Repository navigation
Ghost FTP 0.95.45
Ghost FTP v0.95.45 — Windows/Linux stability and backup safety
Development preview only. Latest published predecessor: v0.95.44. Keep that tag immutable; this is not a release announcement.
Scope
- Validate encrypted backup SQLite payloads before modifying OS credentials.
- Check staged restore integrity and metadata before changing existing files. If startup rejects an invalid staged backup while the prior database exists, keep original data and recovery artifacts available.
- Safeguard private backup file replacement against symlinks and interrupted writes; retain SQLite recovery snapshots, do not silently truncate existing backups.
- Improve credential deletion and debug redaction, fix built-in editor double-click race, and reject unsupported SQLite migration versions.
- Preserve 0.95.44 compatibility, user profiles, settings, Brendigo identity, and locked/keyring-failure privacy. Android and macOS feature code is unchanged (shared release metadata only).
Required acceptance
- Quality, protocol E2E, Windows hardening, Windows/Linux native build, Android and macOS compatibility verified on the same final SHA.
- Verify real Windows Credential Manager and Linux kernel-keyutils vault failures, recovery from corrupt backup, application startup, OS permissions and installed desktop package behavior.
- Test upgrade with existing user DB/WAL/SHM, profiles and prior encrypted backup file; evaluate full multi-file restore transaction separately.
- Do not merge or publish from partial/cancelled workflows. Existing version tags remain immutable.