Skip to content

runcode v1.4.0

Latest
Latest

Choose a tag to compare

View all tags
@hami9 hami9 released this 29 Sep 16:20
· 6 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.4.0
48e81e1
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Project settings, encrypted secrets and fixes for editor data loss and service lifecycle bugs.

Changes

  • Configure environment variables, secret values, ports, restart policy, boot startup and resource limits from each project's settings.
  • Store secrets in the Android Keystore-backed vault. Project metadata keeps references; known secret values are masked in logs, crash reports and MCP text results.
  • Update plain settings through the new update_project_settings MCP tool. Manage secret values in the app.
  • Preserve unsaved editor content when changing projects, and keep the buffer if saving fails.
  • Fix restart retry counts, cancel pending restarts on Stop All, and keep blocked workers in the stopping state until they exit.
  • Reject archive entry points outside the source folder and remove imported secret references. Imported secrets must be configured again.
  • Use real Telegram polling and HTTP server templates for new projects. Existing scripts stay unchanged.

Install

Download runcode-v1.4.0.apk. Version code is 5, minimum Android version is 8.0 (API 26), and supported ABIs are arm64-v8a and x86_64.

The APK uses the same release certificate as v1.3.0, preserving signing compatibility for updates. Certificate SHA-256: 9e9e346c4a745f9d25c838b04e29221da3258f81b858ec3cb842449e19810568.

Validation

  • 32 JVM/Robolectric tests and five Python regression tests pass.
  • Android lint passes with no errors; dependency and resource warnings remain.
  • Release APK builds and its v2/v3 signatures verify.
  • SHA256SUMS.txt contains the checksum for the attached APK.

Known limits

  • One Python workload can run at a time because the embedded interpreter shares its environment and working directory. Static web services can still run alongside it. Python scripts and MCP clients remain trusted code with app privileges.
  • UI, Android Keystore and upgrade flows have not been tested on a device for this version. A live Telegram round trip has not been tested.
  • Exported source and data files are copied as written and may contain secrets placed there by user code; vault contents are excluded.

Changes: #1

Assets 5
Loading