Skip to content

bolt.gives v4.1.3

Latest
Latest

Choose a tag to compare

View all tags
@embire2 embire2 released this 21 Sep 19:22
v4.1.3
01f665a

bolt.gives v4.1.3

Release date: 21 September 2026

v4.1.3 is a database-onboarding and native-source patch. It does not change the hosted FREE model or quota introduced in v4.1.2.

Supabase setup

  • Generated projects remain database-free until the user opens Database.
  • The setup wizard offers Register Supabase for Free, opening Supabase registration in a new tab without losing the current project.
  • Existing Supabase users paste the Project URL and publishable/anon key from the project's Connect dialog.
  • The runtime accepts only an HTTPS project-ref.supabase.co origin, rejects secret and service-role keys, disables redirects, uses a bounded timeout, and verifies that Supabase accepts the key before saving.
  • Credential replacement is atomic. A failed URL, key, timeout, redirect or upstream response leaves the last working private record unchanged.
  • New PostgreSQL project connections are no longer offered or accepted. Existing private records remain readable for migration; optional PostgreSQL used by the bolt.gives control plane is separate.

The runtime injects both modern publishable-key variables and legacy anon aliases so existing generated apps continue to work:

VITE_SUPABASE_URL
VITE_SUPABASE_PUBLISHABLE_KEY
VITE_SUPABASE_ANON_KEY
SUPABASE_URL
SUPABASE_PUBLISHABLE_KEY
SUPABASE_ANON_KEY

Interface fixes

The history drawer now slides as an opaque surface rather than fading through the page. History-item actions use an opaque rail and shadow, preventing collapsed and hover text from drawing over project titles.

Managed fleet integrity

Managed-instance refreshes now require structured health metadata with the exact release version from both the immutable Cloudflare deployment URL and the canonical production alias. Queued deployments, stale aliases, redirects and generic HTTP 200 pages remain pending or fail with rollback-ready metadata instead of being recorded as healthy.

Native Windows

Desktop v1.11.0 is released independently under desktop-v1.11.0:

  • complete C#/.NET 8 WPF source under desktop/windows;
  • native Supabase registration, verification, replacement and disconnect workflow;
  • database-free isolated Live CLI provisioning;
  • Windows CI for restore, formatting, tests, signed self-contained publish, installer launch, successful update, forced post-install failure, rollback, and legacy relaunch;
  • strict verification of Microsoft's configured legacy AOC03/EOC01 hierarchy and current ID Verified AOC/EOC 03/04 issuer rotations, with the complete matching hierarchy and bolt.gives publisher identity pinned;
  • mandatory update metadata for older supported clients.

The application and installer contain no hosted provider key, signing credential, SMTP secret, infrastructure password, or profile token.

Install

The guarded Linux install and repair command remains:

curl -fsSL https://raw.githubusercontent.com/embire2/bolt.gives/v4.1.3/install.sh | sudo bash -s -- --version v4.1.3

The native Windows installer is published separately on the GitHub Releases page.

Assets 2
Loading