Skip to content

KeepKey Vault v1.5.2

Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 10 Aug 21:57
· 0 commits to 62e9698a192cebdb5b21ed38c797cdebb39670c6 since this release
v1.5.2
99bac31

A maintenance release: the desktop shell moves up five versions, and QR scanning on macOS starts working again.

Bug Fixes

  • Camera QR scanning was broken on macOS. The app never declared NSCameraUsageDescription, so macOS had no reason to grant camera access when you opened the QR scanner. Scanning an address by camera now prompts properly, with an explanation of why a wallet is asking. Affected every macOS build up to and including 1.5.1.

Under the Hood

  • Electrobun 1.13.1 → 1.18.1. The desktop runtime was five stable releases behind. Brings upstream fixes to window handling, the updater, and platform packaging.
  • The build's patch layer now fails loudly instead of silently. Several small runtime patches were being skipped without warning whenever upstream moved the code they attach to — which is exactly how the camera declaration went missing. Each one now breaks the build if it can no longer apply, and the release pipeline verifies the patches actually made it into the shipped app rather than trusting that they did.

No changes to signing, transaction construction, or device communication.

Downloads

Platform File SHA-256
macOS (Apple Silicon) KeepKey-Vault-1.5.2-arm64.dmg 9a404cc11a7a36ed8ec291150f048a6e4f96d323a27b32257db3353d2e6ea171
macOS (Intel) KeepKey-Vault-1.5.2-x86_64.dmg 6680efd1a3cc4983a65d063cd493c1a4d426f1868fae13d5ffc36e8bc669221a
Linux (AppImage) KeepKey-Vault-x86_64.AppImage ae693399afdfafc0b56a87ad39c44326aa5094039c000eb7d7fcd9e07bbb37d5
Linux (deb) keepkey-vault_1.5.2_amd64.deb 7dd6644cb82e2ea94245199bfbd7a1b633a210dd48383f0d8efa4330b696fe9a

To verify: shasum -a 256 <filename>

Both macOS DMGs are signed, notarized, and stapled.

Windows is published separately from the Windows build machine.

Also included

This is the first release to reach master since v1.4.11, so it carries everything from the v1.5.0 and v1.5.1 lines — ClearSign Studio, hardware-verifiable x402 payments, reusable clear-sign schemas for Relay swaps, Zcash NU6.3 (Ironwood), firmware 7.15 Taproot and entropy host acceptance, swap reconciliation, and the EVM account-path fix. See the v1.5.0 and v1.5.1 release notes for the full list.

The clear-signing note from v1.5.1 still applies: clear-sign verification requires the AdvancedMode policy on the device, because firmware verifies clear-sign metadata only against a signer loaded at runtime. Without AdvancedMode the device falls back to its normal confirmation screens — it never displays unverified decoded detail.