Ghost FTP 0.15.0

Release status: development preview
Release date: 26 September 2026

0.15.0 is the next development release after the 14 actually published legacy releases. It combines production-readiness, Windows UX, Android installability, SFTP trust hardening and release-pipeline cleanup; the version is not bumped separately from these real changes.

Current hardening

• Prevents Windows console/CMD flashes when opening Settings → Advanced by removing the where.exe subprocess from PATH status detection.
• Applies no-console process creation to Windows helpers that can be launched from the GUI.
• Renders the Files → More action menu through a body portal so toolbar overflow cannot clip it.
• Adds regression contracts for the More menu and shell-free Advanced PATH status.
• Produces a release-optimized, non-debuggable, signed installable Android preview APK under the isolated com.ghostftp.android.preview application id.
• Keeps the keyless production release APK explicitly unsigned and labels it as a non-installable QA artifact instead of presenting it as the primary APK.
• Verifies the installable Android preview with apksigner and validates its package id before upload.
• Keeps strict SFTP host-key verification and changed-key replacement hardening.
• Preserves the transfer retry FIFO/pause lifecycle fixes from the previous hardening cycle.
• Centralizes active product metadata in version.json and synchronizes desktop, Rust, Android, tools, updater and website metadata.

Required gates

The exact HEAD SHA must pass:

• frontend production build, TypeScript and UI contracts;
• Rust formatting, workspace check, tests and Clippy with warnings denied;
• real FTP, explicit FTPS and SFTP roundtrip E2E;
• Windows native/installer hardening;
• Linux native, AppImage, DEB and RPM builds;
• Android lint, build, signature verification and installable preview artifact validation.