v0.1.7

faro 0.1.7

A bug-fix release. If you run faro on more than one machine with the same Signal account, please update every instance.

Fixed

• A crash when two faro instances run on the same account. When faro starts, it asks your other devices for their contact list. Another faro (or any other presage-based client) answered with a list that announces contact pictures but leaves them out, and faro crashed reading it with split_to out of bounds. faro now reads past the missing pictures. Until the fix lands upstream, faro builds on a patched copy of libsignal-service-rs.
• faro no longer keeps running on a broken screen after an internal error. Before, an unexpected error in one part of faro handed the terminal back while faro kept running: only the animated parts of the screen still drew, and new messages silently stopped arriving. Now faro shuts down cleanly, restores the terminal, and tells you where the log is (~/.local/share/faro/logs/faro.log by default). A malformed picture someone sends you is only logged and can't stop faro.

Install faro 0.1.7

Install prebuilt binaries via Homebrew

brew install harababurel/tap/faro

Download faro 0.1.7

File	Platform	Checksum
faro-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
faro-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
faro-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
faro-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo harababurel/faro

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> --repo harababurel/faro

v0.1.6

Pasting images beyond kitty

Ctrl+V used to paste images only in kitty. Now (#1):

• Terminals that can share their clipboard like kitty are asked first, also over SSH and inside tmux. Ghostty can do this in its current macOS nightly builds; it shows its own "allow clipboard access?" window.
• Any other terminal, when faro runs on your own computer: faro reads that computer's clipboard itself (macOS: osascript; Linux: wl-paste from wl-clipboard, or xclip). This works in Ghostty 1.3.1, Ghostty on Linux, and most other terminals.
• Privacy: the clipboard is read only when you press Ctrl+V, and only for an image, never text. The image is staged above the input and nothing is sent until you press Enter. Reading the computer's own clipboard can be turned off in Ctrl+P › Settings › Media › Paste from the system clipboard ([media] paste_from_system = false).
• Images that are only on the clipboard as TIFF (some macOS apps) are converted to PNG.
• Over SSH in terminals that can't share their clipboard, faro now says so ("Pasting images over SSH needs kitty or a newer Ghostty"). Dragging an image file into the terminal still works when faro runs on the same computer.

Other changes

• Dependency updates (42 crates) and updated GitHub Actions.

Install faro 0.1.6

Install prebuilt binaries via Homebrew

brew install harababurel/tap/faro

Download faro 0.1.6

File	Platform	Checksum
faro-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
faro-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
faro-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
faro-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo harababurel/faro

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> --repo harababurel/faro

v0.1.5

Security

• Updated TLS and crypto dependencies for seven recent advisories: rustls 0.23.46 (RUSTSEC-2026-0346, -0347, -0348, -0349), rustls-webpki 0.103.16 (RUSTSEC-2026-0382), webpki-root-certs 1.0.11 (RUSTSEC-2026-0383) and ctutils 0.4.5 (RUSTSEC-2026-0385). None of them looks exploitable in faro as it's used (faro doesn't use the affected TLS features, and Signal's connections only trust Signal's own certificate), but updating is recommended.

Build and release

• Every push is now checked for known vulnerabilities, licences and dependency sources (cargo deny), and dependency updates arrive as weekly pull requests.
• Release archives now come with signed build provenance. Check that an archive was built by this repository's CI from this tag with:

  gh attestation verify faro-x86_64-unknown-linux-gnu.tar.xz -R harababurel/faro

Install faro 0.1.5

Install prebuilt binaries via Homebrew

brew install harababurel/tap/faro

Download faro 0.1.5

File	Platform	Checksum
faro-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
faro-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
faro-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
faro-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo harababurel/faro

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation> --repo harababurel/faro

v0.1.4

New

• Update checks (opt-in). faro can tell you when a new release is out: turn on Check for updates in Ctrl+P › Settings › Updates (or [updates] check = true in the config). It asks GitHub for the latest release at start and every 12 hours, sending nothing but faro's version. You'll see a notice once, then a small ↑ x.y.z in the footer and Release notes in the palette. It's off by default: unless you turn it on, faro still talks only to Signal's servers.

Install faro 0.1.4

Install prebuilt binaries via Homebrew

brew install harababurel/tap/faro

Download faro 0.1.4

File	Platform	Checksum
faro-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
faro-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
faro-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
faro-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

v0.1.3

Security

• Fixes GHSA-wjhx-4prr-c426 (high). A bug in libsignal-service-rs, the library under presage, let anyone who knew your phone number forge "sync" messages: messages that appear as sent by you, or chats marked as read. faro now uses a fixed presage, and also ignores sync messages that don't come from your own account. Updating is recommended. Thanks to the Whisperfish maintainers for the fix and the heads-up.

Fixes

• Connecting to Signal could fail with "connection closed with status code 1000".
• Better handling of messages sent to your phone-number identity.

Install faro 0.1.3

Install prebuilt binaries via Homebrew

brew install harababurel/tap/faro

Download faro 0.1.3

File	Platform	Checksum
faro-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
faro-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
faro-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
faro-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

v0.1.2

What's new

• Voice note transcription settings in Ctrl+P › : › Voice notes: model, command, endpoint, remote model and language, with presets or your own value. Only the settings for the mode in use are active. faro tells you when the local Whisper command is missing and how to install it.
• Automatic transcription is now opt-in (Auto-transcribe); t still transcribes any voice note. If you relied on automatic transcription, turn it on.
• The default local model is now small. Remote transcription has its own model setting (default gpt-4o-mini-transcribe), and old configs keep working, with a warning.
• Transcripts show as one quoted paragraph, and long notes no longer time out after 2 minutes.
• faro demo: unread chats are the newest ones and come first in the list.

Install faro 0.1.2

Install prebuilt binaries via Homebrew

brew install harababurel/tap/faro

Download faro 0.1.2

File	Platform	Checksum
faro-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
faro-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
faro-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
faro-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

v0.1.1

Install faro 0.1.1

Install prebuilt binaries via Homebrew

brew install harababurel/tap/faro

Download faro 0.1.1

File	Platform	Checksum
faro-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
faro-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
faro-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
faro-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

v0.1.0

Install faro 0.1.0

Install prebuilt binaries via Homebrew

brew install harababurel/tap/faro

Download faro 0.1.0

File	Platform	Checksum
faro-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
faro-x86_64-apple-darwin.tar.xz	Intel macOS	checksum
faro-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
faro-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum