0.1.5rc3

A release candidate. See CHANGELOG.md for the full list.

Highlights

Text-to-speech works again, and is about two and a half times faster. Neural
speech was completely broken in the previous candidate and is restored, then given
the shared memory it needs to run on more than one core.

An attached file is no longer cut short. Attachments were silently truncated to
roughly their first 24,000 characters, so a question about anything later in a
document was answered from text the model never saw. The whole file is now attached.

The Settings page has been reorganised, with help text that says what a setting
does instead of arguing for its default, and it no longer loses its Knowledge section
on a cold load.

localm now installs a llama.cpp build it has actually tested rather than whatever
was published most recently, and you can pin a build or go back to a previous one.
localm doctor and bug reports say which build you have.

Its own managed ComfyUI can be updated from Settings and now installs v0.31.1.

Security and privacy

The GUI's Content-Security-Policy now enforces rather than only reporting. Session
records, attach tokens and TLS private keys are created already restricted rather than
being tightened after the fact. Using the coder no longer leaves prompt content in the
debug log, a project index on disk, or a compiled copy of your source in the temporary
folder. A bug report no longer echoes a credential carried in a configured URL.

Also fixed

Model files that are loaded can no longer be deleted; unloading a busy model reports
honestly instead of claiming success; embeddings and grammar requests fail with a clear
reason instead of a generic error; models are sized against all your GPUs; and a
malformed request gets a clear rejection rather than a server error.