GLEAPP v2026.5.2

What's Changed

• Re-vendor qnxprobe 1.36 by @abrignoni in #196
• Recover deleted media from YAFFS2, JFFS2 and UBIFS volumes by @abrignoni in #197
• Update README and release page by @Johann-PLW in #198
• Find similar: matches and similar content, indexed in the background by @charpy4n6 in #200
• Clear the downloaded-from-the-internet mark so the Windows portable build opens by @abrignoni in #199
• Re-vendor qnxprobe 1.37 by @abrignoni in #201
• Let the release binary reach the browser interface when the window cannot start by @abrignoni in #202
• Reattach a folder source whose paths were recorded on another system by @abrignoni in #203
• Join the pieces of an Android app's ExoPlayer media cache by @abrignoni in #204
• Take key frames from a transport stream by reading it in order by @abrignoni in #205
• Sign and notarise the macOS release, and lay out its disk image by @Johann-PLW in #206
• Join an ExoPlayer DASH stream's segments from its cached manifest by @abrignoni in #207
• Put a DASH video and its audio in one file without re-encoding by @abrignoni in #208
• Combine every cached audio track, and read ExoPlayer caches through exoprobe by @abrignoni in #209
• Join HLS streams from their cached playlists by @abrignoni in #210
• Use the new GLEAPP logo by @abrignoni in #211
• Ingest Ex01, SMART, AFF and AFD acquisitions, and refuse L01 by @abrignoni in #212
• Ingest Apple disk images (.dmg, .sparseimage), and refuse encrypted ones by @abrignoni in #213
• Ingest segmented .dmg sets and sparse bundles by @abrignoni in #214
• Read encrypted Apple disk images with their password by @abrignoni in #215
• Find similar: show a spinner on the file being searched by @charpy4n6 in #217
• Play an intro video when GLEAPP opens, with a box to stop it by @abrignoni in #216
• Read FTK Imager AD-encrypted images with their password by @abrignoni in #219
• Stop test apps' background threads, and floor pillow-heif at 1.2.1 by @abrignoni in #218
• Name a Project VIC import after its JSON file by @charpy4n6 in #220
• Record that the installed app's OpenBLAS survives a fork under load by @abrignoni in #221
• Credit Kevin Pagano for the GLEAPP logo by @abrignoni in #222
• Index and list a source added while the case is busy by @charpy4n6 in #223
• Show the sliding stripe while a job's total is unknown by @charpy4n6 in #224
• Re-vendor qnxprobe 1.49 and ewfprobe 0.12.0: new images, private keys and BitLocker by @abrignoni in #225
• Measure the deep member's staged name, not the tmp path in front of it by @abrignoni in #227
• Carve the space outside every volume, and all of an image with no volume by @abrignoni in #226
• Version 2026.5.2 by @abrignoni in #228

New Contributors

• @Johann-PLW made their first contribution in #198

Full Changelog: v2026.5.1...v2026.5.2

---

Which file to download

Platform	File
Windows 10 or 11, 64-bit	-windows-x64-setup.exe (installer), or -windows-x64-portable.zip to run without installing
macOS, Apple silicon	-macos-arm64.dmg
macOS, Intel	-macos-x64.dmg
Linux, 64-bit	-linux-x64.tar.gz

First launch

The macOS disk images are signed with a Developer ID and notarised by Apple, so they
open without a warning.

The Windows binaries are not signed yet, so SmartScreen says "Windows protected your
PC" the first time. Choose More info, then Run anyway. If you would rather not clear a
warning, run from source instead; the README has the steps.

Verify what you downloaded

SHA256SUMS.txt covers every binary in this release. On macOS or Linux, from the folder
you downloaded into:

grep <the file you downloaded> SHA256SUMS.txt | shasum -a 256 -c -

Use sha256sum in place of shasum -a 256 on Linux. On Windows, in PowerShell:

(Get-FileHash -Algorithm SHA256 .\<the file you downloaded>).Hash

and compare it with the line in SHA256SUMS.txt, which is lower case.

Linux

The build is made on Ubuntu 24.04, so it needs glibc 2.39 or newer and will not start on
an older distribution. The native desktop window needs a GTK or Qt webview toolkit that
pip does not install, and CI does not exercise it, so gleapp web in a browser is the
tested path there.