Tresso v0.4.0

What's new

• New: Save the draft and wait for uploads before restarting into an update
• New: Let the web client hold Sparkle's relaunch
• New: Save the open draft at once and say what a restart would cut short
• New: Run the macOS app with the hardened runtime
• New: Name the bought organization in Checkout's return address
• New: Cover the app with a notice when the subscription ended
• New: Show the payment screen when the subscription ended
• New: Describe a billing status for the clients
• New: Bill organizations through Stripe on a server that bills
• New: Say what this server is at /api/v1/server-info
• New: Publish server images and a production compose file
• New: Refuse a production start with missing or development secrets
• New: Read the API address from config.js when it is served
• New: Give every user a personal organization
• Fixed: Refuse to discard a draft while it is sent or deleted
• Fixed: Say when a restart waits for a draft being deleted
• Fixed: Hold writes per draft while it is sent or deleted
• Fixed: Hold autosaves while a draft is sent or deleted, and name the save that failed
• Fixed: Go back from waiting when the save after the wait fails
• Fixed: Hand a loading page only a relaunch question nobody answered
• Fixed: Keep saving what is typed during saveNow, and never write a draft being sent
• Fixed: Prepare one restart at a time and keep checking while a download waits
• Fixed: Ask a page that loads again about a relaunch Sparkle holds
• Fixed: Let saveNow fail when the draft could not be saved
• Fixed: Stop every key while the payment screen shows
• Fixed: Ignore a stale 401 and show sign-out as busy
• Fixed: Keep every shortcut and stale answer out of a blocked session
• Fixed: Keep the payment notice on top and honest
• Fixed: Restart the app when access returns and harden the payment screen
• Fixed: Let a blocked user remove a device when signing out
• Fixed: Answer 409 when billing changed during a checkout
• Fixed: Never leave a transaction open in the nightly billing check
• Fixed: Read the subscription again after locking it
• Fixed: Lock before asking Stripe and never link a forgotten customer
• Fixed: Close the billing gaps the review found
• Fixed: Require origins in the spelling browsers send
• Fixed: Take CORS origins as a list, not a regular expression
• Fixed: Refuse CORS rules that also allow other sites
• Fixed: Build the server images on every change and move tags only forward
• Fixed: Keep the production stack and its keys safe on restarts
• Fixed: Check addresses, CORS, optional secrets and the database password
• Fixed: Revalidate every app page and never cache a missing asset
• Fixed: Put the user's own personal organization first

Install

macOS and Linux:

curl -fsSL https://sherin.dev/tresso/install.sh | bash

Windows (PowerShell):

powershell -c "irm https://sherin.dev/tresso/install.ps1|iex"

Or download an installer below. Every file is listed in SHA256SUMS. The macOS app is not notarized yet: after
opening the .dmg, use System Settings > Privacy & Security > Open Anyway once.