Skip to content

app-builder 1.7.0

Choose a tag to compare

View all tags
@heetbeet heetbeet released this 27 Aug 17:20
1.7.0
8a4e694
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

app-builder 1.7.0

This is the audit-driven hardening release for the app-builder 1.x line. It turns the findings from the public 1.6.0 code audit into tested installer, publication, dependency, runtime, schema, performance, and packaging fixes.

Start with the readable change record

Download and open app-builder-1.6.0-code-audit.html for the finding-by-finding account.

The filename identifies the release that was audited. The document now preserves every original P1, P2, and P3 finding beside an Implementation summary explaining the fix shipped in 1.7.0, plus the final verification record. It is the clearest way to review what changed and why.

Highlights

  • Hardens installer upgrades, rollback, archive containment, path collisions, shell integration, and release identity.
  • Binds GitHub publication to the verified repository, commit, tag, draft state, manifest, payload, installer, and checksums.
  • Makes managed versions and the bundled 0.x bridge deterministic from committed dependency locks.
  • Tightens Python runtime selection, extraction, architecture checks, and Pydantic/schema compatibility.
  • Aligns the canonical schema, generated schema, templates, output contracts, and publication assets.
  • Removes major payload-selection performance bottlenecks and keeps clean builds quieter and easier to diagnose.
  • Packages the full HTML help and audit documentation with the installable application.
  • Standardizes new projects on app_builder.yaml; ambiguous legacy config names are rejected instead of silently shadowed.

Verification

The remediation branches passed Black, MyPy, Python 3.11, 3.12, and 3.13, plus the Windows installer workflow. The final 1.7.0 installer was also built from the merged 1.x head, installed locally over the previous version, and verified for CLI version, manifest provenance, packaged help, packaged audit documentation, and Windows Installed Apps registration.

For normal installation, download app-builder-1.7.0-installer.exe. The payload, manifest, and checksum inventory are included for inspection and automated use.

Assets 7
Loading