Ditero 0.0.1-alpha.12

Ditero 0.0.1-alpha.12 is an experimental alpha for self-hosted testing. Back up your database and attachments before upgrading.

Server: multi-architecture amd64/arm64 Alpine app, Debian app, and Zero images at ghcr.io/iuliandita/ditero:0.0.1-alpha.12, :0.0.1-alpha.12-debian, and :0.0.1-alpha.12-zero. See the image digest files and SPDX SBOMs. Images are signed with keyless cosign; verify the release workflow identity before deployment.

Deployment: the Helm chart uses external PostgreSQL with logical replication and an existing Secret; see the README inside the chart. The Kustomize archive provides app and Zero manifests for external PostgreSQL; its guide describes local rendering and the remaining cluster qualification. The Compose archive includes the bundled database initialization files. Set DITERO_IMAGE_TAG=0.0.1-alpha.12 when running Compose.

Desktop: Linux x86_64 DEB/AppImage, unsigned Windows x86_64 installer, and ad-hoc signed macOS Apple Silicon DMG. Windows and macOS downloads have no trusted publisher signature or notarization. Native qualification, general deep links and automatic updates remain incomplete.

Android: signed independent APK and AAB, with UnifiedPush and no Google SDK configuration. The AAB is for distribution tooling, not direct installation. Broader device qualification remains open; no store distribution is configured.

Verify downloads with sha256sum -c SHA256SUMS.txt. Checksums verify downloaded bytes; they do not replace platform signing or runtime qualification. This prerelease does not move latest or stable image channels.

The same versioned server images also publish to docker.io/iuliandita/ditero.

Ditero 0.0.1-alpha.11

Ditero 0.0.1-alpha.11 is an experimental alpha for self-hosted testing. Back up your database and attachments before upgrading.

Server: multi-architecture amd64/arm64 Alpine app, Debian app, and Zero images at ghcr.io/iuliandita/ditero:0.0.1-alpha.11, :0.0.1-alpha.11-debian, and :0.0.1-alpha.11-zero. See the image digest files and SPDX SBOMs. Images are signed with keyless cosign; verify the release workflow identity before deployment.

Deployment: the Helm chart uses external PostgreSQL with logical replication and an existing Secret; see the README inside the chart. The Kustomize archive provides app and Zero manifests for external PostgreSQL; its guide describes local rendering and the remaining cluster qualification. The Compose archive includes the bundled database initialization files. Set DITERO_IMAGE_TAG=0.0.1-alpha.11 when running Compose.

Desktop: Linux x86_64 DEB/AppImage, unsigned Windows x86_64 installer, and ad-hoc signed macOS Apple Silicon DMG. Windows and macOS downloads have no trusted publisher signature or notarization. Native qualification, general deep links and automatic updates remain incomplete.

Android: signed independent APK and AAB, with UnifiedPush and no Google SDK configuration. The AAB is for distribution tooling, not direct installation. Broader device qualification remains open; no store distribution is configured.

Verify downloads with sha256sum -c SHA256SUMS.txt. Checksums verify downloaded bytes; they do not replace platform signing or runtime qualification. This prerelease does not move latest or stable image channels.

The same versioned server images also publish to docker.io/iuliandita/ditero.

Ditero 0.0.1-alpha.10

Ditero 0.0.1-alpha.10 is an experimental alpha for self-hosted testing. Back up your database and attachments before upgrading.

Server: multi-architecture amd64/arm64 Alpine app, Debian app, and Zero images at ghcr.io/iuliandita/ditero:0.0.1-alpha.10, :0.0.1-alpha.10-debian, and :0.0.1-alpha.10-zero. See the image digest files and SPDX SBOMs. Images are signed with keyless cosign; verify the release workflow identity before deployment.

Deployment: the Helm chart uses external PostgreSQL with logical replication and an existing Secret; see the README inside the chart. The Kustomize archive provides app and Zero manifests for external PostgreSQL; its guide describes local rendering and the remaining cluster qualification. The Compose archive includes the bundled database initialization files. Set DITERO_IMAGE_TAG=0.0.1-alpha.10 when running Compose.

Desktop: Linux x86_64 DEB/AppImage, unsigned Windows x86_64 installer, and ad-hoc signed macOS Apple Silicon DMG. Windows and macOS downloads have no trusted publisher signature or notarization. Native qualification, general deep links and automatic updates remain incomplete.

Android: signed independent APK and AAB, with UnifiedPush and no Google SDK configuration. The AAB is for distribution tooling, not direct installation. Broader device qualification remains open; no store distribution is configured.

Verify downloads with sha256sum -c SHA256SUMS.txt. Checksums verify downloaded bytes; they do not replace platform signing or runtime qualification. This prerelease does not move latest or stable image channels.

The same versioned server images also publish to docker.io/iuliandita/ditero.

Ditero 0.0.1-alpha.9

Ditero 0.0.1-alpha.9 is an experimental alpha for self-hosted testing. Back up your database and attachments before upgrading.

Server: multi-architecture amd64/arm64 Alpine app, Debian app, and Zero images at ghcr.io/iuliandita/ditero:0.0.1-alpha.9, :0.0.1-alpha.9-debian, and :0.0.1-alpha.9-zero. See the image digest files and SPDX SBOMs. Images are signed with keyless cosign; verify the release workflow identity before deployment.

Deployment: the Helm chart uses external PostgreSQL with logical replication and an existing Secret; see the README inside the chart. The Kustomize archive provides app and Zero manifests for external PostgreSQL; its guide describes local rendering and the remaining cluster qualification. The Compose archive includes the bundled database initialization files. Set DITERO_IMAGE_TAG=0.0.1-alpha.9 when running Compose.

Desktop: Linux x86_64 DEB/AppImage, unsigned Windows x86_64 installer, and ad-hoc signed macOS Apple Silicon DMG. Windows and macOS downloads have no trusted publisher signature or notarization. Native qualification, general deep links and automatic updates remain incomplete.

Android: signed independent APK and AAB, with UnifiedPush and no Google SDK configuration. The AAB is for distribution tooling, not direct installation. Broader device qualification remains open; no store distribution is configured.

Verify downloads with sha256sum -c SHA256SUMS.txt. Checksums verify downloaded bytes; they do not replace platform signing or runtime qualification. This prerelease does not move latest or stable image channels.

The same versioned server images also publish to docker.io/iuliandita/ditero.

Ditero 0.0.1-alpha.8

Ditero 0.0.1-alpha.8 is an experimental alpha for self-hosted testing. Back up your database and attachments before upgrading.

Linux desktop can now export selected encrypted files as a paired content JSON and encrypted attachment archive from Settings. Each document is limited to 32 MiB and saved through its own system save dialog. Keep both files, and store the archive passphrase securely. The native export captures the current account and server, uses a fixed authenticated endpoint, and shares export concurrency limits with the browser. Archive import and recovery remain browser-only. (#956, #957)

The integration object-store fixture now uses pinned SeaweedFS 4.48 with authenticated S3 access, a nonroot identity and bounded resources. This replaces the vulnerable fixture image while preserving the test runner's existing service and storage contracts. These synthetic fixture settings are not deployment guidance. (#954, #955)

Shared workspace key grants now work for legitimate recipients under the application's restricted database roles. Recipient identity checks stay serialized with key rotation, preserving the checks against concurrent identity changes. (#962, #965)

This remains an experimental prerelease. Linux archive export does not establish new platform support or complete native runtime qualification. Windows and macOS archive export still require the browser; Android archive export is unavailable. Windows installers remain unsigned, macOS installers remain ad-hoc signed and unnotarized, and broader device/platform, deep-link and automatic-update qualification remains incomplete. Standalone CLI, MCP and TUI downloads remain excluded pending #575.

Server: multi-architecture amd64/arm64 Alpine app, Debian app, and Zero images at ghcr.io/iuliandita/ditero:0.0.1-alpha.8, :0.0.1-alpha.8-debian, and :0.0.1-alpha.8-zero. See the image digest files and SPDX SBOMs. Images are signed with keyless cosign; verify the release workflow identity before deployment.

Deployment: the Helm chart uses external PostgreSQL with logical replication and an existing Secret; see the README inside the chart. The Kustomize archive provides app and Zero manifests for external PostgreSQL; its guide describes local rendering and the remaining cluster qualification. The Compose archive includes the bundled database initialization files. Set DITERO_IMAGE_TAG=0.0.1-alpha.8 when running Compose.

Desktop: Linux x86_64 DEB/AppImage, unsigned Windows x86_64 installer, and ad-hoc signed macOS Apple Silicon DMG. Windows and macOS downloads have no trusted publisher signature or notarization. Native qualification, general deep links and automatic updates remain incomplete.

Android: signed independent APK and AAB, with UnifiedPush and no Google SDK configuration. The AAB is for distribution tooling, not direct installation. Broader device qualification remains open; no store distribution is configured.

Verify downloads with sha256sum -c SHA256SUMS.txt. Checksums verify downloaded bytes; they do not replace platform signing or runtime qualification. This prerelease does not move latest or stable image channels.

The same versioned server images also publish to docker.io/iuliandita/ditero.

Ditero 0.0.1-alpha.7

Ditero 0.0.1-alpha.7 is an experimental alpha for self-hosted testing. Back up your database and attachments before upgrading.

Server: multi-architecture amd64/arm64 Alpine app, Debian app, and Zero images at ghcr.io/iuliandita/ditero:0.0.1-alpha.7, :0.0.1-alpha.7-debian, and :0.0.1-alpha.7-zero. See the image digest files and SPDX SBOMs. Images are signed with keyless cosign; verify the release workflow identity before deployment.

Deployment: the Helm chart uses external PostgreSQL with logical replication and an existing Secret; see the README inside the chart. The Kustomize archive provides app and Zero manifests for external PostgreSQL; its guide describes local rendering and the remaining cluster qualification. The Compose archive includes the bundled database initialization files. Set DITERO_IMAGE_TAG=0.0.1-alpha.7 when running Compose.

Desktop: Linux x86_64 DEB/AppImage, unsigned Windows x86_64 installer, and ad-hoc signed macOS Apple Silicon DMG. Windows and macOS downloads have no trusted publisher signature or notarization. Native qualification, general deep links and automatic updates remain incomplete.

Android: signed independent APK and AAB, with UnifiedPush and no Google SDK configuration. The AAB is for distribution tooling, not direct installation. Broader device qualification remains open; no store distribution is configured.

Verify downloads with sha256sum -c SHA256SUMS.txt. Checksums verify downloaded bytes; they do not replace platform signing or runtime qualification. This prerelease does not move latest or stable image channels.

The same versioned server images also publish to docker.io/iuliandita/ditero.

Deployment guide correction: the Helm and Kustomize archives contain older 0.0.1-alpha.6 example commands. Use 0.0.1-alpha.7 for the chart/app and 0.0.1-alpha.7-zero for Zero. The packaged manifests and images already use Alpha 7. See #952 for the guide correction.

Ditero 0.0.1-alpha.6

Ditero 0.0.1-alpha.6 is an experimental alpha for self-hosted testing. Back up your database and attachments before upgrading.

Server: multi-architecture amd64/arm64 Alpine app, Debian app, and Zero images at ghcr.io/iuliandita/ditero:0.0.1-alpha.6, :0.0.1-alpha.6-debian, and :0.0.1-alpha.6-zero. See the image digest files and SPDX SBOMs. Images are signed with keyless cosign; verify the release workflow identity before deployment.

Deployment: the Helm chart uses external PostgreSQL with logical replication and an existing Secret; see the README inside the chart. The Kustomize archive provides app and Zero manifests for external PostgreSQL; its guide describes local rendering and the remaining cluster qualification. The Compose archive includes the bundled database initialization files. Set DITERO_IMAGE_TAG=0.0.1-alpha.6 when running Compose.

Desktop: Linux x86_64 DEB/AppImage, unsigned Windows x86_64 installer, and ad-hoc signed macOS Apple Silicon DMG. Windows and macOS downloads have no trusted publisher signature or notarization. Native qualification, general deep links and automatic updates remain incomplete.

Android: signed independent APK and AAB, with UnifiedPush and no Google SDK configuration. The AAB is for distribution tooling, not direct installation. Broader device qualification remains open; no store distribution is configured.

Verify downloads with sha256sum -c SHA256SUMS.txt. Checksums verify downloaded bytes; they do not replace platform signing or runtime qualification. This prerelease does not move latest or stable image channels.

The same versioned server images also publish to docker.io/iuliandita/ditero.

Ditero 0.0.1-alpha.5

This alpha fixes opening existing encrypted attachments and keeps saved content imports usable while their source listing is delayed. The import guide now explains the paired content/file archives and recovery limits.

All 16 published assets, 15 checksums, Android signing identity, and container signatures, provenance and SBOMs passed verification. Android version code is 5. Native device and platform qualification remains separate.

Ditero 0.0.1-alpha.5 is an experimental alpha for self-hosted testing. Back up your database and attachments before upgrading.

Server: multi-architecture amd64/arm64 Alpine app, Debian app, and Zero images at ghcr.io/iuliandita/ditero:0.0.1-alpha.5, :0.0.1-alpha.5-debian, and :0.0.1-alpha.5-zero. See the image digest files and SPDX SBOMs. Images are signed with keyless cosign; verify the release workflow identity before deployment.

Deployment: the Helm chart uses external PostgreSQL with logical replication and an existing Secret; see the README inside the chart. The Kustomize archive provides app and Zero manifests for external PostgreSQL; its guide describes local rendering and the remaining cluster qualification. The Compose archive includes the bundled database initialization files. Set DITERO_IMAGE_TAG=0.0.1-alpha.5 when running Compose.

Desktop: Linux x86_64 DEB/AppImage, unsigned Windows x86_64 installer, and ad-hoc signed macOS Apple Silicon DMG. Windows and macOS downloads have no trusted publisher signature or notarization. Native qualification, general deep links and automatic updates remain incomplete.

Android: signed independent APK and AAB, with UnifiedPush and no Google SDK configuration. The AAB is for distribution tooling, not direct installation. Broader device qualification remains open; no store distribution is configured.

Verify downloads with sha256sum -c SHA256SUMS.txt. Checksums verify downloaded bytes; they do not replace platform signing or runtime qualification. This prerelease does not move latest or stable image channels.

The same versioned server images also publish to docker.io/iuliandita/ditero.

Ditero 0.0.1-alpha.4

Ditero 0.0.1-alpha.4 fixes a regression that ignored saved subtask order in task details.

This is an experimental alpha for self-hosted testing. Back up the database and attachments before upgrading. Native device/platform qualification, trusted Windows/macOS signing, general deep links and automatic updates remain incomplete. Compiled CLI/MCP/TUI clients remain excluded from public release assets pending runtime notice qualification.

Ditero 0.0.1-alpha.4 is an experimental alpha for self-hosted testing. Back up your database and attachments before upgrading.

Server: multi-architecture amd64/arm64 Alpine app, Debian app, and Zero images at ghcr.io/iuliandita/ditero:0.0.1-alpha.4, :0.0.1-alpha.4-debian, and :0.0.1-alpha.4-zero. See the image digest files and SPDX SBOMs. Images are signed with keyless cosign; verify the release workflow identity before deployment.

Deployment: the Helm chart uses external PostgreSQL with logical replication and an existing Secret; see the README inside the chart. The Kustomize archive provides app and Zero manifests for external PostgreSQL; its guide describes local rendering and the remaining cluster qualification. The Compose archive includes the bundled database initialization files. Set DITERO_IMAGE_TAG=0.0.1-alpha.4 when running Compose.

Desktop: Linux x86_64 DEB/AppImage, unsigned Windows x86_64 installer, and ad-hoc signed macOS Apple Silicon DMG. Windows and macOS downloads have no trusted publisher signature or notarization. Native qualification, general deep links and automatic updates remain incomplete.

Android: signed independent APK and AAB, with UnifiedPush and no Google SDK configuration. The AAB is for distribution tooling, not direct installation. Broader device qualification remains open; no store distribution is configured.

Verify downloads with sha256sum -c SHA256SUMS.txt. Checksums verify downloaded bytes; they do not replace platform signing or runtime qualification. This prerelease does not move latest or stable image channels.

The same versioned server images also publish to docker.io/iuliandita/ditero.

Ditero 0.0.1-alpha.3

Changes since v0.0.1-alpha.2:

• Added optional first-account setup with Basic, Guided and Custom choices, plus Skip. Starter content is previewed before it is added to the personal workspace; existing data is preserved.
• Added encrypted attachment archives and resumable attachment migration with reviewed parent mapping and durable replay.
• Expanded the public API, CLI and MCP workflows for lists, folders, task relationships, placement, comments and list-bound inbound webhooks. The terminal UI adds folder workflows and reviewed task ordering.
• Added revocable list calendar subscriptions and web settings to manage them. These are one-way feeds, not two-way calendar sync.
• Added Todoist project CSV snapshots and plain Trello board JSON imports. Both require review of the content they exclude before applying.
• Added voice quick-add with transcript review in browsers that support local speech recognition. Physical microphone qualification remains open.
• Improved task context and assignee readability, keyboard dragging, import/export feedback, and comment composer focus after uploads and dialogs.
• Removed the public-network dependency from first-party signing-key retrieval.

The CLI, MCP server and terminal UI can be run from source. Compiled terminal clients are excluded from public downloads while embedded runtime notices remain incomplete.

Still open: broader physical-device and native-platform qualification, real Google push delivery, trusted Windows/macOS signing, and live cluster upgrade and point-in-time restore qualification. Windows installers remain unsigned and macOS downloads use ad-hoc signatures. Breaking changes are expected during alpha.

Ditero 0.0.1-alpha.3 is an experimental alpha for self-hosted testing. Back up your database and attachments before upgrading.

Server: multi-architecture amd64/arm64 Alpine app, Debian app, and Zero images at ghcr.io/iuliandita/ditero:0.0.1-alpha.3, :0.0.1-alpha.3-debian, and :0.0.1-alpha.3-zero. See the image digest files and SPDX SBOMs. Images are signed with keyless cosign; verify the release workflow identity before deployment.

Deployment: the Helm chart uses external PostgreSQL with logical replication and an existing Secret; see the README inside the chart. The Kustomize archive provides app and Zero manifests for external PostgreSQL; its guide describes local rendering and the remaining cluster qualification. The Compose archive includes the bundled database initialization files. Set DITERO_IMAGE_TAG=0.0.1-alpha.3 when running Compose.

Desktop: Linux x86_64 DEB/AppImage, unsigned Windows x86_64 installer, and ad-hoc signed macOS Apple Silicon DMG. Windows and macOS downloads have no trusted publisher signature or notarization. Native qualification, general deep links and automatic updates remain incomplete.

Android: signed independent APK and AAB, with UnifiedPush and no Google SDK configuration. The AAB is for distribution tooling, not direct installation. Broader device qualification remains open; no store distribution is configured.

Verify downloads with sha256sum -c SHA256SUMS.txt. Checksums verify downloaded bytes; they do not replace platform signing or runtime qualification. This prerelease does not move latest or stable image channels.

The same versioned server images also publish to docker.io/iuliandita/ditero.