Kitewell 0.23.0 — Public beta

Kitewell 0.23.0 is a beta update.

What's in this release

• Google Drive is a built-in API connection, beside Google Sheets. It
  asks only for the files you pick: the tab the sign-in ends in opens
  Google's file picker over your Drive, folders included, and workflows can
  list, read, export, copy, rename, and move what you picked. Upload a
  file sends a file from the device with its name and parent folder in
  one request. No Google Cloud client of your own is needed.
• Batches is now Sheets in the sidebar, the page title, and the
  history shortcut, since the page lists sheets and opens one sheet's grid.
• Your workspace's account has a page of its own in the app, at
  app.kitewell.com/account: the plan and its payment pages, the people and
  their invitations, who opens which synced project, teams to leave, and
  computers to disconnect. The desktop's account links lead there.
• A mail server's certificate you accepted as untrusted is now pinned.
  Connecting records the SHA-256 of the certificate the server presented,
  and both Kitewell and the bundled engine refuse a server that presents
  another one, asking to connect the mailbox again. Accepting used to turn
  certificate checking off for every later connection.
• The local sign-in is harder to guess at. Five failed sign-ins block the
  login for five minutes, a new password needs at least 8 characters, and
  the session cookie is marked Secure. A failed decryption of saved
  sign-ins or credentials answers one fixed message instead of its cause.
• New API keys expire in 90 days unless you pick another date or choose
  Never on purpose. Existing keys keep their expiry.
• The action panel shows the server an API action really calls, such as
  Drive's for Google Sheets' List spreadsheets, instead of always
  joining the connection's server with the path. API steps can send
  multipart/related bodies, which Google Drive's upload takes.
• A trial of Kitewell Team holds one project. A second project is refused
  with a word on subscribing to Personal or Team.
• Kitewell's site is kitewell.com. The support, community, download, and
  release-notes links the app opens lead there, and new builds check for
  updates at kitewell.com. Builds already installed keep updating from the
  address they were built with.
• In Kitewell Cloud, a browser step's screenshots, a run's files, and the
  artifact viewer's pictures open and download again; the tour no longer
  starts on every visit; changes are no longer refused after Dagu Cloud's
  sign-in cookie change; a project made there says Kitewell Cloud wakes it
  for its schedules instead of asking the device to stay awake; and signing
  out clears Kitewell's data from the browser. Every single-choice menu
  draws its chevron inside its border, and a sidebar link clicked with a
  pointer lets go of focus.
• The bundled engine is now Dagu 2.25.8. A spreadsheet write sets a number
  format per column, each failing precondition is logged with its secrets
  masked, an action's file paths resolve from the step's working directory,
  quoted references in a run command are left to the shell, and on Windows
  the rename that re-points a link is retried while Windows refuses it.
  Kitewell is built with Go 1.27.3, which fixes the standard-library
  vulnerabilities Go 1.27.0 carried.

Upgrading

Nothing to do. Kitewell 0.22.3, 0.22.2 and 0.22.1 update themselves to
0.23.0 at a quiet moment, and running workflows go on across the restart.