nicholasraimbault/silvervine v2.1.1

2.1.1 - 2026-08-02

on GitHub

Release Notes

Changed

• Reduced multi-browser doctor --media-stack latency with bounded concurrent
  browser/host evidence collection and one shared read-only current-CDM
  integrity validation, while preserving deterministic output and synchronous
  resource-pressure fallbacks.

Fixed

• Restricted macOS browser auto-discovery to patchable
  <app> Framework.framework/Versions/<version>/Libraries layouts so setup no
  longer attempts to patch unrelated Qt, Python, or application frameworks.

• Corrected legacy cleanup reporting so cancelled, failed, no-op, and
  dangling-symlink elevated removals remain visible as skipped instead of
  being reported as removed.

Security

• Added pinned Widevine CRX3 developer-signature verification before any CDM
  archive member can enter the executable cache; the signed component ID and
  ZIP body must also match the HTTPS manifest's SHA-512.
• Pinned default manifest requests and redirects to exact Mozilla/GitHub HTTPS
  origins, constrained explicit custom-manifest redirects to the same origin,
  restricted manifest-carried CRX URLs to exact Google Widevine CDN origins,
  rejected explicit local/private address literals, and disabled CRX redirects.
• Preflighted ZIP central-directory entry counts before eager parser
  allocation, validated every entry before authenticated payload hashing, and
  rejected duplicate normalized extraction paths plus per-entry/aggregate
  expansion-limit violations.
• Reduced release automation privilege, checksum-pinned its cargo-dist
  installer, pinned third-party actions by commit, required exact-commit CI,
  MSRV, dependency-policy, and shipping-target build gates, restricted matching
  v* tag creation to the maintainer, and made created release tags immutable.

Install silvervine 2.1.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/nicholasraimbault/silvervine/releases/download/v2.1.1/silvervine-installer.sh | sh

Download silvervine 2.1.1