Nova Download Manager v2.4.48-alpha

Full Changelog: v2.4.47-alpha...v2.4.48-alpha

Nova Download Manager v2.4.47-alpha

Full Changelog: v2.4.46-alpha...v2.4.47-alpha

Nova Download Manager v2.4.46-alpha

Full Changelog: v2.4.45-alpha...v2.4.46-alpha

Nova Download Manager v2.4.45-alpha

What's Changed

• deps(ui)(deps-dev): bump @types/react-dom from 19.2.4 to 19.2.5 in the react-ecosystem group by @dependabot[bot] in #121
• deps(ui)(deps): bump lucide-react from 1.33.0 to 1.34.0 in the ui-library group by @dependabot[bot] in #122
• deps(ui)(deps-dev): bump @vitejs/plugin-react from 6.1.0 to 6.1.1 in the build-tooling group by @dependabot[bot] in #123
• deps(ui)(deps-dev): bump @typescript-eslint/eslint-plugin from 8.67.0 to 8.68.0 by @dependabot[bot] in #128
• deps(ui)(deps-dev): bump @types/node from 26.2.0 to 26.4.0 by @dependabot[bot] in #126
• deps(ui)(deps-dev): bump the testing group across 1 directory with 2 updates by @dependabot[bot] in #125
• deps(ui)(deps-dev): bump @typescript-eslint/parser from 8.67.0 to 8.68.0 by @dependabot[bot] in #129
• deps(ui)(deps-dev): bump rollup from 4.62.5 to 4.63.0 by @dependabot[bot] in #127
• deps(ui)(deps-dev): bump the lint-format group across 1 directory with 2 updates by @dependabot[bot] in #124

Full Changelog: v2.4.43-alpha...v2.4.45-alpha

Nova Download Manager v2.4.43-alpha

Full Changelog: v2.4.42-alpha...v2.4.43-alpha

NOVA Download Manager v2.4.42-alpha

NOVA Download Manager v2.4.42-alpha

Reliable browser-overlay routing and durable Android task visibility

This alpha repairs the browser extension's floating video workflow, broadens verified FFmpeg nightly recognition for a real observed build form, and makes Android direct-download tasks persistently visible through a NOVA-owned local task catalog.

Browser extension

The floating video panel no longer relies on the retired generic yt-dlp probe that could collapse distinct failure states into “No downloadable formats found.” A user-initiated panel action now reaches the same authenticated, daemon-backed /v1/analyze contract used by the popup. Results use bounded diagnostic categories, existing localized feedback, and the stable browser-page route.

The overlay is strictly bound to the content script's trusted HTTP(S) tab. It cannot nominate another tab or an arbitrary page-provided URL. A format click submits only a format identifier; the background analyses the current stable page again and verifies that the identifier remains available before handing the request to NOVA. Transient delivery URLs, request headers, cookies, tokens, and raw extractor output are not accepted from the overlay.

External tools

FFmpeg health validation now recognises the legitimate dated nightly form N-<build>-g<commit>-<YYYYMMDD> in addition to the already supported undated identifier. The parser still requires decimal build and date components plus a hexadecimal commit, and still rejects malformed executable banners. Verified source, checksum, staged executable health, and atomic installation controls remain unchanged.

Android

Android retains ordinary HTTP(S) downloads through the platform DownloadManager, including the native progress/completion notification lifecycle. NOVA now owns a durable local task catalog above that system engine: it persists only system task IDs and safe display names, restores visible tasks after the activity is recreated, and reconciles them from the declared user-initiated-transfer lifecycle service. Source URLs, query strings, request headers, cookies, and tokens are not written to that catalog.

Validation

The changes passed focused overlay-router tests, full TypeScript and ESLint checks, the complete browser-extension test suite and package build, root application tests and production build, Android debug unit tests/build, Android locale validation for all 132 maintained locales, Rust formatting, strict Clippy, and the Rust library test suite.

Important scope and safety boundaries

This is an alpha release. The Android task catalog is not a packaged shared Rust core or independent multi-connection/segmented HTTP engine. It supports ordinary HTTP(S) downloads through Android's system engine and does not guarantee that every embedded player or third-party site exposes a downloadable file.

NOVA does not remove DRM, bypass access controls, account requirements, CAPTCHAs, PO tokens, regional restrictions, or other service protections. It does not extract, export, or manufacture cookies, credentials, signed URL tokens, or protected delivery URLs.

NOVA Download Manager v2.4.41-alpha

NOVA Download Manager v2.4.41-alpha

Release focus

This bounded alpha release restores green Android and CodeQL validation, fixes the reported desktop destination and FFmpeg health-check failures, removes sensitive signed-link data from application logs, makes browser-extension reload diagnostics quieter and safer, and introduces a functional Android direct-download foundation.

Fixed

• CI health: Android release-signing validation is now deferred until a release Gradle task is actually requested. Debug-only Android foundation and CodeQL Java/Kotlin work no longer require release secrets, while the release pipeline retains explicit secret, APK-presence, and apksigner verification gates. The two affected workflows now use android-actions/setup-android@v4.
• Destination collisions: NOVA now identifies a selected output directory, or a file located where an output directory is required, before a transfer starts. It provides a clear corrective error rather than the generic Windows OS error 183. Existing files and folders are never overwritten or reinterpreted.
• Safe logs: Download-task logs contain only the HTTP(S) origin plus a bounded error message. Paths, signed query parameters, fragments, and embedded URL credentials are excluded from exported application logs. Expected aborted readiness requests no longer add misleading transient-error warnings.
• FFmpeg health checks: Verified external-tool checks recognise strict official FFmpeg nightly identifiers such as N-<build>-g<commit> and retain rejection of malformed/non-numeric output.
• Extension lifecycle: Content scripts clean up runtime listeners, DOM observers, timers, and the floating panel when an extension update invalidates their context. Stale runtime calls fail safely. The exact browser-generated ResizeObserver loop diagnostic is suppressed at NOVA's diagnostic boundary, while unrelated errors continue to be reported.

Added

• Android direct-download intake: Enter an ordinary HTTP(S) link directly in NOVA Android, review shared/browser-captured links, and submit them to Android's platform download manager. NOVA stores files under the user-visible Downloads/NOVA directory and reflects queued, active, paused, completed, and failed task state in the app.
• Live download notification handling: Accepted Android downloads use the platform’s visible progress and completion notifications. On Android 13+, NOVA asks for notification permission only after the user presses the download action. Declining permission does not pretend that a transfer failed; the task remains observable in NOVA.

Validation

The release candidate passed the root TypeScript/ESLint suite and 519 frontend tests, the browser-extension TypeScript/ESLint suite and 775 tests, Rust formatting, strict Clippy, and 748 passed / 1 ignored library tests. Android debug unit tests and APK assembly passed without release-signing variables; all 132 Android locale resources were validated. The preceding CI repair commit completed its primary CI, Android foundation, and CodeQL workflows successfully.

Scope and safety

This alpha's Android engine is the system DownloadManager for normal HTTP(S) files. It is not yet a packaged shared Rust segmented engine and does not claim media-site extraction, DRM disabling, cookie/token export, CAPTCHA or PO-token bypass, or access-control circumvention. Theme choice, fully localized language override, a dedicated permission centre, and durable configurable scheduling remain separate, testable Android milestones.

As an alpha release, validate important downloads with checksums when publishers provide them. Third-party services and media websites can change their behavior at any time; NOVA does not guarantee permanent compatibility.

NOVA Download Manager v2.4.40-alpha

NOVA Download Manager v2.4.40-alpha

More reliable managed YouTube flow

This alpha hardens the browser-extension route for video pages that need NOVA's managed media engine. The compact YouTube resolve action is now single-flight: rapid repeated clicks start only one analysis request, expose an accessible busy state, and safely restore the action when the request completes.

NOVA now requires a stable YouTube page URL for the managed route. A transient googlevideo or videoplayback delivery URL with no associated watch, Shorts, live, embed, short-link, or playlist page is not replayed through yt-dlp and is never sent to the ordinary browser downloader. The compact popup shows its localized failure status directly instead of hiding it behind an unopened candidate dropdown.

Truthful analysis and safer media handoff

The local daemon distinguishes unavailable, timed-out, failed, oversized, and invalid yt-dlp probe output through a small bounded analysis category. Raw process diagnostics and potentially sensitive URL context remain local. The browser extension keeps its user-facing feedback localized and does not treat an empty format catalog as successful quality resolution.

An explicit protected-media marker now travels from the managed-analysis result to the selected-format request. The daemon rejects a request carrying that marker before task creation. This strengthens the UI-to-daemon safety boundary and prevents a detected protected result from being presented as a normal downloadable format.

NOVA does not disable or bypass DRM, content protections, cookies, PO tokens, CAPTCHAs, account requirements, regional availability, or other platform access controls. Users remain responsible for ensuring they have the required rights and platform authorization for any content they download.

Compact popup usability

Status notices in the extension popup now use a polite live region and are visible even when a failure occurs before a dropdown is opened. The popup treats scan, send, and analysis operations as one busy state so conflicting actions cannot overlap in a constrained browser-action surface.

Validation

• The full browser-extension suite passed: 72 test files, 772 tests.
• The focused PopupApp regression suite passed: 8 tests, including duplicate resolve prevention, stable-page enforcement, visible compact feedback, and protected-media rejection.
• Root TypeScript, ESLint, Vitest, production build, Rust formatting, strict Clippy, and Rust library tests passed locally: 743 passed, 1 ignored.
• CI will rebuild all desktop platform assets, browser-extension packages, and the signed Android release APK for this tag.

Scope

This is a bounded reliability and UX release. The desktop daemon remains the authority for external-tool health, supported site behavior, task acceptance, retries, FFmpeg merges, and download execution. Because third-party services change independently, this alpha does not guarantee permanent compatibility with every site or format.

NOVA Download Manager v2.4.39-alpha

NOVA Download Manager v2.4.39-alpha

Android startup and release delivery

This alpha reduces Android cold-start risk by removing an unused custom Application / WorkManager startup path and its stale shrinker rules. NOVA now ships an Android release APK only: the CI pipeline runs debug JVM tests as a development check, builds a signed app-release.apk, verifies it with apksigner, and stages that release variant as the Android asset. Release key material is supplied only by GitHub Actions secrets and is never committed.

Users who installed a previous runner-signed debug APK may need to uninstall that older APK before installing this newly release-signed alpha. Future releases signed with the same release key can update this alpha normally.

Lightweight integrated Android browser

• Added an HTTP(S)-only embedded browser foundation for opening pages and explicitly reviewing normal download callbacks in NOVA.
• Rejected local-file, intent:, and javascript: navigations as well as credential-bearing addresses; enabled Android Safe Browsing and disabled multiple-window popups.
• Added a small opt-out clean-browsing blocklist for common advertising and tracker hosts, confined to the NOVA browser only.
• Recreates a terminated WebView renderer safely instead of allowing the host application to exit.
• Redacts query strings and fragments when a captured link is displayed, while retaining the original link value internally for the future transfer handoff.

Controlled browser customization and privacy foundations

• Added locally stored user scripts, disabled by default. A script is limited to 64 KB, explicitly matched to an HTTPS host, and has no NOVA-to-page JavaScript bridge, Android API bridge, cookie access, or cross-tab privilege.
• Added locally stored DNS privacy profiles for system default, Cloudflare, Google, Quad9, AdGuard, and validated custom DNS-over-HTTPS endpoints. These are preferences only in this alpha; they do not change device DNS, create a VPN, or claim to route WebView traffic.
• Added Android resource generation and validation tied to NOVA’s maintained language catalog: 132 language resources and 49 Android-visible strings are enforced by tooling, including Android resource-qualified RTL support.

Validation

• Android locale generator freshness and coverage validation passed: 132 locales, 49 visible strings each.
• Android JVM tests and minified, signed assembleRelease passed locally.
• The produced APK passed apksigner verify using APK Signature Scheme v2 and contains the ARM64 NOVA mobile FFI library.
• The software-rendered emulator could not finish booting in this environment without hardware acceleration, so this release does not claim physical-device or booted-emulator launch validation.

Important scope and safety boundaries

This is an alpha foundation, not a claim that all Android downloader features of any third-party product have been cloned. The shared Rust transfer bridge is packaged but is not yet connected to the Compose intake path, so NOVA reports unavailable transfer execution rather than falsely claiming a download began. NOVA does not disable or bypass DRM, content protections, access controls, account requirements, or regional availability. It does not collect, manufacture, or export cookies or credentials.

Nova Download Manager v2.4.38-alpha

NOVA Download Manager v2.4.38-alpha

v2.4.38-alpha is a focused reliability and responsive-layout update for managed external media tools, the desktop media workflow, and constrained application windows.

Fixed

• NOVA no longer requests GitHub release metadata every time External Tools is displayed or refreshed. Explicit update/install operations use a bounded cache, which prevents routine Settings activity from consuming the public GitHub API quota.
• External-tool provider failures are now reported as an indeterminate result instead of being presented as “up to date.” When a verified candidate cannot be resolved, the update or install response retains the provider, compatibility, or rate-limit diagnostic.
• External Tools serializes conflicting actions for each individual tool. While an install, update, discovery, health check, custom-path change, or uninstall is active, competing actions are disabled and the tool card exposes an accessible busy state.
• The verified installer now uses GitHub's current public REST API media-type and version headers. It continues to require a trusted HTTPS release asset, a published SHA-256 digest, staged executable validation, atomic installation, registry persistence, and post-install health verification.

Responsive UI improvements

• Shared dialogs are constrained to the current visible viewport, with a scrollable content region and resize-safe drag boundaries.
• Settings changes from a fixed vertical tab rail into a horizontally scrollable tab row on narrow windows, so tab selection and configuration content remain reachable.
• The Media Download workspace now stacks its former fixed 55/45 desktop split on narrow windows, while keeping independently scrollable two-column panels at larger widths. Action rows and output-name presets wrap instead of overflowing.
• The previous global CSS rule that forced every button to remain unshrinkable and non-wrapping has been removed. Controls can now adapt to their available container while icon-only controls retain intentional fixed sizing.

Verification

The focused External Tools UI regression suite covers the in-flight busy state, prevention of conflicting actions, and truthful provider-error feedback. Native external-tool tests cover cache expiry, artifact-host verification, archive safety, and executable discovery. The isolated live yt-dlp acceptance check completed an official release lookup, download, SHA-256 verification, executable health validation, registry update, and cleanup in a temporary directory.

Important limitations

This is an alpha release intended for early validation. NOVA does not bypass DRM, account or subscription restrictions, regional availability, platform access controls, or content permissions. The external provider and the local yt-dlp/FFmpeg runtime remain responsible for current extractor compatibility, available formats, media merging, and actual transfer execution. Use the application only for content you are authorized to download.

No physical Android device or emulator runtime validation is claimed unless a subsequent test is run on an actual device or emulator.