NotallyXYZ 1.1.5

Fixes

Fixes for data loss in sync, stuck sync, crashes and privacy leaks on all platforms. Update all your devices.

• All apps: at the first sync, a device links a local note to a note on the server only if the type, title, content, checked items and attachments are the same. Before, the macOS, Linux and Windows apps could link two different notes without text (for example a voice memo and a photo note), and the attachments, labels and reminders of one note were lost on all devices. A "(conflict)" copy is not pinned and has no reminders, so a reminder no longer fires two times. If the server has older data than a device, for example after the restore of a backup, the device now stops and shows an error. Before, it skipped new changes without an error. Before a device sends a note, it asks the server which attachments of the note are missing and uploads them again. The apps remove the sync key from the clipboard 60 seconds after you copy it.
• Android: a damaged record no longer stops sync for good. When you delete a "(conflict)" copy, the images and files of the original note stay. Missing attachments download again. Fields from newer apps are kept. Changes that you make during a sync now sync at once, not after up to 1 hour. The app no longer stops when you reorder, rename or delete a label. When you turn the screen in a new shared note, the app no longer replaces your text or adds the attachments again. After a crash, the app no longer saves an old copy of a closed note. Other apps can no longer open the crash screen, and the crash screen no longer copies the database to shared storage. With the app lock on, Recents shows no screenshot, and notifications hide the note text on the lock screen. Backup and device transfer copy no app data. Tablets and unfolded phones show more columns, and the editor is at most 720 dp wide. In landscape, the navigation bar and the camera cutout no longer cover content. Predictive back works. The list no longer jumps when a sync changes a note. TalkBack reads checklist items and colours. The translations no longer say that recordings never leave the device.
• macOS: the edits of a note that is open in the editor sync again. Before, a change from another device stopped them until you closed the note. Repeating reminders keep firing while the app is in the background. Notifications show only the note title. Delete Forever asks first. The app decrypts photos, attachments and audio off the main thread, so the grid scrolls smoothly. VoiceOver and the keyboard can open note cards, colours and attachments. The sync key is copied for this Mac only, and screen capture cannot record it.
• Linux and Windows: a note over 8 MB no longer stops all sync: the app does not save it. After a failed sync, the app tries again after 5 seconds to 5 minutes. Pin and colour in the card menu no longer overwrite an edit from another device. When you close the window or quit, the app waits for the save. If the save fails, the editor stays open. Only images, audio, video, PDF and text files open in another app. You can only save other files. On Windows, saved files get the Mark of the Web. Notifications show only the note title. On Linux, if the key is in a file because no keyring was available, the app moves it to the keyring when one is available.
• Server: read and write timeouts, so slow requests cannot keep connections open. At most 4 large requests use memory at one time. Deletions are possible when an account is over its quota. If the file of an attachment is lost, devices upload it again. The rate limiter has a size limit and counts IPv6 addresses by /64 network. Requests without a token do not count, so scanners cannot block your devices. The server no longer stores which changes are deletions. Caddy writes no logs. The image is built without emulation.

Update

• Old and new apps and servers work together, but the new sync rules apply only when all devices have 1.1.5.
• Android: install NotallyXYZ-android-1.1.5.apk over 1.1.4 (same signing key). The APK is for ARM devices only (arm64-v8a and armeabi-v7a).
• macOS with Homebrew: brew upgrade --cask notallyxyz.
• Linux and Windows: built by GitHub Actions and attached a few minutes after the release.
• Server: ghcr.io/turtlecute33/notallyxyz-server:1.1.5 (also :1.1 and :1). Optional: take the new compose.yaml and Caddyfile from the repository (log rotation, no Caddy logs). Do not restore an old backup over a running server: refer to server/README.md.

Android APK SHA-256: 41dc9113edf663dbe5a91f7a2b9d76d06324fc9e6d532130bc2f170eaaa6dd20
Signing certificate SHA-256: 81776480a2afa0aced066d0b44631dd2159e267d10555a8cefcabd5c9ef9b48b

Check: sha256sum -c SHA256SUMS --ignore-missing. Desktop files: gh attestation verify <file> -R Turtlecute33/NotallyXYZ.