release: v1.4.12

Hotfix: the update agent's systemd unit exec'd pitun-update.sh directly, but
scripts ship non-executable (100644) and a source re-extraction on update
drops +x — so the next update failed with status=203/EXEC and the UI Update
button went dead. The unit now runs the script via bash, and pitun-update.sh
is tracked executable so extraction preserves the bit.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: DaveBugg

CHANGELOG.md

@@ -4,6 +4,23 @@ All notable user-facing changes to PiTun. Full per-release detail lives in the
 [GitHub Releases](https://github.com/DaveBugg/PiTun/releases); this file is the
 committed summary.
 
+## v1.4.12 — 2026-08-04
+
+Hotfix.
+
+### Fixed
+
+- **Self-update could brick itself after the first update.** The update
+  agent's systemd unit executed `pitun-update.sh` directly, but the repo
+  ships its scripts non-executable (`100644`) and a source re-extraction on
+  update drops any `+x` bit — so the *next* update failed to spawn the agent
+  with `status=203/EXEC` (`Permission denied`) and the UI Update button went
+  dead. The unit now invokes the script via `bash` (no `+x` needed, matching
+  every other script here), and `pitun-update.sh` is additionally tracked
+  executable so extraction preserves the bit. Already-affected boxes need a
+  one-time `chmod +x /opt/pitun/scripts/pitun-update.sh` (or the bash-unit
+  edit) before they can update again.
+
 ## v1.4.11 — 2026-08-04
 
 Hotfix.

backend/app/config.py

@@ -5,7 +5,7 @@
 # OpenAPI metadata, `/health` response, and `/system/status` so the
 # frontend can display it next to the xray version. Bump this on each
 # release — frontend keeps its own version in `frontend/package.json`.
-APP_VERSION = "1.4.11"
+APP_VERSION = "1.4.12"
 
 
 class Settings(BaseSettings):

frontend/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pitun-frontend",
   "private": true,
-  "version": "1.4.11",
+  "version": "1.4.12",
   "license": "BSD-3-Clause",
   "type": "module",
   "scripts": {

scripts/pitun-update.sh

@@ -460,7 +460,10 @@ After=network-online.target docker.service
 
 [Service]
 Type=oneshot
-ExecStart=${self} --agent
+# Invoke via bash, not a direct exec: the repo ships scripts non-executable
+# (100644) and a source re-extraction on update drops any +x bit, which would
+# otherwise brick the agent with status=203/EXEC on the next update.
+ExecStart=/bin/bash ${self} --agent
 EOF
     cat >"/etc/systemd/system/pitun-update-agent.path" <<EOF
 [Unit]