Release EventSleuth v1.0.7 · Swatto86/EventSleuth

EventSleuth v1.0.7

Maintenance release: full bug sweep with five runtime fixes plus documentation corrections.

Status bar now shows application status messages. Messages such as "Loaded N events", "No sources selected", "Loading ...", and background reader-thread crash diagnostics were being generated but never displayed anywhere in the UI — the status bar permanently read "Ready". These now appear in the status bar, so you get clear feedback when a query finishes, nothing is selected, or something goes wrong.
Cancelling a query now shows "Cancelled" instead of leaving a stale "Loading..." status behind.
Live-tail memory cap now scales with the "Max events per source" setting. Previously the cap was fixed at 2,000,000 events regardless of your configured limit (which can be raised to 10,000,000), so a large load could be silently evicted — and all bookmarks cleared — by the very first live-tail poll. The effective cap is now max(2M, max events per source × 4).
Stale tail-query state is reset if the background reader thread terminates unexpectedly.
Closing dialogs with Escape now clears their input state (source-selector search text, save-preset name), matching the behaviour of each dialog's own Cancel/close button.

Corrected the README keyboard-shortcut table: it listed shortcuts that don't exist (Ctrl+F, Ctrl+E) and omitted the real ones. Actual bindings: F5 / Ctrl+R refresh, Escape cancel/close/deselect, ↑/↓ navigate, Page Up/Down jump 20 events, Home/End first/last event, Ctrl+Shift+X clear all filters.

Added regression tests for the live-tail cap scaling.
Resolved a new clippy lint from the latest stable Rust toolchain that was blocking CI.

Download: grab EventSleuth.exe from the assets below — no installation required. Run as Administrator to view the Security log.