BetterPullReview 0.3.0

Download and install

Choose the installer for your system:

System	Download
macOS 13+ · Apple Silicon and Intel	Download the Mac installer (.dmg)
Windows · x64	Download the Windows installer (.msi)
Ubuntu 26.04 · x64	Download the Ubuntu installer (.deb)

For Ubuntu, also download the installer signature (.deb.asc) and follow the signature verification steps before installing.

What are the other downloads?

You do not need every asset to install the app.

Source-…corresponding-source.zip: exact third-party source and rebuild material.
.spdx.json: dependency and licence inventory.
.sha256 and .asc: checksums and signatures for verification.
.provenance.json and .release.json: release verification records.
macOS app .zip: an alternative app archive.
Windows runtime .zip: an inventory archive; use the MSI to install.
Ubuntu -user.tar.gz: an alternative per-user archive requiring the declared system dependencies.

Coordinated private stable release for macOS universal, Windows x64 and Ubuntu
26.04 x86_64. Full agent integrations and local automation are included.

Changes since 0.2.2

Review drawers share a consistent layout. Overview has a remembered Status
drawer that leads with your role and what needs attention. Compose review
opens beside the code and expands into a focused page; Tours presents the
route, Notes supports private line anchors, and Agent has its own drawer tab.
Pull-request comments have read state and appear at the Comments drawer's
edge. Quoted replies retain their original target, long threads remain
readable to the last post, and a selected thread can open in Threads or Discuss.
Markdown descriptions and comments show inline images, including SVG and
WebP, with a bounded profile cache and a preference to disable loading.
Rendering also supports GitHub-style alerts, footnotes, disclosures, emoji,
language-coloured code fences, diff blocks and suggested changes.
Whole PR compares from GitHub's evidenced merge base, including supported
stacked pull requests. The Updates line starts at that base, and recorded
updates can supply comparison handles again. Refresh preserves valid
base-line drafts and the review mode chosen while loading.
New Insights shows local storage, passive GitHub request and rate-budget
history, review activity, energy measurements and work timings. Unavailable
child-process CPU counters say Not reported; they are not estimated.
Text selections and intraline changes are clearer, C++ template syntax is
coloured, and both comparison panes receive highlighting. Folder counts
appear only while collapsed, and Home, refresh and data-readiness feedback
make the current state easier to follow.
Accept file uses Option-A on macOS and Alt+A elsewhere. Home uses
Command-Shift-H or Ctrl+Shift+H; Actual Size uses Command-0 or Ctrl+0.
First/last-change shortcuts and Help's Keyboard Shortcuts reference are
available, and macOS Option-letter keys work normally in text inputs.
Review submission recovery handles busy pull requests and explains an
unconfirmed result. File/change navigation works after opening another pull
request, GitHub CLI discovery failures provide safe diagnostics, and Settings
groups controls by task with scoped Troubleshooting resets.

Verification and distribution

All selected producers use one committed version and source revision. Native
normal-gate results, configured skips, final package identities, digests and
trust observations are recorded in the release engineering and producer
records; focused or historical checks do not establish a new full native pass.

macOS targets macOS 13 or newer on Apple Silicon and Intel, with Developer ID
signing and notarization. Windows supplies a per-user MSI and runtime inventory
archive; that archive is not a qualified portable installation. Ubuntu 26.04
supplies a DEB and per-user archive, with declared system dependencies and the
glibc 2.43 ceiling. Its three private ICU 73.2 libraries are built from pinned
source with recorded hardening, ABI/loading checks and recipient rebuild
instructions. WSL2 is an admitted Linux producer.

Each platform supplies SPDX, checksums and a separate exact-version
corresponding-source archive. Equivalent source access at no extra charge,
practical build/relink material and immutable retention remain ongoing
distribution obligations, including corporate and offline redistribution.

Linux signature verification

The Ubuntu artifacts have detached OpenPGP signatures. Save the complete public
key block below as bpr-release-signing.asc. Its SHA-256 is
c271732f02b5f3c709ad1a61d7f7816200e96226c490fd77d88f6583437f9798.
The approved full fingerprint is
ED85BAA84A3B6D83FCD5B1F107CEC96F2688E4A8.

Check the saved key's digest and fingerprint before importing it:

sha256sum bpr-release-signing.asc
gpg --show-keys --with-fingerprint bpr-release-signing.asc
gpg --import bpr-release-signing.asc

For each of the six signed Ubuntu products—the DEB, user archive, SPDX,
corresponding-source ZIP, checksum file and provenance—download its matching
.asc signature and run gpg --verify ARTIFACT.asc ARTIFACT, replacing both
names with that exact file. The .release.json manifest is verification
metadata and has no detached signature of its own.
Require a good signature from the full fingerprint above before installation
or use. A detached DEB signature is verified separately; dpkg does not enforce
it. This public key and fingerprint are supplied through the same private
release channel as the signed artifacts.

Known limitations

This release does not complete RFC-BPR-0038 native or release-security
qualification. Clean-account installation, authentication and platform vaults,
native Intel and complete Windows/Ubuntu desktop courses, accessibility,
upgrade/removal, resident-material crash privacy and vulnerability qualification
remain open. Existing Mac/Windows material decisions cover independently verified unchanged
inventory/material; the current Ubuntu inventory and ICU material were reviewed
separately. Current Grype inventories retain 33 macOS, 31 Windows and 33 Ubuntu
raw matches. Independent source/configuration/caller applicability decisions
are bound to the exact delivered bytes, with expiry and change-triggered
rechecks. Identifier/version, external-system and Qt producer coverage gaps
remain; these decisions do not certify complete vulnerability coverage or
accept applicable risk. Signing and notarization do not resolve findings.
WSL/WSLg observations do not establish clean Ubuntu desktop or Secret Service
qualification. Profile purge excludes shared updater and registry state and is
not uninstall.

The Ubuntu optimized large-review cache course still exceeds its unchanged
216 MiB resident-footprint growth limit. The owner accepted this one failing
RSS criterion as a v0.3.0 release exception, with BPR-1653 remaining open for a
follow-up patch. The observed result remains FAIL; the separate 64 MiB cache
bound passes. No cause or accepted correction is established, and no other test
or release requirement is waived by this exception.

A source-compatible optimized macOS history course now passes its unchanged
input and completion budgets. The cause of the original history input-gap miss
remains unexplained. Four session-bound native macOS menu, notification and
shortcut courses also pass with actual zero exits and their required markers. The passing focused evidence is scoped to its
recorded inputs; no fresh complete normal-gate run or full native qualification
is claimed.

The release remains private. Version 0.3.0 is selected as a stable GitHub
release, eligible for Latest, rather than a prerelease.

Navigation Menu

Repository navigation

BetterPullReview v0.3.0

Choose a tag to compare

Sorry, something went wrong.