Skip to content

0.25.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Sep 04:24
· 35 commits to main since this release
v0.25.0
a2df945

First run

These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.

macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:

/usr/bin/xattr -dr com.apple.quarantine /Applications/ShellPilot.app

That clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.

Windows — SmartScreen will warn. Choose More info → Run anyway.

Downloads

Windows

File Notes
ShellPilot-0.25.0-setup.exe Installer with desktop and Start-menu shortcuts. Pick this one if unsure.
ShellPilot-0.25.0-portable.exe Single file, no install, keeps its data beside the .exe — runs from a USB stick

macOS

File Notes
ShellPilot-0.25.0-arm64.dmg Apple Silicon (M1 and later)
ShellPilot-0.25.0-x64.dmg Intel Macs

Linux

File Notes
ShellPilot-0.25.0-x86_64.AppImage Any distribution — chmod +x and run
ShellPilot-0.25.0-amd64.deb Debian and Ubuntu — sudo apt install ./ShellPilot-0.25.0-amd64.deb

Source for the bundled OpenVPN

ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.

Antivirus scan

These builds are unsigned, so every release is scanned before publishing.

Scanner Result
Microsoft Defender (Windows runner) no threats found
ClamAV ClamAV 1.5.3/28116/Mon Sep 7 06:24:32 2026 clean
VirusTotal (70+ engines) per-file reports below

One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.

Checksums

These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.

shasum -a 256 <file>                      # macOS, Linux
certutil -hashfile <file> SHA256          # Windows
File SHA-256
ShellPilot-0.25.0-amd64.deb 2dd6f13694903f49b7e18894f48dfd70a7eba4c1d7739e27977218c8ac24eb0e
ShellPilot-0.25.0-arm64.dmg afcc4c919ec0eae722f1d66c7a70eb901b93158d194d168cfdadf91296165bf1
ShellPilot-0.25.0-portable.exe a28093d0a116b6ea3556b43f3d78a6f9ab76d734d13cbb26c06df7f25a28e30f
ShellPilot-0.25.0-setup.exe fb758830adfff77a4781415daf275ca5a54011003e6da68ca1811f4906dd49b4
ShellPilot-0.25.0-x64.dmg 5618b3b524c54ab28a6a42598f01b3be1d31806d2d4b122b84227f04cbc53e0a
ShellPilot-0.25.0-x86_64.AppImage 22b8a5c1f0c82febecf1a2450de7e3254f53f4416f5e466fc4fbbe44b0775806
openvpn-2.6.22-source.tar.gz e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48

The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.

Full Changelog: v0.24.0...v0.25.0

Assets 15
Loading