What's Changed
- feat(settings): keep the settings inside a portable suite by @EternalShade3D in #524
- Check for updates: look past a feed that is behind GitHub by @XianZheYang in #377
- fix(windows): install version-folder wrapped portable ZIP releases by @iamhasantan in #756
- fix: document install permissions and keep recovery backups (SonarCloud) by @dylanmtaylor in #823
- fix: put NOSONAR markers on the flagged lines (SonarCloud follow-up) by @dylanmtaylor in #824
- packaging: [[ ]] tests, named positional parameters and explicit returns (SonarCloud S7688, S7679, S7682) by @dylanmtaylor in #808
- Packaging: pin the signing client and appimagetool, and check their hashes by @aiongg in #688
- Linux and FreeBSD install: run pkexec and package tools from the system directories by @aiongg in #689
- ci(sonar): stop cancelling main-branch runs so coverage is published by @dylanmtaylor in #837
- Refactor the complex fns, expand wildcard imports, tidy closures and lifetimes (SonarCloud) by @dylanmtaylor in #836
- chore: resolve SonarCloud maintainability issues by @dylanmtaylor in #844
- ci(deps): bump Swatinem/rust-cache from 2.9.2 to 2.9.3 in the actions group by @dependabot[bot] in #818
- test: avoid flaky Windows catalog signer comparison by @justinjohn0306 in #814
- Resolve Unix restart test helpers through PATH by @IanHollow in #424
- refactor(native): host() with split_once, and a test by @smittie2000 in #785
- refactor(ui): button and button_width measure the label one way by @smittie2000 in #788
- fix(native): gate remote feed overrides to dev builds by @justinjohn0306 in #817
- FreeBSD: package the aarch64 cross build (craft-common-actions#39) by @zuujiscom in #795
- portable: a network-share install matches its canonical path by @smittie2000 in #821
- Tests: retry hdiutil create in the macOS checks, and say what it said by @XianZheYang in #442
- macOS: quit through terminate: so quitting doesn't crash (#333) by @jmacek in #335
- fix(web): read ?lang= from the query, not the #fragment too by @smittie2000 in #786
- refactor(core): one truncate helper for release and feed text by @smittie2000 in #783
- macOS: skip wgpu's indirect-call validation on Intel Macs by @dotCooCoo in #569
- xtask local: order pre-releases by semver (rc.10 after rc.9) by @smittie2000 in #820
- Settings: list the languages alphabetically by their own name by @nikolainyegaard in #720
- Windows: keep pinned taskbar icons across updates by @gossotjeanbaptiste in #813
- An argument that is not UTF-8 is ignored, not the end of the start-up by @Hamza0101 in #730
- Title bar: maximized, the close button takes the screen's corner by @XianZheYang in #375
- Chinese: look for a hand-installed MiSans too, in the user's font folders by @XianZheYang in #438
- refactor(core): one table of bundled app icons by @smittie2000 in #789
- Backend: Clear busy state when a worker panics (#780) by @SusieeTheLinuxUser in #845
- fix(ui): ask wgpu for no more than the GPU offers by @nictoumayan in #458
- fix(windows): launch Explorer and Task List by absolute path by @justinjohn0306 in #815
- Say once, the first time, that closing the window keeps the launcher in the tray by @XianZheYang in #376
- Tests: pick Simplified Chinese through AccessKit now that it sorts last (#720) by @echelon in #849
- Tests: retry the version probe of a script a test just wrote (ETXTBSY) by @echelon in #848
- Tests: start the tray-sleep clock before the waker thread by @echelon in #850
- security: harden archive extraction, layout normalization, and file enumeration (F-001, F-002, F-012, F-013, F-014) by @dylanmtaylor in #866
- security: confine release HTML URLs and sanitize browser open links (F-004, F-007) by @dylanmtaylor in #864
- security: bound decoded HTTP responses and screenshot decoding (F-006, F-008, F-009) by @dylanmtaylor in #865
- security: bind artifact URL identity in install and self-update (F-010, F-011, F-015) by @dylanmtaylor in #867
- security: bypass proxy for loopback and suppress HTTP wire credential logging (F-003, F-005) by @dylanmtaylor in #868
- fix(security): implement mutual challenge-response for single-instance IPC by @dylanmtaylor in #869
- fix(security): enforce bounded reads, deadlines, and terminal escaping in local mirror by @dylanmtaylor in #870
New Contributors
- @EternalShade3D made their first contribution in #524
- @iamhasantan made their first contribution in #756
- @aiongg made their first contribution in #688
- @dependabot[bot] made their first contribution in #818
- @justinjohn0306 made their first contribution in #814
- @IanHollow made their first contribution in #424
- @smittie2000 made their first contribution in #785
- @zuujiscom made their first contribution in #795
- @jmacek made their first contribution in #335
- @nikolainyegaard made their first contribution in #720
- @gossotjeanbaptiste made their first contribution in #813
- @Hamza0101 made their first contribution in #730
- @SusieeTheLinuxUser made their first contribution in #845
- @nictoumayan made their first contribution in #458
Full Changelog: v0.7.0...v0.8.1