Skip to content

v2.0.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Aug 22:59
· 17 commits to main since this release
v2.0.1
This tag was signed with the committer’s verified signature.
FilipNowakowicz Filip Nowakowicz
SSH Key Fingerprint: D83lNcEm2HON3rLD08fONTkBk5kpUdTW8pCTJxIe7cg
Verified
Learn about vigilant mode.
82ee604
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's new

v2.0.1 is a focused reliability and security update for automatic Profil Zaufany authentication. It preserves the working v2.0.0 login flow, mObywatel support, Google Messages integration, localization, and existing release behavior.

Highlights

  • Makes OTP discovery resilient when PZePUAP timestamps a valid SMS shortly before the challenge form appears, while retaining preexisting-code and maximum-age protections.
  • Interprets PZePUAP timestamps explicitly in the Europe/Warsaw timezone, independent of the computer's configured timezone.
  • Safely cleans up the previous OS-keyring credential after switching PZ usernames without risking loss of the new or old credential during a failed save.
  • Waits for an attached Chrome CDP endpoint to actually stop before considering browser shutdown complete.
  • Rejects retained Google Messages tabs that have navigated away from the exact HTTPS Messages origin.
  • Avoids guessing when multiple Profil Zaufany chooser controls are equally plausible.
  • Strengthens packaged secure-keyring validation without writing test credentials.
  • Allows Reset Account to clear local state when the OS keyring is unavailable and reports an accurate warning.
  • Restricts the persistent Chrome profile to owner-only permissions on POSIX and binds remote debugging explicitly to loopback.

Validation

  • 190 automated tests passed on Python 3.9, 3.11, and 3.13.
  • Clean Linux PyInstaller build passed.
  • Packaged TLS and keyring smoke tests passed locally.
  • Release artifacts are built separately for Windows, macOS, and Linux by the tag-triggered workflow.

Live verification recommended

After upgrading, verify one complete automatic Profil Zaufany login and, if applicable, Google Messages pairing/profile reuse on the target desktop platform.

Assets 5
Loading