macOS: signed with an Apple Developer ID and notarized
Sokuji for macOS is now signed with an Apple Developer ID and notarized by Apple. A downloaded installer opens like any other Mac app — no more sudo xattr -d com.apple.quarantine.
- Updating from 0.46.4: the usual in-app update.
- Updating from 0.46.3 or earlier: the in-app update downloads but fails the signature check. Download the
Sokuji-0.46.5-<arch>.pkg from this page once and run it; automatic updates work again from then on.
- On the first launch after the update, macOS asks for microphone access again, then for the "sokuji Safe Storage" item in your keychain (enter your login password and choose "Always Allow"). The new signature counts as a new app to macOS; both prompts appear once.
Windows: updates now go through Squirrel
Updates are installed by Squirrel's own Update.exe from the release feed. This fixes the failed update some users hit when updating to 0.46.4: the installer crashed while the old copy was still closing, and Sokuji was gone. (#657)
- One-time step for this update only: copies of 0.46.4 and earlier still use the old updater once. Safest: download
Sokuji-0.46.5.Setup.exe from this page, quit Sokuji completely, then run the installer. If you use the in-app update instead and Sokuji is missing afterwards, reinstall it from the website; your settings and sign-in are kept in %AppData%\Sokuji.
Model import
- The Import model dialog can download from hf-mirror.com for users who cannot reach huggingface.co. (#667, #669 — thanks to @Goldloli)
Linux and the browser extension are otherwise unchanged.
Under the hood
- macOS builds are signed and notarized only on
main and release tags, from a protected CI environment; pull-request builds stay ad-hoc signed. (#662)
- Shared Soniox modules are kept DOM-free for the upcoming mobile app, and the
mobile branch builds in CI. (#658, #661)
Full Changelog: v0.46.4...v0.46.5
All commits since v0.46.4
- chore(release): v0.46.5
- Merge pull request #662 from kizuna-ai-lab/feat/macos-developer-id
- Merge pull request #669 from kizuna-ai-lab/fix/import-source-active-state
- fix(models): show the source the import commands actually use as picked
- Merge pull request #667 from Goldloli/feat/import-dialog-mirror-source
- test(models): cover the retained mirror selection in the disabled-state test
- fix(models): reset the copy state and gate the mirror option
- fix(local-inference): derive wget --cut-dirs from the file URL
- feat(local-inference): offer hf-mirror.com as the import dialog's download source
- ci(macos): bound the check and verify steps that wait on Apple
- docs(macos): pull-request Mac builds are ad-hoc signed, not unsigned
- ci(macos): sign only for main and release tags, from an environment
- test(macos): require @electron/notarize 3.1.2, the first with the retry fix
- build(macos): give electron-builder a notarize that retries stapling
- ci(macos): retry stapler validate's online ticket lookup
- feat(macos): sign with Developer ID and notarize; retire the bridge hook
- Merge pull request #661 from kizuna-ai-lab/ci/mobile-branch-triggers
- Merge pull request #658 from kizuna-ai-lab/feat/mobile-shared-seams
- test(mobile-shared): count destructured and imported names; report unparseable files
- test(mobile-shared): check every browser global on the syntax tree
- test(mobile-shared): check window reads against their scope
- ci: fall back to the backend the code falls back to
- test(mobile-shared): parse sources with TypeScript; flag Node built-ins
- refactor(soniox): keep the model name in sttStream.ts, not a file of its own
- Merge pull request #657 from kizuna-ai-lab/feat/windows-squirrel-updates
- ci: build and test the mobile integration branch like main
- fix(windows): seventh review pass — no resurrected download, a held quit is reported, unknown versions ask Squirrel
- fix(windows): sixth review pass — one failure path for the fallback download, first-run refusal, shared wait bounds
- fix(windows): fifth review pass — manifest name sanitised, late Squirrel completion recorded, install path pinned across the session end
- fix(windows): fourth review pass — download timeout, requested-version memory, no guessed installer name, self-releasing install flag
- fix(windows): third review pass — captured download path, loopback-only feed override, version-aware applied memory
- fix(windows): escape wildcards in the install-root pattern; read the manifest entry at download start
- fix(windows): review fixes for the Squirrel update — fail-closed fallback, applied-package memory, indeterminate progress
- feat(windows): update through Squirrel's own Update.exe from a RELEASES feed
- fix(windows): verify a downloaded installer, and wait for the app to exit before running it
- test(mobile-shared): harden the Metro-compatibility audit; anchor the mobile/ exclude
- refactor(soniox): seams for the mobile app's shared code, pinned by a Metro-compatibility audit
- test(soniox): guard the wire modules as DOM-free; fence mobile/ off the root suite
