Belvedere 1.2.4

First released on 2026-09-15, the date of the v1.2.4 tag. This release page was re-created on 2026-10-08 when the repository was replaced, so GitHub shows that date; the file and its checksum are identical.

Belvedere 1.2.4

Based on Markdown Preview 0.0.58.

New in this release

• Opening a project folder widens where a document's images may load from: a
  document inside the opened folder can now reach anywhere within it, not just
  its own folder — the sidebar's root names which folder is in effect, the same
  way it always has. Matches Markdown Preview #337.
• Clicking a link is no longer bound to the document's folder — matching
  Markdown Preview, the click is the decision. A link to a program, script,
  installer or disk image is still shown in Finder rather than started,
  wherever it points.
• New from Markdown Preview 0.0.58: a leftover control from a stripped
  <form> — a button, input, or image sitting directly in the document —
  keeps its natural width instead of stretching across the column; images
  align with surrounding text and use normal paragraph spacing in both
  reading and editing; and the sidebar stops shrinking before its pane
  picker would overflow.

Changes on top of Markdown Preview 0.0.58

Belvedere is Markdown Preview with its network connections removed and its handling
of untrusted documents tightened. Reading, editing, printing, PDF export and Quick
Look are upstream's work.

It never connects on its own

• No crash reporting and no usage analytics. The code that sent them is gone, so
  Settings › Privacy states this instead of offering switches.
• No automatic updates, and no Check for Updates…. New versions come through
  Homebrew: brew upgrade --cask belvedere.

A document cannot reach the network, or files outside its folder

• Remote content — images, stylesheets, fonts, scripts — is blocked in the document
  window, the editor and Quick Look. A remote image shows as a placeholder naming its
  host, so opening a document never tells its author that you read it.
• Images load from the document's own folder, or — if you open the project folder
  it lives in — from that folder instead; the sidebar's root names which one is
  in effect. A file outside that boundary, or a remote image, shows as a
  placeholder with a Load button: one click, checked to be a real image
  first, and not remembered — a remote fetch carries no cookies and grants
  nothing to that host next time. Load all covers local files only. Quick Look
  has no opened folder to widen into, so it always uses the document's own, and
  names blocked files without offering Load.
• Clicking a link is never blocked by the folder boundary — matching Markdown
  Preview, the click is the decision, and its destination opens like any other file.
• A link to a program — an app, a script, an installer, a disk image — is shown in
  Finder rather than started, wherever it points, including inside the document's
  own folder or the opened project folder. Links to ordinary documents open as
  usual.
• A document cannot draw form controls — no text fields, dropdowns or other inputs
  that could imitate a sign-in prompt. Task-list checkboxes still work.

Ahead of Markdown Preview

Proposed to Markdown Preview and carried here until it merges them:

• A Save button in the default toolbar, lit whenever the document has unsaved
  changes. Leaving edit mode with unsaved changes asks
  Save / Revert… / Continue, with a setting to keep the old silent exit;
  Save As… and Revert to Saved work, and ⌘S works after leaving edit mode.

Its own app

• Named Belvedere, with its own icon and bundle identifier, so it installs alongside
  Markdown Preview instead of replacing it.
• The command-line tools installer is removed, along with the permission to control
  Terminal that it needed.
• The About box states the network posture above and credits Markdown Preview.
• Signed with Belvedere's own Developer ID, notarized by Apple, and distributed
  through the Homebrew tap inquinity/tap/belvedere.