Ghost FTP 0.30.6
Release date: 4 October 2026
Ghost FTP 0.30.6 follows the published 0.30.5 release with fail-closed overwrite protection, Android navigation and security hardening, official-link consolidation and stricter localization parity.
Transfer integrity and overwrite safety
- Dynamics existence checks now propagate authentication, network and Dataverse API failures instead of converting them to “not found”.
- Shopify asset, HubSpot, OneDrive, Dropbox, FTP, Agent and object-backed overwrite probes distinguish confirmed absence from operational errors and fail closed when the result is ambiguous.
- FTP overwrite decisions prove absence from safe directory listings rather than treating arbitrary SIZE/stat failures as a missing target.
- The Ghost FTP Agent protocol marks OS-level not-found conditions explicitly; permission, policy, transport and generic remote failures remain errors.
- Rename conflict probing uses the same checked existence semantics, so automatic rename cannot select an unsafe destination after a failed probe.
- Dead fail-open cloud existence helpers removed during the audit are no longer part of overwrite decisions.
Android UI, UX and security
- Compact Android layouts use a true left-side overlay drawer that can be opened and closed from the app header.
- Tablet/wide layouts retain a persistent navigation rail while phone navigation closes after workspace selection to preserve content space.
- Destructive confirmations are rendered inline inside the application instead of using popup AlertDialog windows.
- Android instrumentation and production-contract checks cover drawer open/close behavior, compact responsive navigation and official product links.
- Global Android cleartext traffic is disabled at the manifest level.
- Plain FTP selection shows an explicit transport-security warning and recommends explicit FTPS or SFTP where available.
- Explicit FTPS communicates TLS hostname validation and SFTP communicates strict SSH host-key verification.
- Unused keyboard-interactive SSH authentication is disabled, reducing the authentication surface.
- Ghost FTP Agent identity loading now rejects malformed base64, non-32-byte X25519 keys and identity-file I/O errors; fingerprint generation propagates validation failures, while Unix private-key files are created/restricted to owner-only
0600and permission failures block startup.
Desktop UI, product links and localization
- Help & About exposes centralized official Support, Documentation, Privacy and EULA destinations rather than scattered hard-coded product URLs.
- External-link handling is restricted to approved destinations and HTTPS policy.
- The About experience has additional responsive layout polish for Windows and Linux.
- All advertised desktop locales are checked against canonical reference-UI key parity in CI.
- Completion dictionaries cover the previously incomplete Czech, Slovak, Hungarian, Romanian, Bulgarian, Greek, Turkish, Ukrainian, Danish, Swedish and Norwegian reference UI while the existing locale set remains available.
Quality and release safety
- Rust formatting, build and Android compile regressions discovered during development were corrected rather than bypassed.
- The release keeps the mandatory real FTP / explicit FTPS / SFTP E2E workflow.
- Windows and Linux native packaging, Android build/instrumentation, source audit and Windows hardening remain mandatory exact-head gates.
- Version tags remain immutable; v0.30.6 can be published only from the exact verified main SHA after v0.30.5 exists.
Release validation
The exact release source must pass:
- Ghost FTP quality
- Ghost FTP protocol E2E
- Ghost FTP native build for Windows and Linux
- Ghost FTP Android
- Validate Windows hardening
The canonical release workflow may publish v0.30.6 only from the exact verified main SHA and only after v0.30.5 is present.