Quick Presenter v2.5.0

Quick Presenter 2.5.0 brings sandbox-compatible qp automation to the Mac App Store edition and improves presentation input and macOS PDF delivery. Application version 2.5.0 retains Control Protocol v1.

Highlights

• Mac App Store CLI: authenticated local XPC control for PDF open/close, navigation, blackout, presentation state, elapsed time, slide text, speaker notes, full-deck JSON export and NDJSON events. The bundled CLI is Quick Presenter.app/Contents/Helpers/ControlCLI.app/Contents/MacOS/qp.
• User-authorized PDF access: Store qp open starts the GUI when necessary. Select the exact requested PDF in the native picker within 120 seconds; cancellation or another selection preserves the active presentation. Previously authorized files reuse read-only security-scoped bookmarks.
• Reliable presenter keys: restore navigation while read-only notes have focus, including Windows Return/arrow handling; preserve macOS input and the latest fullscreen intent during native transitions.
• macOS document delivery: handle Finder Open With, installed app/Dock delivery and presenter/audience window drops through authorized file access, with bounded busy/error recovery.
• Dependencies: PDFium 158.0.8111.0 (chromium/8111, V8/XFA disabled) and Windows clipboard-win 5.4.3.

Downloads and Store rollout

• macOS Apple silicon, macOS 13+: QuickPresenter-2.5.0.dmg, Developer ID signed, Apple-notarized and stapled. Install in Applications or a writable user Applications folder before PDF drag and drop; dropping onto the app icon on the mounted read-only DMG is a known unsupported route.
• Ubuntu x64: quick-presenter_2.5.0_amd64.deb, including the qp command.
• Windows x64: Microsoft Store. The Windows submission SBOM is attached as inventory evidence; the MSIX is not offered as a supported direct download.
• Mac App Store, macOS 14.4+: Store listing. The public version is 2.5.0 (25011); actual App Store installation and execution are verified. The attached Store-payload SBOM describes the signed submission app, not Apple's download container.

Store availability (October25 JST): both normal Store versions are public. Mac 2.5.0 (25011) was manually released after approved-build installation/update/CLI/manual-route qualification; its public listing, ordinary Store redownload and installed execution were verified. Windows 2.5.0.0, normal Submission6, completed certification/publication; the public listing and reported Store installation/execution are verified separately from the earlier limited flight. Completed Store qualification and route limitations.

See the CLI guide, README and full changelog.

Validation and provenance

• Release tag/documentation: 60e88485619ea512c57b7a641db8e3a18b3a5634 (merged #525).
• Actual package build source: f4c018091c6057eb68fc76ac761bc90b10f93cc2 (merged #523, includes #524). The only differences to the release tag are four unbundled release/validation documents. Executable, dependency, vendor, build, packaging and bundled CLI/protocol inputs are identical. SBOMs retain the actual build revision; no older package is relabeled. An exact corresponding-source archive for f4c0180 is attached alongside GitHub's tag-source archives.
• All-OS Build Binaries 40088331020 passed. Final package/SBOM/source/target/all-payload/normal-dependency-graph/PDFium/license/bundled-document checks passed independently.
• Mac direct: Apple notarization Accepted, stapling/Gatekeeper/mounted-DMG render and confinement passed; GUI 180/0.
• Internal TestFlight 25011: Apple distribution identity/receipt and all seven Mach-O section comparisons passed; actual XPC render/confinement, GUI 179/0, authenticated CLI and repeated connections passed.
• Windows actual CI MSVC submission payload: CLI/confinement passed; six GUI runs at 65/0 each. Forced-software runs retain the known 41/1 later rendering-notification limitation and do not establish a full software-renderer pass.
• Linux extracted and actually installed final DEB: each passed all eight native Wayland/real XWayland, default/forced FemtoVG, short/long-note conditions at 72/0 each, plus CLI/confinement and package replacement/removal/reinstall checks.

The final results record and attached results-only report preserve exact package identities, original failed attempts, source comparisons and qualification limits. Raw smoke logs and private state are not release assets. CycloneDX 1.5 SBOMs describe exact packages with explicit incomplete native-inventory coverage; verify asset digests with SHA256SUMS.

Security and coverage limits

The October 24 pre-publication review and direct source comparison found no new blocker in their bounded scope: zero Cargo vulnerability advisories and five retained maintenance warnings. PDFium 8111 includes identified fixes assessed in that record but omits four reviewed later enabled-path changes (OpenJPEG allocation-failure propagation, drawing conversion/dimension overflow handling, parser read-failure handling and repeated-space text-processing complexity). The maintainer explicitly accepted retaining this pin for v2.5.0. This is not a claim that all upstream fixes are included or that PDF processing has no vulnerabilities; the recorded mitigations and response checkpoints remain in force.

Unperformed additional Intel/other-Mac/other-macOS coverage and specified Mac cross-identity/genuine-bookmark-revocation tests were explicitly excluded from this release gate, not passed. Linux physical dual-display coverage remains unperformed and Orca acceptance was excluded. #493 lifecycle work was manually completed. Actual customer Store qualification/public-delivery results are recorded in completed #520. Windows cross-version real-user settings retention remains explicitly accepted as unverified; fresh OS accounts are not claimed. The recorded Store acquisition and update routes retain their separate scopes.

Full changes: v2.0.0...v2.5.0