Hecate v0.6.0

This release makes desktop updates and Hecate Cloud sign-in calmer and more
trustworthy, with clearer operator-facing release information.

Highlights

Desktop updates now lead with curated highlights and keep full notes on demand.
Update actions are now Update and restart or Later.
macOS restores Cloud credentials without surprise Keychain password prompts.
Release and debug builds use separate credential identities.
The website now explains the operator workflow and fits compact screens.
Release publication now binds reviewed notes, versions, signatures, and artifacts.

Linux desktop builds backport the upstream GLib VariantStrIter soundness fix while Tauri 2 remains on GTK3.
Background macOS credential restore and cleanup cannot request Keychain UI.
Release CI verifies app identity and updater signatures before publishing.

macOS Cloud credentials now use the sh.hecate.app.cloud.v2 Keychain service.
After updating, sign in once in the browser; incompatible legacy items are not opened.
No runtime API, operator configuration, or storage migration is required.
Maintainers must use a stable tag and canonical --notes file; prerelease tags are rejected.

Release gate: just verify.
Merged changes passed the required Go, Rust, TypeScript, browser, Docker, unsigned mobile compile, and desktop bundle CI checks.

Hecate remains pre-1.0. Review the tracked known limitations and back up persistent data before upgrading.
A desktop connection requires Hecate to remain open; the mobile app cannot wake a Mac or launch its desktop app.
Owners and admins can start a stopped Cloud-managed hosted runtime; manually registered runtimes still require their operator.
macOS Apple Silicon is launch-tested; Linux and Windows desktop bundles are CI-built but remain experimental.
Mobile jobs validate compilation; they do not produce App Store or Google Play packages.