Skip to content
This repository was archived by the owner on Aug 20, 2026. It is now read-only.

v2026.8.0

Latest

Choose a tag to compare

@daniel-tirzuman daniel-tirzuman released this 14 Aug 11:10
· 3 commits to main since this release

Open Headers

Desktop App

Platform Downloads
macOS Apple Silicon (DMG) · Intel (DMG)
Windows Installer (EXE)
Linux AppImage x64 · AppImage ARM64 · install script
Debian / Ubuntu x64 (deb) · ARM64 (deb)
Fedora / RHEL x64 (rpm) · ARM64 (rpm)
Enterprise - Managed deployment (MDM / GPO)
Platform Downloads
macOS PKG Apple Silicon · PKG Intel
Windows MSI

macOS PKGs are signed and notarized; the Windows MSI is Authenticode-signed.

Browser Extension

Browser Store
Chrome Chrome Web Store
Firefox Firefox Add-ons
Edge Edge Add-ons

Terminal - CLI & TUI

Platform Download
Linux (x64) oh-2026.8.0-linux-x64
macOS (Apple Silicon) oh-2026.8.0-mac-arm64
Windows (x64) oh-2026.8.0-win-x64.exe

Checksums: SHA256SUMS.txt · GPG signature · signing key

Install scripts & notes

Install script (verifies checksums, installs oh to ~/.local/bin):

curl -fsSL https://updates.openheaders.io/install.sh | sh

Windows (PowerShell):

irm https://updates.openheaders.io/install.ps1 | iex

No Node.js required (npm install -g @openheaders/cli is the Node channel). macOS binaries are signed and notarized; the Windows oh is unsigned — SmartScreen warns on first run (More info → Run anyway). Script copies on this page: install-oh.sh · install-oh.ps1

Team - Server Daemon

Platform Download
Linux (x64) ohd-2026.8.0-linux-x64
macOS (Apple Silicon) ohd-2026.8.0-mac-arm64
Docker ghcr.io/openheaders/ohd:2026.8.0

Checksums: SHA256SUMS.txt · GPG signature · signing key

Install scripts & notes

Install script (verifies checksums, installs oh + ohd to ~/.local/bin):

curl -fsSL https://updates.openheaders.io/install.sh | sh -s -- --with-daemon

Docker:

docker run -d -p 127.0.0.1:8137:8137 -v oh-data:/data ghcr.io/openheaders/ohd:2026.8.0

What's New

Version control

  • Git tool window — a workspace bound to a git repository gains a
    full Version Control tool window. The log pane draws the commit
    graph with ref labels for branches and tags, per-pane toolbars with
    filter chips and view options, a sticky branch scope, and a details
    pane for the selected commit.
  • Branches rail — an activity-bar rail lists local and remote
    branches with checkout, create, and compare verbs; comparing two
    refs opens as its own tab.
  • Commit window — a changes tree with tri-state checkboxes,
    keyboard navigation, and per-row context menus stages exactly what
    you pick; commit and amend run from the tree, and the working diff
    sits beside it. Single-chain directories compress to one row, the
    IDE way.
  • Ignore management — Add to .gitignore and Stop Ignoring live on
    the tree's context menus, and ignored rows say which ignore file
    and pattern claimed them.
  • Console tab — every git command the app runs is visible in a
    console tab, so nothing happens behind your back.

Traffic

  • Capture sessions — the Traffic monitor can record what it
    observes into sealed, encrypted session archives: auto-named at
    seal, deduplicated storage for bodies, a retention budget with
    garbage collection, and recovery of interrupted recordings on next
    launch.
  • Replay — a sealed session opens back up in the same viewer the
    live Traffic monitor uses — rows, timings, and bodies resolve from
    the archive even after the browser tab is long gone.
  • Sessions in the sidebar — recorded sessions live in a SESSIONS
    section of the sources rail: search, sort, folders, rename and
    organize verbs, and open-on-click replay.
  • Redesigned monitor — the Traffic monitor moves into the dock as
    a tool window with a per-source tab row, a sources rail, and a
    start/stop capture control in the header.
  • Clear names — the wire vocabulary is now Traffic Interception,
    the system proxy settings group reads Proxy · System, and Install
    CA takes you straight to the trust pane.

AI agents

  • Observe traffic over MCP — with an explicit workspace grant, an
    AI agent connected to the app's MCP server can observe captured
    traffic: list sources and requests, pull failures with their
    bodies, diff two requests, wait on traffic matching a predicate,
    and read redirect chains.
  • Redaction first — sensitive fields are redacted in everything
    an agent reads, and redacted markers say so honestly; turning a
    captured request into a rule forces a draft whenever redacted
    fields are involved.
  • Session tools — agents can list and read sealed capture
    sessions; raw unredacted reads sit behind their own grant, off by
    default, and every raw read is stamped in the observe feed.

Workbench

  • Compact sidebar — denser rows, hover-gated controls, one global
    focus tint, and slimmer dividers across the sidebar trees.
  • Speed-search — the sidebar gains an on-demand filter/search
    mode; filtering prunes empty folders and highlights no-match state.
  • Tool windows keep their state — switching dock tabs no longer
    resets a tool window's scroll and selection; bodies stay mounted
    and pick up where you left them.
  • Bottom panel splits — the bottom panel can hold two tool
    windows at once, side by side or stacked. Pick the arrangement from
    the merged Bottom Panel Layout menu or the panel toolbar, or drag a
    tab onto a drop zone to split in place.
  • Reveal means focus — actions that reveal a tool window now
    focus it too, landing on its natural input so the keyboard follows
    your intent.