Skip to content

TakeBoard v0.2.0-beta.20

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Oct 05:49
· 9 commits to main since this release
v0.2.0-beta.20
fa38376

TakeBoard v0.2.0-beta.20

媒体处理与依赖安全更新。建议现有桌面测试版用户升级。

本版更新

  • 更新图片处理库 sharp 及其原生 SVG 库、文件上传解析器与构建依赖，修复本次报告的漏洞；完整 Node.js 依赖审计包含构建工具，不忽略低危告警。
  • 安装包验收执行包内 Node，检查实际加载的 Fastify、sharp、librsvg 与 multipart 解析器版本，并验证运行时启动、重启、登录偏好及退出清理。
  • 修复 Windows/Linux ARM64 的更新包匹配，六种平台与架构均覆盖真实发布文件名的回归检查。
  • 修复 Windows 回归测试对异步结果保存的错误假设；测试等待真实保存完成，不跳过生成记录、结果与资产断言。
  • 升级兼容的 Tauri 工具依赖，移除五个不再维护的间接包；完整 RustSec 审计持续报告 Linux GTK 链的两项未解决警告，不将其隐藏或宣称已修复。

下载与升级

Mac 使用 DMG，Windows 使用 EXE，Debian/Ubuntu 使用 DEB。每个平台提供 x64 与 ARM64；Apple 芯片选择 aarch64.dmg，Intel Mac 选择 x64.dmg。

先备份重要项目，退出旧版后安装新版，无需删除项目目录。安装包不包含 ComfyUI、模型或第三方节点。远程 TakeBoard 与自托管 Portal 需要分别更新，桌面安装器不会替远程服务升级依赖。

旧版 Windows/Linux ARM64 的应用内检查可能找不到这次更新，请从本发布页手动下载；更新后的文件名匹配修复用于后续版本。

验证与限制

发布构建已在六个平台通过：macOS 挂载最终 DMG，Windows 与 Debian 安装最终包后执行运行时检查，并在发布前核验 SHA-256。上述验收不等于新增原生 UI 或真实 GPU 生成兼容性验证。

仍为预览版：macOS 未完成 Apple notarization，Windows 未使用商业代码签名。Linux GTK3 链仍含 glib 0.18.5 的内存安全警告与 proc-macro-error 1.0.4 的停止维护警告；现有受限例外及说明见安全政策。依赖审计通过不代表整个产品没有安全风险。

English

This update patches sharp and its native SVG library, the multipart parser and build-time source-map processing. Security and packaging checks audit all Node.js dependencies, including build tools. Final installer verification executes the bundled runtime and checks the loaded Fastify, sharp, librsvg and multipart versions, alongside startup, restart, preferences and shutdown behavior.

Update checks now recognize the published Windows/Linux ARM64 package names. The SaveVideo regression waits for asynchronously persisted output instead of assuming a single status request completes collection. Compatible Tauri dependency upgrades remove five unmaintained packages; the two remaining Linux GTK-chain warnings stay explicitly documented.

Back up important projects, close the old app and install the package for your OS and CPU. ComfyUI and models are not bundled. Remote TakeBoard and self-hosted Portal must be updated separately. Preview installers are not Apple-notarized or commercially signed on Windows. No new real-GPU or native-window compatibility validation is claimed.

All six final packages passed the publication build, installed/mounted runtime checks and SHA-256 verification. Older Windows/Linux ARM64 clients may need a manual download from this release; the filename-matching fix applies after upgrading.

Assets 8
Loading