event logs (no commands run) and tells the brain within seconds
• ClamAV: help page, privacy policy, third-party notices, plan
• Native Mac brain: install-brain.sh hands Macs to install-brain-mac.sh (bundled Python, launchd, the hidden _bananana user, awake on power, the Mac joins as This computer)

Brain 2026.11.3.5

3 November 2026

• ClamAV is for macOS and Linux only: on Windows, Microsoft Defender protects better and is managed from the Security tab

Brain 2026.11.3.4

3 November 2026

• ClamAV: removing it stops a running clamscan too

Brain 2026.11.3.3

3 November 2026

• ClamAV can be removed while a scan runs; a status job that was waiting doesn't bring a removed device back; plan: what was tested
• ClamAV: help page, privacy policy, third-party notices, plan

Brain 2026.11.3.2

3 November 2026

• ClamAV: scans start without nohup (macOS refuses it under a service) and the job confirms the scan is running

Brain 2026.11.3

3 November 2026

• Free malware scanning with ClamAV: turn it on per device or for every device

Brain 2026.11.2.22

2 November 2026

• Mac brain: the not-connected message fits a Mac

Brain 2026.11.2.21

2 November 2026

• Native Mac brain: install-brain.sh hands Macs to install-brain-mac.sh (bundled Python, launchd, the hidden _bananana user, awake on power, the Mac joins as This computer)

Brain 2026.11.2.20

2 November 2026

• Nightly brain updates wait (up to 4 hours) while someone has a device's screen or terminal open
• Fix agents stuck reconnecting for minutes (jobs timed out): the relay sends the brain's frames to a device's newest connection, not a half-open replaced one

Brain 2026.11.2.19

2 November 2026

• Screen viewer reconnects by itself after a dropped link (1, 2, 3, 5, then every 10 s, for two minutes)

Brain 2026.11.2.18

2 November 2026

• Logs page: wider time column

Brain 2026.11.2.17

2 November 2026

• Logs page: event text wraps too

Brain 2026.11.2.16

2 November 2026

• Logs page: long entries wrap instead of widening the table

Brain 2026.11.2.15

2 November 2026

• Logs page: checkboxes and fields sized for the filter grid

Brain 2026.11.2.14

2 November 2026

• Logs page: the reports module no longer clashes with do_GET's own 'reports' variable

Brain 2026.11.2.13

2 November 2026

• Logs page: everything the brain records in one list (admin actions, connections, jobs, brain updates, notifications, service output) with filters and ready-made reports to Excel or PDF

Brain 2026.11.2.12

2 November 2026

• Updates page checks bananana.dev for agent releases when opened (at most once a minute) instead of waiting for the hourly check

Agent 2026.11.2.9

2 November 2026

• Maintenance and small fixes.

Agent 2026.11.2.8

2 November 2026

• Agent: disable bunch also stops the tailscaled the previous agent started (its state stays for enable)

Brain 2026.11.2.11

2 November 2026

• Clicking Update retries an agent update that failed within the day (only automatic retries wait a day)

Brain 2026.11.2.10

2 November 2026

• Bunch relay limit per plan (item 11): Free 10 GB a month per organization through derp1, refused past it until the 1st

Brain 2026.11.2.9

2 November 2026

• Bunch relayed traffic (plan item 11, brain side): per-device direct and relayed bytes, a day-relayed alert, "Relayed" on the device card, relayed bytes per brain in the heartbeat and /admin

Brain 2026.11.2.8

2 November 2026

• Android build 5 (1.2): a lapsed brain session signs in again through bananana.dev

Brain 2026.11.2.7

2 November 2026

• bunch's programs stay current: agents and brains replace tailscaled and Headscale when new builds are published (item 17)

Agent 2026.11.2.7

2 November 2026

• bunch's programs stay current: agents and brains replace tailscaled and Headscale when new builds are published (item 17)

Brain 2026.11.2.6

2 November 2026

• bunch steps aside where Tailscale already runs (item 15)
• bunch item 7: coordination traffic already runs over the direct link (item 2)

Agent 2026.11.2.6

2 November 2026

• bunch steps aside where Tailscale already runs (item 15)

Brain 2026.11.2.5

2 November 2026

• bunch: falls back in half a minute, comes back sooner, shows its path, and works in plain containers

Agent 2026.11.2.5

2 November 2026

• bunch: falls back in half a minute, comes back sooner, shows its path, and works in plain containers
• bunch: <device>.bunch names resolve on devices

Brain 2026.11.2.4

2 November 2026

• bunch: <device>.bunch names resolve on devices
• bunch: derp1 relays only for bananana devices (docs/BUNCH.md item 8), not deployed yet
• bunch: derp1's region is San Francisco (DigitalOcean SFO3), not New York

Brain 2026.11.2.3

2 November 2026

• bunch rules: by default devices reach only the brain

Agent 2026.11.2.4

2 November 2026

• bunch rules: by default devices reach only the brain

Brain 2026.11.2.2

2 November 2026

• Update guard and change log: the brain never updates itself and its agents at once, and the Updates page says what changed
• Date-based version numbers, and "Third-party licenses" (bananana.dev is proprietary, not open source)
• Updates page: when Update now hasn't started the updater after two minutes, say why and what to run
• Updates page: the brain's update step by step with a progress bar, and every device's agent
• Nodes page: each card shows its agent version, in the warning colour when a newer one is out
• Connection history on the brain and connection events on the relay, so a dropped device can be explained
• bunch on Windows brains: Headscale on Windows (our own build), and agent 0.3.22 fixes bunch on Windows agents
• bunch on by default: brains turn it on, devices join by themselves
• bunch: devices talk to the brain directly over bunch, with the relay as fallback (agent 0.3.21)
• bunch: the brain's own machine joins the mesh as brain.bunch
• Paperwork: open-source licenses, cookie policy, privacy and terms brought up to date
• Agent 0.3.20: bunch on Windows, and no log uploads to Tailscale
• brain: Update now no longer depends on bananana-update.path alone

Agent 2026.11.2.3

2 November 2026

• Agent: the version line points at third-party licenses, not "open-source notices" (bananana.dev itself is proprietary)
• Date-based version numbers, and "Third-party licenses" (bananana.dev is proprietary, not open source)
• Connection history on the brain and connection events on the relay, so a dropped device can be explained
• Agent 0.3.23: stop waiting for the brain after two minutes and reconnect
• bunch on Windows brains: Headscale on Windows (our own build), and agent 0.3.22 fixes bunch on Windows agents
• bunch: devices talk to the brain directly over bunch, with the relay as fallback (agent 0.3.21)
• Paperwork: open-source licenses, cookie policy, privacy and terms brought up to date
• Agent 0.3.20: bunch on Windows, and no log uploads to Tailscale
• Agent 0.3.19 (bunch); publish-agent-mac.sh publishes only the signed macOS agents; the site serves bunch's downloads
• bunch phase 1 (not published): real interfaces under the agent's root service, downloads checked against SHA256SUMS, status, leave and resume after restarts
• bunch phase 0: a node joins a private mesh with only its Noise link
• Client Docker image for Unraid, TrueNAS and Synology (romanvaxman/bananana-node, not pushed yet): agent 0.3.18 runs in a container started with --privileged --pid=host --net=host --uts=host, reads the
• Windows: the brain and the agent appear in Settings > Apps > Installed apps (publisher CTF Designs, LLC) with an Uninstall that asks for admin rights itself
• "Built by CTF Designs" everywhere it matters: dashboard sidebar and sign-in page, help docs footer, every email, the Android app's More screen, and agent 0.3.16 (version output, and Company and Copyri
• Agent 0.3.15: add the tray autostart when it's missing

The same list as data: changelog.json.