# Tabby v1.0.235 - Product: Tabby (https://whatsnew.fyi/product/tabby) - Vendor: Eugeny - Date: 2026-07-22 - Version: v1.0.235 - Original notes: https://github.com/Eugeny/tabby/releases/tag/v1.0.235 - Permalink: https://whatsnew.fyi/product/tabby/releases/v1.0.235 - Labels: Platforms: Desktop What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **security** — Fix Windows SFTP path traversal vulnerability allowing a malicious server to write files outside the selected download directory (GHSA-59p9-8gwf-v9v7) - **added** — Add pinned tabs - **added** — Add mouse wheel support for hotkeys - **added** — Add group nesting folders and profile tree view - **added** — Add Cool Retro Term Amber theme - **added** — Add Connect, Disconnect, and Reconnect buttons to serial tab toolbar - **added** — Add dropdown arrow to form-select elements - **changed** — Sort baud rate selector by numeric order - **changed** — Make keyboard-interactive auth URLs clickable - **changed** — Bundle MSVC runtime DLLs in Windows portable packages - **changed** — Refresh Windows environment variables from registry for new sessions - **changed** — Expose debug hotkeys in settings for remap and disable - **fixed** — Restore terminal redraw after tab reactivation - **fixed** — Fix plugins search - **fixed** — Restore transparent background when vibrancy is enabled - **fixed** — Restore hotkey edit and remove actions - **fixed** — Exclude unnecessary Windows build artifacts - **fixed** — Reset stale DEC modes on connectable reconnect - **fixed** — Prevent SSH keepalive flooding by mapping null or 0 keepaliveInterval to undefined - **fixed** — Fix ZMODEM transfer - **fixed** — Honor SSH profile port settings on connect #### Security fixes * GHSA-59p9-8gwf-v9v7: Windows SFTP path traversal allows a malicious server to write files outside the selected download directory #### Changes * feat(core): add pinned tabs by @tyr1k in https://github.com/Eugeny/tabby/pull/11146 * Sort baud rate selector by numeric order by @bluekani in https://github.com/Eugeny/tabby/pull/11297 * feat: Add mouse wheel support for hotkeys by @bluekani in https://github.com/Eugeny/tabby/pull/11324 * [Feature] Group nesting "folders" & Profile tree view by @D3VL-Jack in https://github.com/Eugeny/tabby/pull/10788 * Make keyboard-interactive auth URLs clickable by @puneetdixit200 in https://github.com/Eugeny/tabby/pull/11327 * Bundle MSVC runtime DLLs in Windows portable packages by @bluekani in https://github.com/Eugeny/tabby/pull/11372 * Adding Cool Retro Term Amber theme by @saudiqbal in https://github.com/Eugeny/tabby/pull/11337 * [FEATURE] refresh Windows environment variables from registry for new sessions by @MicroGery in https://github.com/Eugeny/tabby/pull/11321 * fix(terminal): expose debug hotkeys in settings for remap/disable by @uadhran in https://github.com/Eugeny/tabby/pull/11420 * feat: add Connect, Disconnect, and Reconnect buttons to serial tab toolbar by @uadhran in https://github.com/Eugeny/tabby/pull/11288 #### Fixes * fix: restore terminal redraw after tab reactivation by @uadhran in https://github.com/Eugeny/tabby/pull/11275 * fix: Plugins search by @bluekani in https://github.com/Eugeny/tabby/pull/11330 * fix(terminal): restore transparent background when vibrancy is enabled by @Specboss in https://github.com/Eugeny/tabby/pull/11326 * fix: Restore hotkey edit and remove actions by @bluekani in https://github.com/Eugeny/tabby/pull/11374 * fix: Exclude unnecessary Windows build artifacts by @bluekani in https://github.com/Eugeny/tabby/pull/11371 * fix: Pin Windows build runner to windows-2022 by @bluekani in https://github.com/Eugeny/tabby/pull/11370 * fix(terminal): reset stale DEC modes on connectable reconnect by @balajieswaramoorthi in https://github.com/Eugeny/tabby/pull/11368 * fix(ssh): prevent keepalive flooding by mapping null/0 keepaliveInterval to undefined by @linzack in https://github.com/Eugeny/tabby/pull/11340 * fix: ZMODEM transfer by @ruanimal in https://github.com/Eugeny/tabby/pull/11319 * fix(ssh): honor profile port settings on connect by @uadhran in https://github.com/Eugeny/tabby/pull/11366 * fix(terminal): robust context loss recovery and direct DOM fallback during GPU resets by @Gerry9000 in https://github.com/Eugeny/tabby/pull/11354 * fix(settings): guard hotkey config lookup for missing plugin paths by @uadhran in https://github.com/Eugeny/tabby/pull/11422 * fix(terminal): restart visual bell shake on repeated BEL by @uadhran in https://github.com/Eugeny/tabby/pull/11388 * fix: handle vault unlock modal cancellation gracefully by @uadhran in https://github.com/Eugeny/tabby/pull/11356 * feat: Add dropdown arrow to form-select elements by @bluekani in https://github.com/Eugeny/tabby/pull/11399 * fix(ssh): prevent SFTP path navigation freeze by @A-Words in https://github.com/Eugeny/tabby/pull/11393 * fix: replace exec() with execFile() to prevent shell injection in shellIntegration.service by @uadhran in https://github.com/Eugeny/tabby/pull/11290 * fix: replace exec() with execFile() to prevent shell injection in app.ts by @uadhran in https://github.com/Eugeny/tabby/pull/11289 ##### New Contributors * @cayenne17 made their first contribution in https://github.com/Eugeny/tabby/pull/11284 * @bluekani made their first contribution in https://github.com/Eugeny/tabby/pull/11297 * @D3VL-Jack made their first contribution in https://github.com/Eugeny/tabby/pull/10788 * @puneetdixit200 made their first contribution in https://github.com/Eugeny/tabby/pull/11327 * @Specboss made their first contribution in https://github.com/Eugeny/tabby/pull/11326 * @balajieswaramoorthi made their first contr _[Truncated at 4000 characters — full notes: https://github.com/Eugeny/tabby/releases/tag/v1.0.235]_