Mouse Control v0.9.9

Mouse Control v0.9.9

Mouse Control v0.9.9 completes the canonical full-screen product experience,
adds a conservative native-lighting foundation, and extends the hardened
release pipeline with point-in-time VirusTotal analysis of every primary
distributable.

Complete canonical TUI

• The single canonical controller now includes dedicated Lighting, Updates,
  Tools / Advanced, About, and complete Service-control pages.
• A checked-in capability inventory enforces CLI/TUI parity while preserving
  installed research and expert workflows under Tools / Advanced.
• Update checks run only after an explicit action. RPM, DEB, AppImage, and pip
  reuse the existing updater, checksum, trusted-origin, package-ownership,
  approval, and service-restoration paths. Source, unknown, package-source, and
  incompatible AppImage installs are represented honestly and cannot expose an
  unsafe update action.

Safe native-lighting architecture

• Optional per-device lighting supports multiple zones and native Off, Static,
  Breathing, and Spectrum modes, with RGB24 #RRGGBB, brightness, speed, and
  per-mode persistence vocabulary.
• Lighting failures remain independent from DPI, polling, remapping, buttons,
  battery, and service health. Volatile state is reconciled once per live
  backend and after a genuine rebind.
• Shared-device-config lighting is refused unless the exact backend proves a
  trustworthy baseline-preserving read/modify/write operation.
• Source-backed lighting protocol knowledge remains write-disabled. No newly
  sourced lighting family is claimed as physically validated, and unqualified
  lighting writes remain disabled.

Retained discovery, reliability, and supply-chain protection

• Existing Automatic Discovery, protocol knowledge, native HID++, G305,
  remapping, reconnect, notifications, service lifecycle, updater, and
  PROVEN-only hardware-write behavior are retained.
• CodeQL, OpenSSF Scorecard, dependency auditing, immutable action pins,
  least-privilege permissions, workflow-policy checks, wheel reproducibility,
  exact artifact allowlists, SHA256SUMS, CycloneDX SBOM generation, and
  keyless GitHub provenance/SBOM attestations remain release gates.
• The five primary artifacts are submitted at four per minute through the
  immutable-pinned VirusTotal action. The follow-up verifier waits for completed
  analyses, records filename, SHA-256, detection counts, and direct report links
  in these release notes, and fails the scan workflow on any malicious or
  suspicious result. VirusTotal is a point-in-time signal, not certification.

Validation boundary

The canonical TUI received user physical acceptance before this release. New
lighting families and their write behavior remain unverified on physical
hardware. Automated tests and hosted packaging checks do not broaden hardware
write authority.

Downloads

• RPM: mouse-control-0.9.9-1.fc44.noarch.rpm
• DEB: mouse-control_0.9.9_all.deb
• AppImage: Mouse-Control-0.9.9-x86_64.AppImage
• Wheel: mouse_control-0.9.9-py3-none-any.whl
• Source: mouse_control-0.9.9.tar.gz
• CycloneDX SBOM: mouse-control-0.9.9.cdx.json
• Integrity manifest: SHA256SUMS

VirusTotal analysis

VirusTotal scanned the five primary distributable artifacts. Results are a point-in-time signal, not a certification of safety.

Artifact	SHA-256	Result at scan time	Analysis
Mouse-Control-0.9.9-x86_64.AppImage	c10de7a04ce4a52906ad6732dd3ce8f307f1caef64593b878983d7176f8c1fa0	0 detections at scan time	VirusTotal analysis
mouse-control-0.9.9-1.fc44.noarch.rpm	90cf25e563d802f8d1aa647179743056916b257f2d23d3d2fbe8e5b7e180eea8	0 detections at scan time	VirusTotal analysis
mouse-control_0.9.9_all.deb	21cfdbe44f39940d836bc8cabf8a7f1457d09522f7c1121b925f7895d095fecc	0 detections at scan time	VirusTotal analysis
mouse_control-0.9.9-py3-none-any.whl	d46b115602411c4e169d81995d859d011e570ab01ca2c6120909abf9707cd859	0 detections at scan time	VirusTotal analysis
mouse_control-0.9.9.tar.gz	47a0186625fda8cc66386a21cfa818b918ba0f5b06e2a2141cbb80b388814723	0 detections at scan time	VirusTotal analysis