DBine v1.1.0

DBine v1.1.0 installers.

New

• Cloud sync status at a glance: the status bar shows Synced with a green dot, Pending in amber while a change waits to upload, and red on an error; hover for the last sync time, click for the sync settings.
• Copy connection string: right-click a connection (or use the button in its form) and pick Copy connection string… to get it as a URI, ADO.NET, JDBC, SQLAlchemy, ODBC, libpq, Node.js or Go string, whichever apply to its engine, for any database, with its TLS and sign-in settings. The password is left out (a ${DB_PASSWORD} placeholder) unless you turn on Include password; then it's fetched when you copy, and cleared from the clipboard a minute later if it's still there.
• Send a message step in scheduled tasks: post how the run went to Microsoft Teams, Slack, Telegram or ntfy, with the task's variables ({results} lists what each step did), Only if… like the email step, and a Test button. The webhook URL and tokens are kept in the keychain, never in the task, and messages go only over HTTPS to the service's own servers.

Fixes

• SSH tunnels, security: the SSH library is updated to fix two advisories (CVE-2026-111061, a denial of service through the SSH agent, and CVE-2026-111062).
• RSA keys, security: signing in to SSH with an RSA key, and opening Zoho Vault's and Bitwarden's organization keys, now run in AWS-LC in constant time, so the timing leak in the RSA library (RUSTSEC-2023-0071, "Marvin") no longer applies. RSA keys sign with SHA-256 or SHA-512; a server that only accepts SHA-1 (ssh-rsa) asks for an Ed25519 or ECDSA key, or the SSH agent.
• TLS, security: the TLS library and its certificate checks are updated in DBine and in 33 drivers (RUSTSEC-2026-0346 to 0349 and 0381 to 0383), so certificates from distrusted authorities are refused. The updated drivers download by themselves.
• Built-in AI engine: unpacking the engine keeps only the files' read, write and run permissions.
• Scheduled tasks, security: {results} and {alerts} only fill in the text of mails and messages. A script's SQL, a file or folder name, an address or an attachment path no longer takes them, so a database error echoing crafted data can't turn into SQL or a path.
• Scheduled task messages: {results} and {alerts} in a message or a mail come in DBine's interface language instead of always in Spanish, also when the task runs with DBine closed.
• Notebooks, big DataFrame SQL results: Advanced export… › All writes the whole result, not just the rows shown. The cell's SQL runs again in DuckDB over the DataFrames its last run read, without reading files or querying the sources again. Its charts start computed over the whole result, and you can switch that off. When a result is cut, the grid also says that sorting and Copy all only cover the loaded rows.

Downloads

• Windows: -setup.exe (requires WebView2, included in Windows 10/11).
• macOS: .dmg; aarch64 for Apple Silicon, x64 for Intel.
• Linux: .AppImage (portable), .deb or .rpm.
• Android: the phone app that pairs with DBine on your computer. Install it from dbine.com or with the -android.apk below; the first time, Android asks to allow installing apps from that source (the browser or the files app).
• Linux (Flatpak): .flatpak (x86_64 or aarch64), for flatpak install --user ./dbine-….flatpak; it doesn't update itself. Built by the flathub workflow, it appears here a while after the other files.

Version 0.1.4 and later receive it through the automatic update.

• macOS: signed with an Apple Developer ID and notarized by Apple, so it opens without warnings.
• Windows: the -setup.exe installer is signed (Open Source Developer Marcos Panichella, Certum). While the certificate builds its reputation, SmartScreen may still ask for "More info" › "Run anyway".
• Each engine's driver (except SQLite) is downloaded the first time you connect.