v0.2.1
Pre-release
Pre-release
AnimalsDesktop v0.2.1
Date: 2026-06-27
This release keeps the current main-line AnimalsDesktop animal/runtime set and adds Windows release-trust hardening for the Windows packages.
v0.2.0 was published from the wrong lineage and is superseded by this main-line v0.2.1 release.
Download
AnimalsDesktop-windows-amd64.zipfor Windows 10/11 x64AnimalsDesktop-windows-386.zipfor Windows 10/11 x86- macOS ZIPs from the same release workflow
SHA256SUMS.txtfor Windows package and packaged EXE verification
Each Windows ZIP includes:
AnimalsDesktop.exeREADME.mdSECURITY.txt
Windows Trust Changes
- Embedded Win32 version metadata, product metadata, a Windows 10+ manifest, and an app icon into
AnimalsDesktop.exe. - Removed the runtime PowerShell updater path and replaced it with a constrained app-owned updater helper mode.
- Added GitHub release asset size and SHA256 digest verification when available.
- Added release ZIP
SECURITY.txtfiles with expected EXE hashes and false-positive submission guidance. - Added
SHA256SUMS.txtlines for both Windows ZIP files and the packaged EXE files inside them. - Added optional Azure Artifact Signing integration, with PFX signing as a fallback only for eligible/exportable certificates.
- Added regression tests for updater path constraints, PowerShell-free runtime updater command construction, release workflow PowerShell parsing, and package hash/security-manifest coverage.
Known Status
- This release is marked as a prerelease while Windows reputation/signing is being hardened.
- Authenticode signing depends on configuring Azure Artifact Signing or a valid signing certificate.
- Unsigned Windows builds may still show Microsoft Defender SmartScreen or antivirus reputation warnings until signing, reputation, or allowlisting catches up.
Verification
Release verification includes:
go run ./cmd/importsheetgo run ./cmd/importanimalsgo run ./cmd/validatemotion -runtime-only -require-acceptedgo test -buildvcs=false ./...- release workflow PowerShell parser checks after GitHub expression substitution
- amd64/386 Windows EXE builds
- Windows release ZIP packaging with
SECURITY.txt - ZIP entry and SHA256 verification