Emerald v1.6.1
Emerald 1.6.1
A security-hardening release with a small editor polish fix.
Security
- The built-in updater now accepts only trusted HTTPS release URLs for this
repository and verifies every download against GitHub's SHA-256 digest and
byte size before installing or opening it. - External Markdown links are limited to
http,https, andmailto, while
local image previews are canonicalized and confined to the current vault,
including across symbolic links. - Creating notes from missing wiki links now rejects invalid, path-like, and
reserved titles, and handles write conflicts without indexing or opening an
invalid path. - Legacy mascot migration is confined to the opened vault so it cannot import
or remove metadata through paths outside that vault. - Release Actions are pinned to immutable revisions, and downloaded Linux
packaging tools are pinned by release and verified by SHA-256 before use.
Editor
- Wrapped continuation lines in bullet, numbered, and task lists now align with
the item text. Nested list indentation is preserved without changing the
underlying Markdown.
Development
- Added dedicated security regression tests, ASan/UBSan support, a parser fuzz
harness, and scheduled security CI checks.
Downloads
| Platform | File | Notes |
|---|---|---|
| Linux (x86-64) | Emerald-x86_64.AppImage |
chmod +x and run |
| Linux (ARM64) | Emerald-aarch64.AppImage |
chmod +x and run |
| macOS (universal) | Emerald-macOS.dmg |
drag to Applications; first launch right-click -> Open -> Open |
| Windows | Emerald-win64.zip |
extract and run emerald.exe |