v1.6.0-alpha6

⚠️ This is a pre-release that requires Defguard Core min. v1.5.2 - please help us test and stabilize the release 🫡

This release upgrades the Enrollment Process with a completely new UI and UX, featuring a major redesign, the ability to download clients directly from the process, and several other improvements:

Additionally, we have deprecated the Enrollment Wizard (used for setting up passwords and adding a WireGuard® device) in the Proxy. The Enrollment Wizard is now only available on the Desktop Client, with plans to bring it to Mobile apps in the future.

Detailed changes

• Release 1.5 merger by @wojcik91 in #166
• Fixes pentest issue DG25-16 from 2025-09-02 by @j-chmielewski in #159
• Fixes pentest issue DG25-14 from 2025-09-02 by @moubctez in #167
• Fix enrollment phone number validation by @j-chmielewski in #168
• Web next wip by @filipslezaklab in #170
• Merge main into dev after 1.5.1 release by @j-chmielewski in #172
• Create SBOM files by @j-chmielewski in #173
• CI: scan code with trivy by @j-chmielewski in #174
• Handle not found error by @moubctez in #175
• Periodic sbom regeneration by @j-chmielewski in #176
• ui update by @filipslezaklab in #177
• Merge SBOM CI pipelines into main by @j-chmielewski in #178
• handle openid callback by @filipslezaklab in #179
• webnext update by @filipslezaklab in #181
• Health check rename by @jakub-tldr in #182
• add favicon by @filipslezaklab in #183
• use update service api for client links by @filipslezaklab in #184
• footer update by @filipslezaklab in #185
• Always add x-powered-by HTTP header by @moubctez in #186
• handle update service fallback by @filipslezaklab in #187
• e2e webnext update by @filipslezaklab in #188
• Reorder pages by @filipslezaklab in #189
• add icon warning by @filipslezaklab in #190
• fix info banner by @filipslezaklab in #192
• ui as module by @filipslezaklab in #193
• add debian security repo for main packages by @filipslezaklab in #194
• webnext to web by @filipslezaklab in #195
• Main to dev by @filipslezaklab in #196
• UI 2.0 by @filipslezaklab in #197
• add missing openid routes by @filipslezaklab in #201
• Release/1.6 alpha by @wojcik91 in #202
• APT uploading/signing workflow by @jakub-tldr in #200
• List apt directory by @jakub-tldr in #203
• List whole directory by @jakub-tldr in #206
• Service locations (Pre-logon, Always-on) by @t-aleksander in #207
• Merge main into dev before 1.6 release by @j-chmielewski in #208
• Basic client version reporting by @t-aleksander in #209
• Remove AMI building by @t-aleksander in #211
• Implement "force all traffic" enterprise setting by @j-chmielewski in #212

Full Changelog: v1.5.1...v1.6.0-alpha6