Skip to content

v2.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Aug 22:30
· 21 commits to main since this release
v2.0.0
This tag was signed with the committer’s verified signature.
FilipNowakowicz Filip Nowakowicz
SSH Key Fingerprint: D83lNcEm2HON3rLD08fONTkBk5kpUdTW8pCTJxIe7cg
Verified
Learn about vigilant mode.
7644573
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's new

Automatic Profil Zaufany login

  • The notifier can now refresh an expired session by signing in through Profil Zaufany instead of requiring a fresh QR scan each time.
  • Choose Profil Zaufany in setup or Settings, save the username and password, and pair Google Messages for Web so the app can collect the fresh PZePUAP SMS code during login.
  • Passwords stay in the operating system credential store. Passwords and one-time codes are not written to config, logs, notifications, command lines, or control files.
  • Authentication is bounded, target-scoped, and fails closed if the browser reaches an unexpected origin or ambiguous page. mObywatel QR login remains available.

Safer, more resilient browser automation

  • Browser work is pinned to the exact tab created for the operation instead of falling back to another open tab.
  • Login and rescheduling clicks now reject hidden, ambiguous, unrelated, or sensitive controls and keep diagnostics redacted.
  • Automatic relogin uses persisted exponential backoff, while manual retry remains available. A deliberately confirmed restart can cooperatively replace a stuck relogin without trusting a stale PID or starting a second browser too early.
  • Cross-platform process checks, restart tokens, lock ownership, and concurrent state writes have been hardened.

Search and notification improvements

  • Added an optional earliest acceptable exam date, enforced both in the API request and against returned slots.
  • The existing-booking reminder can now be dismissed and remains separate from account configuration.
  • ntfy test pushes and runtime notifications now report real delivery outcomes instead of silently treating failures as success.

Cross-platform security and packaging

  • HTTPS now uses verified native OS trust with a verified certifi fallback only for certificate-chain discovery failures; explicit CA configuration remains authoritative and fail-closed.
  • CI now discovers the full test suite and systemd units support common portable uv and Nix/NixOS paths.
  • Linux, macOS, and Windows packages are built with verified HTTPS and credential-store discovery smoke tests.
Assets 5
Loading