FitCom 1.18.2 — stream viewer fullscreen fix

FitCom 1.18.2 fixes the pop-out stream viewer on Windows. Switching the viewer to fullscreen (by hand, or automatically when it was left in fullscreen last time) dropped the window's visible style, so the screen kept showing a stale, unpainted window while the stream itself was received and decoded normally. Both fullscreen switches now keep the window visible.

No other changes from 1.18.1. Protocol version remains 6; identity, settings and history are untouched. Windows installations receive this through the in-app update. macOS is unaffected by this bug; macOS updates stay manual.

Downloads: FitCom-1.18.2-windows-x64.zip (Windows 11 x64). Keep fitcom.exe and fitcom-updater.exe together. Windows publisher signing is not configured; the update manifest is signed with the existing Ed25519 key.

Experimental: use only with mutually trusted peers. Operations are not individually signed in protocol 6. Read SECURITY.md, docs/SECURITY-AUDIT.md and THIRD_PARTY_NOTICES.md before use.

Every binary is built from commit 36e8d72, tagged v1.18.2. Dependencies and third-party notices are unchanged from 1.18.1.

FitCom 1.18.1 — experimental Windows and macOS release

FitCom 1.18.1 restores macOS builds after the shared viewer gained fullscreen-preference polling. The macOS viewer now implements that interface without changing AppKit's native fullscreen behavior. Release builds use a supported macOS 15 runner and retain a macOS 14 deployment target.

Downloads: FitCom-1.18.1-windows-x64.zip (Windows 11 x64) and FitCom-1.18.1-macos.zip (macOS 14+, Apple Silicon). Windows users must keep fitcom.exe and fitcom-updater.exe together. macOS updates are manual. Windows publisher signing and Apple notarization are not configured; the Mac bundle is ad-hoc signed.

Existing 1.17.1 installations retain protocol version 6, identity, settings, and history. The migration build is available through the old repository; future in-app checks use PieWhite/FitCom. Installed applications use public HTTPS downloads without a personal GitHub token or account. The existing Ed25519 update trust anchor is retained.

Security and privacy work carried forward from 1.18.0 includes patched networking/TLS/audio dependencies, bounded image previews, GIF-preview isolation, private-key file protection, sanitized examples, and verified removal of personal build paths. Advisory scanning found zero RustSec vulnerability advisories and zero yanked versions. Maintenance warnings and the unsupported GTK/Linux glib soundness alert remain documented rather than hidden.

Experimental: use only with mutually trusted peers. An admitted malicious peer can forge another author's public-channel messages, edits, or deletions because operations are not individually signed. Wordle word-list redistribution rights remain unverified. Read SECURITY.md, docs/SECURITY-AUDIT.md, and THIRD_PARTY_NOTICES.md before use.

Validation: 571 library tests passed, with hardware/external-service cases explicitly ignored; the earlier protocol/storage/network/application integration and timing checks passed. Both Windows release compilation and the real Apple Silicon macOS build succeeded. Windows binaries passed personal-home-path scans; the Mac bundle's ARM64 architecture, version, notices, and private-file exclusion were verified. Interactive cross-machine media and macOS runtime testing were not performed.

Every binary is built from commit e720605, tagged v1.18.1. Exact project source and combined notices for 735 Windows/macOS package/version pairs, native Opus, and fonts accompany this release. Package-specific notice-provenance gaps remain explicitly recorded; no missing copyright wording was invented.

FitCom 1.18.0 — experimental release

FitCom 1.18.0 starts the clean GPL-3.0-only source repository and migrates Windows updates to this project.

Experimental: use only with mutually trusted peers. Public-channel operations are not individually signed. An admitted malicious peer can forge another author's public messages, edits, or deletions. See SECURITY.md and docs/SECURITY-AUDIT.md before use. Wordle word-list redistribution rights remain unverified and are documented in THIRD_PARTY_NOTICES.md; inclusion does not establish a license for that data.

Windows: download FitCom-1.18.0-windows-x64.zip and keep fitcom.exe and fitcom-updater.exe together. Existing identities, settings, portable data, and legacy application-data locations are preserved. Updates from 1.17.1 retain protocol version 6. After this migration, automatic checks use the FitCom release feed, without a personal GitHub token or user account.

This release updates Quinn, rustls/webpki, trust roots, Tokio, WASAPI, and the withdrawn ChaCha20 package; bounds inline image memory and excludes unbounded GIF previews; protects newly generated private keys; and removes personal examples and build paths. The Ed25519 update trust anchor is unchanged. Update signatures are separate from Windows publisher signing and Apple notarization, which are not configured.

Validation: 571 library tests and 56 selected integration/timing tests passed. Hardware/external-service cases remain explicitly ignored. Advisory scan found zero vulnerability advisories and zero yanked versions; maintenance warnings remain visible. Dependency/license/source checks passed for Windows and Apple Silicon macOS. Real two-machine media/control tests and macOS runtime testing were not performed. Source and the single-commit history passed credential scans; final Windows binaries passed personal-home-path scans. See docs/VALIDATION.md for scope and limits.

Source: clean commit 86067cb. Source ZIP, project license, combined dependency/font notices, and security documentation accompany the release. The macOS workflow can attach a bundle separately; absence of a macOS asset means no Mac build is being offered yet.