v4.2.0-rc1

Release candidate — not distributed through the in-app auto-updater (see note below); download it manually from the GitHub Releases page if you want to test it.

New:

• War Thunder support: live telemetry link driving tactile effects for gunfire (weapon1/weapon2), flaps, landing gear transit, engine start/stop, and an AoA-based stall/airflow-separation buffet
• Ammo tracking gained a fallback for aircraft that expose no weapon1..weapon4 keys at all: firing is inferred from a decrease in the sum of ammo-like telemetry fields
• Active game (MSFS / War Thunder) is now auto-detected and switches the GUI and effect set automatically
• WinWing Orion joystick/throttle support, plus a second Ursa Minor RUD
• N2 idle quick-set and "apply to current aircraft" buttons for profiles
• Active-game indicator in the top bar is now a plain text label ("MSFS"/"WarThunder") instead of an icon

Notes:

• The stall/AoA buffet profile uses real Bf 109 F-4 aerodynamic data and, as a temporary measure, is now applied to every aircraft (previously F-4 only) until per-aircraft profiles are added — expect it to feel wrong on other airframes until then

---

Verify your download

Get-FileHash -Algorithm SHA256 .\aurora-vibra-v4.2.0-rc1-windows-x64.zip

Expected: 3e88e229ef6882613b95500176d426d71b791905a1b4681ed4e7d65854248412 (see also SHA256SUMS.txt attached to this release).

Note on SmartScreen

The executable is not code-signed, so Windows SmartScreen may warn on first run
(More info -> Run anyway). Verify the checksum above if in doubt.

v4.1.1

Security:

• Updated the HTTPS stack used by the auto-updater. The previous release shipped rustls-webpki 0.101.7 by way of reqwest 0.11, which carries three advisories — RUSTSEC-2026-0098 and -0099 (certificate name constraints accepted where they should have been rejected) and RUSTSEC-2026-0104 (a panic reachable while parsing certificate revocation lists). Exploiting any of them requires a misissued certificate, so real-world exposure was low, but the updater is the one component that fetches and installs code, and it should not be running on a stack with known findings.
• Further dependency updates close RUSTSEC-2026-0007 in bytes and unsoundness advisories in anyhow, memmap2 and rand. cargo audit now reports a clean tree.

New:

• USDT (TRC-20) added to the Donate window alongside the existing options

Fixes:

• The library could not be compiled on non-Windows targets at all: serde and serde_json were declared as Windows-only dependencies while cross-platform modules used them unconditionally. This affected contributors and the Docker development image, not the shipped Windows build.

---

Verify your download

Get-FileHash -Algorithm SHA256 .\aurora-vibra-v4.1.1-windows-x64.zip

Expected: ed5e17fa187eea248c77576694971e75fd6f00c103f4159a56820b12daa0aa61 (see also SHA256SUMS.txt attached to this release).

Note on SmartScreen

The executable is not code-signed, so Windows SmartScreen may warn on first run
(More info -> Run anyway). Verify the checksum above if in doubt.

v4.1.0

New:

• Redesigned interface: dark palette, sectioned navigation, effect cards with live status badges, and a Live Monitor panel that can be collapsed out of the way
• Fenix A320 support: overspeed barber-pole and gear-transit telemetry, per-variant idle N2, and a clear precedence order between built-in and user profile overrides
• Reworked gear touchdown: attack–hold–decay envelope per strut, fixed motor routing, and a settle window that mutes every other effect (except Stall) right after contact so the touchdown itself is not masked
• "Close to tray" option and a restructured tray context menu
• Options → Check for updates in the toolbar, alongside the tray entry
• Donate menu with selectable BTC / YooMoney details
• Single-instance guard — launching the app twice focuses the existing window instead of opening a second one

Security:

• The auto-updater now verifies the downloaded archive against the release's published SHA256SUMS.txt before unpacking or installing anything, and refuses to proceed if the checksum is missing or does not match. Previously the archive was unpacked and copied over the application directory — with an automatic UAC elevation when needed — without any verification at all.
• Version comparison no longer misreads pre-release tags: 4.2.0-rc1 used to parse as 4.0.0 and could be offered as an upgrade over a newer stable build. Pre-releases are now skipped entirely.

Fixes:

• Corrected an elem[] index desync that made PMDG and Fenix SimConnect variables read from the wrong slots
• Engine start/shutdown routing, gear-transit gating, and HID hot-plug recovery
• Slats tracking unified with flaps, with a dither tolerance so sub-percent telemetry jitter no longer triggers the effect
• Window title and the .exe version resource are both derived from the package version, so they can no longer drift apart
• Effect status badge lights only on real activation
• MD-11 spoiler effect no longer false-triggers on bank

Internal:

• Minimum supported Rust version is now 1.88
• Diagnostic binaries in src/bin/ moved behind a dev-tools feature — release builds produce one executable instead of eleven
• Only one TLS stack is linked into the binary (rustls); native-tls/schannel are no longer pulled in
• Clippy now runs over the Windows-only UI, tray, and updater code in CI, plus a cargo audit job

---

Verify your download

Get-FileHash -Algorithm SHA256 .\aurora-vibra-v4.1.0-windows-x64.zip

Expected: 148502db8deebf8c2460c1a82ac359ea5be8096a2ae05821c42a87733c2ccf25 (see also SHA256SUMS.txt attached to this release).

Note on SmartScreen

The executable is not code-signed, so Windows SmartScreen may warn on first run
(More info -> Run anyway). Verify the checksum above if in doubt.