jlobue10/rEFInd_GUI v3.2.0 on GitHub

Theme support

7 bundled rEFInd themes (BlackCatMuzzle, Matrix-rEFInd, rEFInd-fallout, rEFInd-glassy, rEFInd-mountain, Starwars-rEFInd, wave) — all credit to the original theme authors; see the README Themes section for per-theme credits, upstream links, and licenses
Theme picker in the GUI (None / any theme / Random), with an Install Themes button that copies the theme collection to the ESP
Per-boot theme randomizer service (Linux): picks a random valid theme each boot
Robust design: refind.conf carries one stable include themes/active_theme.conf line; switching or randomizing themes swaps only that file — the main config is never rewritten at boot. Theme settings intentionally supersede the GUI settings above them.

Linux installers now verify the new rEFInd boot entry (label, loader, ESP PARTUUID) before deactivating Windows Boot Manager, and fail closed with honest error reporting
Config and image installs to the ESP are staged and published config-last, preserving the previous config for rollback
Windows installer staging moved to a protected %SystemRoot%\Temp workspace with Administrators/SYSTEM-only ACLs; downloads are integrity-checked before touching the ESP; failed driver downloads no longer destroy known-good drivers
Windows system tools (mountvol, bcdedit, PowerShell) are invoked by absolute system paths
Exact SteamOS firmware entry matching (device path + BootOrder) replaces loose label matching
Application updates can now seed newly bundled assets on Windows without overwriting user files

Note: this release includes rebuilt GUI binaries — required, since the privileged install scripts are integrity-pinned to the GUI.