Releases: docflowlocal/docflow-desktop
Release list
DocFlow Local 0.6.1-preview.2 — Windows Self-Signed Preview
Windows x64 — Self-Signed Preview
DocFlow Local Community 0.6.1-preview.2 is a separate Windows test release with English and Simplified Chinese. Community remains free, with no registration or document-count charges.
This is not a publicly trusted Windows production release. It uses a project-controlled self-signed certificate, not a SignPath Foundation certificate. The SignPath application remains pending. SmartScreen may warn, and Smart App Control or organizational policy may block the application. Do not disable Windows security protections or bypass IT policy to install this Preview. Use it only in personally owned or IT-approved test environments; otherwise wait for the trusted release.
Downloads
- Installer:
DocFlow-Local-Setup-0.6.1-preview.2-x64-Self-Signed-Preview.exe - Portable:
DocFlow-Local-0.6.1-preview.2-Windows-x64-Self-Signed-Preview.exe - Verification:
SHA256SUMS.txt,build-info.json, andsignature-verification.json - Dependency inventory:
docflow-local-0.6.1-preview.2-windows-x64.cdx.json - Public certificate:
DocFlow-Local-Preview-CodeSigning.cer - Bilingual guidance:
WINDOWS_SELF_SIGNED_PREVIEW.md
Check the SHA-256 of the exact executable against SHA256SUMS.txt. The expected certificate SHA-1 thumbprint is 3BDE0D54717DC1A0C7BB19B36B3C2B90A6C00337; this identifies the certificate, not the executable checksum. The app and installer never import certificates or change Windows trust stores automatically. No private key or PFX is included.
Build provenance
- Source tag:
v0.6.1-preview.2 - Source commit:
333646aa8fbab30db845d1ef62546045c306c658 - Reviewed source change
- Windows build and verification record
The Windows pipeline runs desktop/release tests, packages both executables, checks the packaged app, and verifies SHA-256 Authenticode signatures plus timestamps against the pinned Preview certificate. The pinned certificate is temporarily trusted only on the isolated CI runner for verification; that result does not establish public trust on customer computers. See the attached verification records and guide for details.
The existing macOS 0.6.0 release is unchanged and remains the latest stable release. This Preview does not satisfy the stable Windows release-signing gate.
中文说明
这是 DocFlow Local Community 0.6.1-preview.2 Windows x64 自签名预览版,支持中文与 English,提供安装版与便携版。社区版继续免费、无需注册,不按生成文档数量收费。
此包不是公众可信签名的 Windows 正式版。 当前使用项目自签名证书,不是 SignPath Foundation 证书,SignPath 申请仍在等待批准。Windows SmartScreen 仍可能提示,Smart App Control 或企业策略仍可能阻止运行。请勿为了安装此版本关闭系统安全保护或绕过 IT 策略;仅用于自有或经 IT 批准的测试环境,否则请等待可信签名正式版。
下载后请使用 SHA256SUMS.txt 核对对应 EXE 的 SHA-256,并阅读 WINDOWS_SELF_SIGNED_PREVIEW.md。附件同时提供公开证书、源码提交信息、构建记录、依赖清单与签名验证记录;不包含私钥、PFX 或密码。安装器和应用不会自动导入证书或更改 Windows 信任设置。
macOS 0.6.0 正式版保持不变。本预览版不会替代或降低正式 Windows 发布所需的可信签名要求。
DocFlow Local 0.6.0 — macOS Apple Silicon
Community desktop release
DocFlow Local 0.6.0 makes the first useful result easier to reach and real recurring document batches easier to repeat, all on the user computer.
Highlights
- Four guided starters: trade quotation, engineering handover, HR onboarding, and compliance delivery
- Reusable local .docflow projects with atomic save/open
- Privacy-safe .docflowrecipe sharing that excludes customer rows, source files, generated output, and binary assets
- Local activation and repeat-use tracking without uploading document contents or customer data
- Core 0.1.1 bounded image parsing and a reviewed dependency lock with zero known npm vulnerabilities at release time
- Community remains free without registration, watermarks, document-count limits, or cloud uploads
The public Community installer does not contain the private Pro implementation, production license keyring, signing keys, or unattended automation service. Windows installers will follow after Authenticode signing is complete.
Code signing policy
Free code signing provided by SignPath.io, certificate by SignPath Foundation.
This attribution applies to future Windows Community artifacts signed through the published policy. No Windows artifact is described as signed until its Authenticode signature verifies. Community, Core, contracts, and the license verifier are not offered under a proprietary alternative license. Private Pro modules and commercial packages are excluded from the SignPath signing scope.
Policy: https://github.com/docflowlocal/docflow-desktop/blob/main/CODE_SIGNING_POLICY.md
Install
Download the .pkg for the standard macOS Apple Silicon installation flow. The .zip contains the same Developer ID-signed and Apple-notarized app bundle as a portable archive.
Verification
Source commit: ac5ba93
f0b503f60177d7e111d4cb62a4bcdf9734f55400c3b218eae939b1a84646be51 DocFlow-Local-0.6.0-macOS-arm64.pkg
5b531c32add80872eecb1c8003f6fa146a29afaf129d8abf30a2b274614caff1 DocFlow-Local-0.6.0-macOS-arm64.zip
99ddd48f2d2c7791374b5dd87b82d5fe8bbecb4acab0e9f223a6d43e30af5bf1 docflow-local-0.6.0-macOS-arm64.cdx.json
348f85d2100e11719eb237919628ffd9f758d36383becbeb39f97279c1b96904 release-manifest.json
The release includes a CycloneDX 1.5 SBOM and a machine-readable manifest binding the artifacts to the reviewed source commit.
Community 桌面版
DocFlow Local 0.6.0 新增外贸报价、工程移交、HR 入职和合规材料四个引导场景,并支持本地项目保存与隐私安全的工作流配方分享。Community 无需注册、不加水印、不按文档数量收费,客户文档不会上传。
.pkg 适合标准安装;.zip 提供同一份已通过 Developer ID 签名和 Apple 公证的便携应用。公开 Community 安装包不包含私有 Pro 实现或生产密钥。
未来的 Windows Community 安装包仅在 Authenticode 验证通过后才会发布为已签名版本。完整代码签名政策见:
https://github.com/docflowlocal/docflow-desktop/blob/main/CODE_SIGNING_POLICY.md
DocFlow Local 0.5.0 — macOS Apple Silicon
Community desktop release
DocFlow Local 0.5.0 is the first signed Community desktop release for macOS Apple Silicon.
- Apple Developer ID signed and Apple notarized
- Processes documents locally; no customer files are uploaded by the application
- Includes Excel/CSV/JSON import, template mapping, batch generation, naming, conditions, calculations, and validation
- Windows release will follow after Authenticode signing is complete
Install
Download the .pkg installer for the standard macOS installation flow. The .zip contains the notarized app bundle for users who prefer a portable archive.
SHA-256
e0a5911414e5d0c3c21ffa1b20638db0d1fdf77725714ddbc47b5b394ed6c425 DocFlow-Local-0.5.0-macOS-arm64.pkg
7d0fae6b4ee997d7c4bded3cc91fbd51c54c2df719954fff7c4e51d773594af2 DocFlow-Local-0.5.0-macOS-arm64.zip
The release also includes a CycloneDX SBOM and machine-readable release manifest.