Skip to content

DiskPilot 0.4.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Nov 22:44
· 153 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.4.1
8975195

DiskPilot 0.4.1 is a security release. It tightens what the assistant can see, which programs DiskPilot will run, and the checks made just before anything is removed. There are no new features, and updating is recommended.

Download

DiskPilot.dmg. One universal app for Apple silicon and Intel Macs, macOS 11 or later.

To update, quit DiskPilot, then drag the new version into Applications and replace the old one. Your history, settings and saved results are kept. If macOS says it cannot verify the developer, open System Settings > Privacy & Security and select Open Anyway once.

What's changed

Privacy

  • The assistant could see the names of files inside Mail, Messages, iCloud Drive and other private folders when a folder was named with different capitalization, such as ~/library/mail. It now sees those folders only as a single total, however they are spelled.
  • The assistant treats file, folder, app and image names as data. Instructions written into a name are not followed, and the only commands it suggests are the ones DiskPilot provides.
  • Docker's container details hide the values of environment variables, which often hold passwords and API keys. Variable names are still shown.

Programs DiskPilot runs

  • DiskPilot only runs a docker program signed with an Apple Developer ID, such as Docker Desktop's or OrbStack's, or one installed by Homebrew. A docker file placed in a folder like ~/.docker/bin by another program is ignored, so it can never run with the access you gave DiskPilot.
  • Xcode's simulator tools now time out instead of stalling Developer Tools when the simulator service hangs.

Safer cleanup

  • When you remove duplicates, DiskPilot checks again, just before moving each extra copy, that the copy you are keeping is still there and identical. If it changed or is gone, the extra copy stays.
  • Empty Trash removes only the exact items you reviewed. If a different item has taken a reviewed item's name since then, it is left in the Trash.
  • Permanent delete refuses a folder that contains another mounted disk, such as a disk image, instead of erasing that disk's contents too.
  • Two cleanup previews made at the same moment can no longer be mixed up.

Fixes

  • Open on GitHub in Settings works again.

This release is built from the tagged source by the Release workflow on GitHub Actions. It now also carries a signed record of the commit and workflow that built it, and published release files can no longer be replaced.

Verify the download

SHA-256 of DiskPilot.dmg:

a1c302a321b5c1d21deb48af5cd810f7cf983f4b703d78574a51685a1bbb0c26

Check it with shasum -a 256 DiskPilot.dmg.

To confirm this DMG was built by this repository's release workflow:

gh attestation verify DiskPilot.dmg -R Devanshgoel-123/diskpilot
Assets 5
Loading