Skip to content

Ceiling 0.43.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Jul 02:58
· 420 commits to main since this release
v0.43.3
099a21b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First stable build of the 0.43.3 line, headlined by a full pass of Windows security hardening, plus the Charts, floating-bar, and reliability work from the 0.43.3 betas.

Security

  • Secret files (API keys, manual cookies, and settings) are now locked to your Windows user with a restricted NTFS ACL and encrypted with user-scoped DPAPI, with no machine-scope fallback.
  • The optional PowerToys status pipe is restricted to your user, so other local processes can no longer read usage and cost snapshots.
  • Credentials left in older settings files are migrated into the dedicated encrypted stores, leftover plaintext cookie caches are removed on startup, and temporary cookie databases are wiped on every exit path.
  • Each window can call only the commands it needs, and opening folders is limited to Ceiling's own locations.
  • Updated serde_with to 3.21.0 to resolve GHSA-7gcf-g7xr-8hxj.

Added

  • Persistent quota history and processed-token summaries in Charts.
  • Compact, standard, and detailed floating-bar density presets with automatic contrast.
  • Taskbar-aware floating-bar placement across primary and secondary Windows taskbars.

Changed

  • Replaced API-equivalent dollar estimates with processed-token and cache-traffic breakdowns.
  • Reworked floating-bar recovery around Windows events instead of repeated z-order writes.

Fixed

  • Corrected malformed chart time labels and kept provider charts responsive while history loads.
  • Kept Codex's regular weekly limit distinct from Codex Spark Weekly so scheduled resets notify reliably.
  • Kept taskbar placement stable across mixed resolutions, DPI scales, negative coordinates, and taskbar restarts.
  • Kept the floating bar above normal taskbar activity without taking focus.

Installers are code-signed (CN=Brandon South). Verify with the published SHA256 files.

Assets 6
Loading