- Add configurable startup view
- Fix dragging selected notes to notebooks
- Notebooks and notes now use natural numeric sorting in Alphabetical and Title modes, so classes such as 5g through 12g appear in the expected order. Manual, Custom, Created, and Modified sorting are unchanged.
- Add per-notebook icons with built-in choices, custom images (recommended square 1:1 aspect ratio), and WebDAV synchronization
- Notebooks: icon assignments now sync across Windows, macOS, Linux, iOS, and Android by storing portable forward-slash paths; existing Windows backslash mappings are normalized automatically. (issue #238)
- Desktop: show the current note's full disk path with a native copy button in Note Info, and remove its duplicate Snapshots section (snapshots remain in Version History)
- Fix macOS traffic lights after window state changes
- Linux: remove the white flash that appeared before the saved theme loaded at startup (issue #195)
- Mobile: selecting a heading in Outline now closes the panel and scrolls the heading into view (issue #109)
- Editor: bullet lists and task lists can now be nested inside each other, while ordered sublists stay ordered (issue #39)
- Editor: returning to a recently viewed note now restores its scroll position in both rich and Markdown source mode (issue #127)
- Editor: press Ctrl+. (Cmd+. on macOS) to add a collapsible section in rich-text mode (issue #129)
- Android: Insert now includes Take Photo, which opens the camera and attaches the captured image directly to the note (issue #131)
- Android: note images now open in a full-screen viewer with pinch zoom, drag-to-pan, and double-tap zoom/reset (issue #115)
- Editor: code blocks inside collapsible sections now survive save and reload without turning
#comments into headings (issue #138)
- Editor: Markdown source mode now highlights headings, links, lists, quotes, emphasis, and code; new notes can optionally open in source mode (issue #173)
- Editor: move the open note to Trash from a labeled action at the bottom of Note Info instead of a toolbar icon. Pending edits save first; the note-list context action and Ctrl/Cmd+Shift+Delete shortcut remain available. Note Info now stays open while switching notes and closes only from its close button. (issue #177)
- Notes can now be duplicated from the note context menu. The copy keeps the original content and tags, gets a new identity and timestamps, opens immediately, and uses the next available name such as "Project copy 2." (issue #24)
- Editor: bold and nested emphasis that spans links now round-trips without writing malformed Markdown or exposing literal
**markers (issue #219)
- Editor: selecting a wiki-link autocomplete result with Enter now closes the link mark, so subsequent typing stays plain instead of extending the link.
- Themes: custom themes now derive divider and tertiary text colors from their own palette instead of falling back to light defaults. System appearance can map OS light and dark modes to any built-in or custom theme; changes apply live across windows, saved accents follow the active pair, and deleting a paired custom theme falls back safely. (community MRs !2 and !3)
- Add opt-in title bar note switcher
- Speed up note switcher and sync window scaling
- Add Maintenance tab for vault statistics and orphaned attachment cleanup
- Editor: add Clear Formatting to the right-click menu. It strips bold, italic, underline, strikethrough, highlight, and inline code from the selection, or from the whole current line when nothing is selected, and turns headings, code blocks, and quotes back into plain paragraphs. Links, wiki-links, and list/task structure are preserved. (issue #231)
- Windows: fix images disappearing after switching away from a note and returning. Image asset URLs now save as portable vault-relative paths instead of invalid
/C:/...paths, and existing broken references are repaired when loaded. Image Copy/Open actions and note-relative links and attachments now use the same cross-platform path resolver.
- Add regression coverage for Windows drive paths, UNC shares, Linux and macOS paths, note-relative assets, and vault-relative attachments.
- Update frontend and Rust dependencies to address known security advisories. Override SvelteKit's vulnerable transitive
cookierelease with the compatible patched version. Frontend and Rust dependency audits now report no known vulnerabilities.
- Security: restrict note, notebook, trash, backup, and version-history operations to their intended vault directories. Traversal attempts and paths outside those directories are now rejected.
- Security: validate version-history timestamps and paths before reading snapshots, and restrict backup restoration and deletion to validated backup files.
- Security: create application configuration files with owner-only permissions on Unix and correct permissions on existing files when they are rewritten.
- Security: remove unused filesystem-write and broad opener permissions, tighten the Content Security Policy, and limit the Tauri asset protocol to vaults opened by the user. Files outside opened vaults are no longer exposed through asset URLs, while hidden
.helixnotesattachments remain available.
- Security: restrict external file reads, exports, theme imports, image clipboard access, and file-manager actions to the active vault or paths explicitly selected or dropped by the user. Validate external URL schemes and open them without passing user input through the Windows command shell. Relative assets next to explicitly opened Markdown files remain supported.
- Security: prevent the external image proxy from reaching localhost, private networks, link-local services, non-standard ports, and cross-host redirects. DNS results are pinned to validated public addresses, responses must be images, and downloads are limited to 20 MiB.
- Accessibility: improve dialogs, menus, overlays, switches, storage choices, resize handles, drag handles, editor controls, and keyboard interactions throughout the editor, note list, sidebar, settings, vault picker, and information panel.
- Fix Graph View state updates and application layout component references so UI changes remain reactive.
- Release quality: resolve all Svelte and TypeScript diagnostics, remove Rust Clippy warnings, format the Rust sources, and add automated coverage for the security and cross-platform path changes. Add
pnpm verifyas the canonical local command for frontend checks and tests, Rust tests and lints, and a production frontend build.
- Build: update the documented and declared minimum Rust version from 1.77.2 to 1.88, matching the locked dependency graph. Tests and Clippy with warnings denied pass on Rust 1.88.
- Add scroll to change font size setting.