River v0.1.0-alpha.6 — Signed native app updates

River 0.1.0-alpha.6

Native in-app updates for River. The interface is currently in Korean.

Download the Apple Silicon DMG · All release assets

Changes

• Check for new releases daily, or use River → 업데이트 확인…. Native Settings provides the automatic-check preference and last-check time.
• Download and install updates from inside River using Sparkle 2.10.0. Both feed and archive signatures are required. Installation and restart require user action; silent automatic installs are disabled.
• Postpone update restart while Git requests, clone, Task preparation or Task-information writes remain active, including work in previously visited locations.
• Confirm session draft loss and uncertain write outcomes before restart. Choosing Later keeps the app open and leaves installation reachable from the menu/Settings. Existing Git notices and engine ownership protections remain intact.
• Publish signed appcasts on a separate metadata branch after verifying immutable release downloads. Future update order uses increasing numeric build numbers.

Alpha.5 and earlier do not contain an updater. Install alpha.6 manually once; future releases can then be installed in the app. See the update guide.

Install and compatibility

Open the DMG, drag River.app into Applications, eject the image, then launch River. Apple command-line Git is required; remote operations require Git 2.41 or later. The built-in example additionally needs python3.

Item	This release
Architecture	Apple Silicon, arm64; no Intel/universal2 artifact
Declared minimum	macOS 14
Tested runtime	macOS 27.0.1; macOS 14–26 remains unverified
Bundle version	0.1.0, build 7; full version 0.1.0-alpha.6
Updater	Sparkle 2.10.0; signed feed and archive; manual installation/restart consent

The app, embedded updater/helper code and DMG are Developer ID-signed with hardened runtime and secure timestamps. Apple notarization is not completed, so macOS may block first launch. Review Apple's Open Anyway instructions if you choose to trust this alpha.

Verification and limits

Regression checks cover update policy, postponed/resumed restart, hidden-location work, unknown outcomes, nested signatures, framework provenance and feed/archive verification. Developer validation passes 168 Swift and 56 Python tests; unchanged Rust sources retain alpha.5’s 119-test validation. Public-key CryptoKit checks include real signed-feed/archive round trips and tamper rejection. Release records distinguish native/public checks from source tests. Parser/information checks do not certify an OS-driven installation/relaunch, VoiceOver, older macOS or large-repository performance.

Git operations retain the current limits, including no general checkout/merge/rebase/conflict-resolution UI, discard, stash apply or provider PR APIs. Existing session drafts remain session-only. Busy/borrowed engines are preserved rather than forcibly terminated. The project license remains undecided; bundled Sparkle retains its own included license.

Verify the download

Download the DMG and matching SHA-256 sidecar, then run:

shasum -a 256 -c River-0.1.0-alpha.6-macos-arm64.dmg.sha256

The manifest records clean source provenance, update configuration and payload hashes. Hashes and signatures are separate from Apple notarization.