Skip to content

0.23.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Sep 18:32
· 49 commits to main since this release
v0.23.0
2639f41

First run

These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.

macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:

/usr/bin/xattr -dr com.apple.quarantine /Applications/ShellPilot.app

That clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.

Windows — SmartScreen will warn. Choose More info → Run anyway.

Downloads

Windows

File Notes
ShellPilot-0.23.0-setup.exe Installer with desktop and Start-menu shortcuts. Pick this one if unsure.
ShellPilot-0.23.0-portable.exe Single file, no install, keeps its data beside the .exe — runs from a USB stick

macOS

File Notes
ShellPilot-0.23.0-arm64.dmg Apple Silicon (M1 and later)
ShellPilot-0.23.0-x64.dmg Intel Macs

Linux

File Notes
ShellPilot-0.23.0-x86_64.AppImage Any distribution — chmod +x and run
ShellPilot-0.23.0-amd64.deb Debian and Ubuntu — sudo apt install ./ShellPilot-0.23.0-amd64.deb

Source for the bundled OpenVPN

ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.

Antivirus scan

These builds are unsigned, so every release is scanned before publishing.

Scanner Result
Microsoft Defender (Windows runner) no threats found
ClamAV ClamAV 1.5.3/28116/Mon Sep 7 06:24:32 2026 clean
VirusTotal (70+ engines) per-file reports below

One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.

Checksums

These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.

shasum -a 256 <file>                      # macOS, Linux
certutil -hashfile <file> SHA256          # Windows
File SHA-256
ShellPilot-0.23.0-amd64.deb 8f4f1829be325b520db5ccf17d4276d2b1245e2682ddc1183a10e0e3500f1823
ShellPilot-0.23.0-arm64.dmg aae892d30447de75009bca143b97d79eef539d876660ae18f6a0a00b9dc32f64
ShellPilot-0.23.0-portable.exe fe3746e5f86cc0873a8eb5607223d6b0bfa90ea53d44a75ccf4a55a560a93fa9
ShellPilot-0.23.0-setup.exe f0263ed8f36283bf4f6a82f7008571f73a8d4465636321c37d6bc3904ebf5c54
ShellPilot-0.23.0-x64.dmg c3a5d3255572cb94132e32bb993b8ec27fc0696294b8bef3f638d8a0f2734a5f
ShellPilot-0.23.0-x86_64.AppImage a2d59dc753ce83686ef88a9ccaf3508f7a66f0c6551e578b74c5e0007f1a3d59
openvpn-2.6.22-source.tar.gz e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48

The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.

Full Changelog: v0.22.3...v0.23.0

Assets 15
Loading