v4.10.3

Release Notes

Changed

• CI now targets master only. The dev branch is retired, so every master commit still publishes the rolling :dev Docker image while :latest moves only on release tags and manual runs. The Android Gradle egress allowlist now includes jitpack.io.

Fixed

• I2P / SIGPIPE: losing the I2P router (or any broken peer socket) no longer kills the Linux backend. The process now ignores SIGPIPE at startup so keepalive writes that return EPIPE reach Reticulum exception handlers and can reconnect when SAM returns. Electron also retains the signal name when a child exits with a null code, so signal-terminated backends are reported instead of silently dropped (fixes #137).
• NomadNet crash-tab: Electron no longer shows dual vertical scrollbars on micron-parser-js pages. The crash-tab document had overflow-x: hidden on both html and body with height: 100%, which computes overflow-y: auto on both and nests two scrollports. html is now non-scrolling and body is the sole vertical scroller.
• Relay chat: the channel list (/list) now populates on hubs whose reply exceeds the link MDU. rrcd splits oversized notices into one NOTICE envelope per line, so the header was parsed as an empty list and the room lines landed as stray system notices. The client now reassembles the burst into one notice before parsing.
• Messages: the conversation composer now floats over the message list instead of holding a normal-flow band at the bottom, so it no longer shows as a background strip while scrolling up. The scroll-to-bottom button floats above it, and the pill uses a subtle backdrop blur. The empty pane in split view no longer shows the drop-hint overlay over the compose input.
• CI: harden-runner now enforces egress blocking on Linux runners with an explicit allowed-endpoints list built from observed run traffic.

Changelog

No previous tag found; changelog omitted.

SHA256 Checksums

Asset	SHA256
meshchatx-frontend.zip	c2addbbbe47b2e8123404a3dd47fbbc2e5ea7f25049234c60a6d41f32cdc8f5e
MeshChatX-v4.10.3.torrent	6c15c8344e8c51169499a9047fceb6649b89dadb1f9daf34d21d1a5760e4d736
ReticulumMeshChatX-v4.10.3-linux-x86_64.AppImage	b5c75f5911c19d1971ba27abf88a107eb55ea73a534d9f0f08a9fbf50ff165a5
ReticulumMeshChatX-v4.10.3-linux-amd64.deb	9bb64550648321ccf605b57498a25d3ddadfca0bd08a48e278795023e7c89712
ReticulumMeshChatX-v4.10.3-win-installer.exe.cosign.bundle	cfaa105e20e0a0722d5931831b0c5fb2f6f17bbefa058e6b68954727fdd7c09b
meshchatx-android-flatpak-v4.10.3.intoto.jsonl	eabb418815634b6bb8d163b0fb3d367d91468da6b7b48b00f0dd85abbe788448
ReticulumMeshChatX-v4.10.3-mac-arm64.dmg.cosign.bundle	5ac89932a3ed605e4a2bf084c46680161362d717c9782928d6bfdf42df645785
ReticulumMeshChatX-v4.10.3-android-universal.apk	d91132f21ef1526af7d0eb28c93314126a3fe933fe664258baed5e90ab86be8f
ReticulumMeshChatX-v4.10.3-win-portable.exe.cosign.bundle	4b45742abae921fc477bd63564973709acf74c652c9f44653751cc917ecfda07
ReticulumMeshChatX-v4.10.3-linux-alpine-x64.apk	70778540f4daf80108a02820882157ce55478d147639a0836ec26be4f81f5c8d
reticulum_meshchatx-4.10.3-py3-none-any.whl	e63377a63b0fb1b89ea18d76489e5217fd5f626a97a5159a19eceae766e54695
ReticulumMeshChatX-v4.10.3-win-installer.exe.blockmap.cosign.bundle	479aa7d613675db7b833b53dd9a5e68038d87d239d0a84bb405c813d7fd3028a
MeshChatX-v4.10.3.json	03c5c950b9c6a7d963083ba0a88aa151cce9b1f0482dcbd57e2085e8abc65834
latest.yml.cosign.bundle	733fb79d12cc3f32f7354d00b24167145e9f40e030256165f202d932e276d0ac
ReticulumMeshChatX-v4.10.3-win-installer.exe.blockmap	55fe61f1041f104d654780a82d3237f0b3e32e1dbaf6b4c3b8ed733487a10e6b
ReticulumMeshChatX-v4.10.3-win-installer.exe	e3cd200fc62fa21fb38836b5d98c58da3ae10af210f7b1c4b8125ac98ff5b8f6
ReticulumMeshChatX-v4.10.3-mac-x64.dmg	364b42c79a35c8ab7187dc85b40f7491dabcb79560bcb1a33d236afd8443d224
latest.yml	4a3551109a4983e9418071ee8d650a7abc6645fc068e6efc517c41038b95093a
meshchatx-linux-v4.10.3.intoto.jsonl	7f85afa66d22ed06632c967f6e5b1736c0109f286ada8d4d07aa9303e8bf80cc
meshchatx-py314-linux-x64.pyz	84aec611a4a7d6fcc11a961a8118a8cf582eb703febd9aa6637d60db1ae8ecdb
ReticulumMeshChatX-v4.10.3-mac-x64.dmg.cosign.bundle	fb854f987c6c9d243e03a266dc214cc7d20553836bc30e2e40211ea02479a313
ReticulumMeshChatX-v4.10.3-win-portable.exe	81a328730fd8e071b334c6322a253e036b6330a1174581a8c48cd768e1e0c8f6
meshchatx-py311-linux-arm64.pyz	257e2e668f7ee29d1723a28cbf7a11f172b6a8c297d3200b120b0af91d2622c3
meshchatx-desktop-v4.10.3.intoto.jsonl	434dca7c9abdea4526f78c5aead3fc6b5b3af590d4ff3fa6b955ce29ce6c363e
openvex.json	d6aa027853ecbc974f8c52f64c4fa5c874724ad412bd33c77483cf167853077d
ReticulumMeshChatX-v4.10.3-linux-arm64.AppImage	34af708af15edfbd0ad0fafb95a5bf65485ad78ec89e7ecd60c487e04a03fefa
meshchatx-py314-linux-arm64.pyz	dc6348b151715a3acc365726bab2849975ddebd2b17bea4f943453e40db2a418
ReticulumMeshChatX-v4.10.3-linux-x86_64.rpm	c58725ec5acaf7969327002bb9668141af46ffd1ea6297b19f9693f61753380e
sbom.cyclonedx.json	1d5c0ffa6515a98034d67f3073bde290228d72ac528b79616e792a81aa01224f
ReticulumMeshChatX-v4.10.3-linux-x86_64.flatpak	2f5cdc4ebd2b25df10cea37093c2748151af13a00c44642d584d08e33147bef7
meshchatx-py311-linux-x64.pyz	545a697be63d07fcffc215df640273aa9c18b6fd869ca2ae8e274b38b50fbc07
ReticulumMeshChatX-v4.10.3-linux-arm64.deb	71226846b579ba8ffd744b63827857baa121e6349fc4b1f77f8c78dcc5a783a0
ReticulumMeshChatX-v4.10.3-mac-arm64.dmg	60b98b278b163256796e4c70bca88adc5b466047aceb8f8f149a7876b5d5f768

Verification

• Cosign bundles (.cosign.bundle) are attached for keyless sigstore verification.
• SLSA provenance (.intoto.jsonl) is available for supply-chain attestation.
• Or verify manually using the SHA256 table above.