paolostivanin/OTPClient v5.0.0-beta1

on GitHub

Changes since alpha3

New features

• Token grouping — organize tokens into groups (e.g. "Work", "Personal") with a header bar dropdown for filtering, group:/# search prefix for keyboard-driven filtering, right-click context menu assignment, and group fields in the edit/add dialogs. Groups are implicit (created by assignment, removed when empty) and preserved during Aegis/AuthPro/2FAS import/export.
• Updated Welcome dialog with pages covering token groups, keyboard shortcuts, and search.
• Updated What's New dialog covering the GTK4 redesign, token groups, keyboard shortcuts, desktop search, and other improvements.

Bug fixes

• Fix allocator mismatch in settings dialog (gcry_free() instead of free() for json_dumps() output).
• Fix OTP token memory leaks in CLI after printing.
• Fix missing cotp error checks and secret field validation in CLI.
• Fix right-click row selection — no longer requires a prior left-click.
• Fix Enter key not submitting the New Group dialog.
• Fix search auto-select silently copying the OTP to clipboard. Now auto-select only highlights the row; pressing Enter copies the OTP and closes the search bar.
• Fix notification spam: suppress selection-change side effects during store rebuilds and when closing the search bar. Use stable notification IDs so repeated notifications replace each other.
• Fix group dropdown not being restored on startup.
• Fix GtkPopoverMenu active-state warning when showing right-click menus.
• Fix NULL dereferences in Aegis, 2FAS, AuthPro, and otpauth URI importers when processing malformed input.
• Fix resource leaks in GtkFileDialog, FreeOTP export, AuthPro plain backup import, and db-common.
• Fix allocator mismatch in CLI (gcry_free for json_dumps output).
• Fix D-Bus race condition in search provider (use synchronous notification call).
• Fix stale error message in Aegis plain-text import.
• Fix NULL guard for algo/type fields in 2FAS export.
• Fix base64 decoded size validation and memory leak in 2FAS decrypt_data() early-return path.

Other

• Remove obsolete Flatpak build scripts.
• Update GTK+/GTK3 references to GTK4 throughout.
• Update README and SECURITY docs.

sha256: fd3bd60889b315f0da7260daa3448b75f50a815a9fbf838c25415aae85e58cea