1.1.4

A release about signing in once: GitBox authenticates to your remotes over HTTPS and SSH, remembers the credentials per host, and needs no system git to do it.

Private remotes were the gap. A self-hosted GitLab, Gitea or Azure repository has no OAuth flow to fall back on, so fetch, pull and push against one had nowhere to get a credential from.

Added

Per-host credentials, encrypted through the OS keychain. Tokens are stored outside the settings file, in an owner-only file encrypted with safeStorage, and the plaintext never returns to the renderer. Clone, fetch, pull and push resolve a credential in order: an OAuth token for the hosts that have an integration, otherwise the stored one for that host, otherwise your own configured git credential helper — read from global and system config only, never from a repository's own .git/config. When a remote refuses what it was given, GitBox asks for the credential and retries the operation rather than failing outright. Manage them from Settings › Credentials.

SSH remotes work in the packaged build. libssh2 and OpenSSL are linked statically into the native addon, so SSH is a transport GitBox carries with it rather than something it borrows from the system.

The theme gallery works offline, and remembers your favourites. Preview images are cached on disk as data URLs, with a skeleton while they load and a colour-based preview when there is nothing to show. Favourited themes sort to the top of the gallery.

Fixed

Packaged and dev builds no longer disagree about where your data lives. Electron caches userData on first access, and the application name was being set after the first read — so the two builds resolved to different store directories, and an account connected in one appeared disconnected in the other, with remote operations failing to authenticate. The name is now set first, the legacy store is adopted on upgrade so no integrations, repositories or preferences are lost, and any token still sitting in the settings file is migrated into the encrypted store. An unreadable config is kept as a .corrupt copy instead of being overwritten, so a bad write cannot erase settings that could still be recovered.

Focus outlines no longer paint the system accent colour over the UI. They were drawn over inputs, menus and dialogs, including ones rendered outside the main tree.

Downloads

• Linux — AppImage, .deb, .rpm, .pacman
• Windows — .exe (NSIS installer) or .msi

Existing installs update in place through the built-in updater.