Highlights
- Hardened privileged icon changes against command injection and unsafe helper paths.
- Added detection and repair for legacy user-writable administrator permission rules.
- Fixed background restore scheduling and reliable update detection.
- Improved local icon import responsiveness, setup error reporting, explicit icon loading, and history reuse.
- Hardened remote icon downloads with HTTPS-only URLs and bounded response sizes.
- Fixed sudo permission verification and removed the irreversible Launchpad deletion action.
- Added reproducible DMG creation, launch validation, Sparkle signing, and gated candidate promotion.
This is a pre-release. Enable Pre-Release Updates in Advanced settings to receive it through Sparkle.
Full Changelog: v1.4.4-pre-9...v1.5.0-pre.1