v0.7.0 — tab dirty markers + redo chord

Added

• Unsaved-edit markers on request tabs. An open request tab shows a trailing * while its content differs from what's on disk, and clears it on Save (or an edit back to the saved value) — the same per-tab dirtiness the quit guard uses, so the marker and the "unsaved changes" prompt never disagree.
• Alternate redo chord. Ctrl/Cmd+Shift+Z now redoes in any text field (in addition to Ctrl+Y). Undo (Ctrl+Z) and redo already worked in the fields and the body/response editor; the F1 keyboard-shortcuts dialog and the user guide now document these editing shortcuts.

Full changelog: https://github.com/ideaconnect/helena/blob/v0.7.0/CHANGELOG.md

v0.6.0 — path parameters

Path parameters

A new Path tab fills the single-brace {name} placeholders in a request URL's path (e.g. {{base_url}}/users/{id}) — one row per placeholder, derived live from the URL, so you set a value instead of hand-editing the raw URL. The resolved preview under the URL shows the real target and flags any placeholder still unfilled. Path values may reference {{variables}} and ask-at-send {{?prompts}}, and the OpenAPI importer pre-fills them from each in: path parameter's schema default and description.

(This is distinct from {{name}} variables — double braces resolve from environments/collections, single braces are per-request path values.)

Fixed

• Open Collection type: path parameters now fill the URL path instead of the query string. A path parameter authored by Bruno (or hand-written) was loaded as an ordinary query param and appended to the query string on send; it now fills its {name} placeholder as intended.

Full changelog: https://github.com/ideaconnect/helena/blob/v0.6.0/CHANGELOG.md

v0.5.3

Fixed

• Keyboard shortcuts now work while a text field or editor has focus. Every app shortcut (Send, Save, Open, Import, New request/collection, Duplicate, Undo delete, Edit environments, Settings) was registered only against the window canvas; Fyne only dispatches a canvas-level shortcut when the focused widget doesn't itself handle shortcuts — and the URL bar, every auth field, the body/response editors, and the other text fields all do. In practice a shortcut went silently dead the moment any of them had focus, which is most of a normal session.

Security

• Dependency bump: go-fyne-pretty-view bumped to v2.4.1-alpha, closing the same GO-2026-5856 crypto/tls toolchain vulnerability in that dependency's own pinned build (already fixed for Helena's own toolchain in v0.5.2).

Downloads

Linux (amd64), Windows (amd64 & arm64), and macOS (arm64) binaries plus .deb/.rpm, SHA256SUMS, SBOM, and a provenance attestation are attached below once the build finishes.

Full notes: CHANGELOG.

v0.5.2 — import & robustness fixes

Bug-fix release focused on imports, scripting / WebSocket robustness, and the Windows Store icon.

🐛 Fixes

Import (OpenAPI / Swagger / Postman)

• Imported requests now populate their body — bodies described by a $ref schema with no inline example (the common case) are synthesized into a representative JSON body; Swagger-2 */* bodies are treated as JSON. (#183)
• No more double slash between the base URL and the request path. (#183)
• The imported environment is named after the spec's server (its description) instead of a generic "Default". (#183)
• Postman collections using the bare-URL request shorthand import again instead of failing wholesale. (#188)

Scripting

• A pre-request script can no longer hang the app with a hostile getter on the request object — the post-script read-back is now bounded by the same interrupt guard as execution. (#187)
• Runaway console.log / test(...) output is capped instead of exhausting memory and freezing the UI. (#190)

Networking

• A stalled WebSocket server no longer freezes the app — frame writes (on the UI thread) now use a write deadline. (#189)

Windows Store

• The taskbar icon no longer shows a blue background — the MSIX now ships unplated icon variants + a resources.pri. (Takes effect on the next Store rebuild.) (#184)

🔒 Security

• Go toolchain bumped to 1.26.5 (crypto/tls ECH fix, GO-2026-5856).

---

Binaries for Linux, macOS (Apple Silicon) and Windows, plus .deb / .rpm, are attached below once CI finishes. Full details in CHANGELOG.md.

v0.5.1

A packaging patch that fixes the Microsoft Store submission. No application changes.

Fixed

• Store package name: the Store .msixbundle now declares the reserved product name Helena API Client as its package display name (Package/Properties/DisplayName). v0.5.0's Store bundle was rejected at upload for using the unreserved "Helena". The on-device app/tile name stays "Helena".

Note for direct downloaders

The desktop binaries (Linux / Windows / macOS) are functionally identical to v0.5.0 — only the version stamp and the Windows Store package metadata changed. If you don't install from the Microsoft Store, there's nothing new to update for.

Downloads

Linux (amd64), Windows (amd64 & arm64), and macOS (arm64) binaries plus .deb/.rpm, SHA256SUMS, SBOM, and a provenance attestation are attached below once the build finishes.

Full notes: CHANGELOG.

v0.5.0

Added

• Status bar with the running version and an opt-in "Check for updates" that queries the latest GitHub release only when clicked — never automatically, keeping the no-background-traffic guarantee.
• About-dialog tribute: Help → About now shows a photo of Helena, the cat the app is named after, with a short note.
• Help menu: a Website link (idct.tech/helena) and a Buy me a coffee link.
• A brief "Saving…" spinner when closing the window.
• Roomier Open / Save / Folder dialogs — larger than Fyne's cramped default.

Changed

• Releases are now cut by publishing a GitHub Release; CI builds every platform + the Linux packages and attaches them here, and separately builds the Windows Store .msixbundle as a workflow artifact.

Downloads

Linux (amd64), Windows (amd64 & arm64), and macOS (arm64) binaries plus .deb/.rpm, SHA256SUMS, SBOM, and a provenance attestation are attached below once the build finishes.

Full notes: CHANGELOG.

v0.4.0

What's Changed

Other changes

• Deps upgrade + website (SEO/WebP/support links) + Pages deploy to helena.idct.tech by @bpacholek in #132
• perf: cut resident memory (no_emoji release build −75MB, reclaim large bodies) + honest memory docs by @bpacholek in #133
• perf: 7x faster startup — theme-scope reduction, parallel load, icon diet by @bpacholek in #136
• perf: script compile cache + 16 MiB response-viewer parse cap by @bpacholek in #135
• fix: SSE streams outlive the request timeout; in-place collection removal by @bpacholek in #137
• docs: true up memory figures to current measurements by @bpacholek in #138
• feat(ui): confirm before quitting with unsaved request edits (#139) by @bpacholek in #143
• feat(runner): machine-readable helena run --format json|junit (#90) by @bpacholek in #145
• build(ci): trial native windows/arm64 build leg (#142) by @bpacholek in #144
• feat(runner): folder-scoped runs (GUI + helena run --folder) (#89) by @bpacholek in #146
• feat: request/response history — record, restore, resend (#65) by @bpacholek in #147
• fix(ui): detach Variables/Assertions in snapshotRequest; skip aborts in history by @bpacholek in #148
• chore: remove Code of Conduct; roadmap polish (folder-run + CI reports) by @bpacholek in #149
• fix: send-path auth race, history corruption, and a phantom quit prompt by @bpacholek in #150
• fix(httpclient): scheme-downgrade credential leak; surface original 401 on Digest/NTLM retry failure by @bpacholek in #151
• fix(chain,vars): ID-only chain refs, object-property aliases, memoize var expansion by @bpacholek in #152
• fix(importer): never crash on a malformed spec (remote-crash via Import-from-URL) by @bpacholek in #153
• fix(session): carry active env on collection reorder; make undo index-shift-safe by @bpacholek in #154

New Contributors

• @bpacholek made their first contribution in #132

Full Changelog: https://github.com/ideaconnect/helena/commits/v0.4.0