Skip to content

v0.3.2

Choose a tag to compare

@github-actions github-actions released this 23 Sep 10:58
· 9 commits to master since this release

VersoCon — v0.3.2 — Release notes

✨ What's new

  • 🔄 PDF editor: rotate with arrows — choose 90/180/270 with the ↺ ↻ buttons; the pending angle stays visible under the button, the preview rotates with the page, and the live preview is no longer stretched.
  • 🖋️ Watermark measured for real — long texts are no longer cut off: the size is measured with the real font metrics and automatically reduced to fit inside the page, at any page rotation.
  • 🖥️ Desktop window starts maximized — the two-panel editor now fits on screen; the window reopens at 1280×860 as a base.
  • 🛡️ Startup survives blocked DLLs — if Windows (Smart App Control / AppLocker) blocks a bundled library, the app no longer dies with a PyInstaller traceback: it starts, disables only the affected feature and explains how to allow the file.
  • Everything else from v0.3.1 (OCR and ffmpeg built in, PDF compression fix, third-party licenses) is unchanged, and VersoCon remains 100% offline.

SHA-256

versocon-setup-0.3.2.exe
0F68625438A03A1DCDE44FE9FAF3140620EBD2FF0FB115429C49FACCBC3490A0

(Windows: Get-FileHash versocon-setup-0.3.2.exe -Algorithm SHA256).

🔒 Is it safe? / È sicuro?

Yes — VersoCon is 100% local, open-source, with no telemetry and no account.
It runs entirely on your machine (127.0.0.1); nothing ever goes online.

Windows shows "Windows protected your PC" (SmartScreen)

This is normal for unsigned open-source software and does not mean VersoCon contains a virus.
Before you proceed, verify:

  1. SHA-256 — compare the hash of your downloaded file with the one on this release page
    (Windows: Get-FileHash versocon-setup-*.exe -Algorithm SHA256).
  2. VirusTotal (optional) — upload your copy at
    virustotal.com and check the result.
  3. Source code — the code that built this file is on
    github.com/hikarihasegawa/versocon.

If everything checks out, click More info → Run anyway / Esegui comunque.

Prefer an installer that never asks?

Install through a package manager:

winget install HikariHasegawa.VersoCon    # official Windows package manager (submission under review)
scoop bucket add HikariHasegawa https://github.com/HikariHasegawa/bucket
scoop install versocon                     # Scoop, from the author's bucket above (live now)

Sì — VersoCon è 100% locale, open-source, senza telemetria e senza account.
Ogni cosa gira sulla tua macchina (127.0.0.1); nessun file va mai online.

Windows mostra "Windows ha protetto il tuo PC" (SmartScreen)

È normale per software open-source non firmato e non indica la presenza di un virus.
Prima di procedere, verifica:

  1. SHA-256 — confronta l'hash del file scaricato con quello della pagina della release
    (Windows: Get-FileHash versocon-setup-*.exe -Algorithm SHA256).
  2. VirusTotal (facoltativo) — carica la tua copia su
    virustotal.com e controlla il risultato.
  3. Codice sorgente — chi ha costruito questo file è su
    github.com/hikarihasegawa/versocon.

Se tutto è OK → Altre informazioni → Esegui comunque.

Preferisci un canale che non chiede nulla?

Installa con un package manager:

winget install HikariHasegawa.VersoCon    # canale Microsoft (PR in attesa)
scoop bucket add HikariHasegawa https://github.com/HikariHasegawa/bucket
scoop install versocon                     # Scoop, dal bucket dell'autore qui sopra (già attivo)

FAQ

Q: Why does Windows warn me? / Perché Windows mi avvisa?
A: The installer is not digitally signed (a code-signing certificate requires a business entity — see roadmap). SmartScreen is a generic caution, not a malware report. / Non è firmato con certificato (serve una ditta — vedi roadmap). SmartScreen è una cautela generica, non un report di malware.

Q: How do I know it's not a virus? / Come so che non è un virus?
A: (1) The source is public on GitHub. (2) The binary you run is built from that source in a public GitHub Actions log. (3) SHA-256 and VirusTotal give you 2 independent confirmations. / (1) Il codice è pubblico. (2) Il binario che esegui è costruito da quello in una CI GHA pubblica. (3) SHA-256 e VirusTotal danno 2 verifiche indipendenti.

Q: When will the warning go away? / Quando sparisce l'avviso?
A: For most users within weeks, once SmartScreen has enough "clean install" reports. Definitively, once we get a code-signing certificate (needs a business license). / Per la maggior parte degli utenti in poche settimane. In modo definitivo quando avremo il certificato di firma (richiede una ditta).

Q: Does v0.3.2 include the security fixes from v0.2.5/v0.2.6? / La v0.3.2 include i fix di sicurezza di v0.2.5/v0.2.6?
A: Yes — all of them (path traversal, DNS-rebinding/CSRF protection, hidden console windows, Italian translation fixes). / Sì — tutti (path traversal, protezione DNS-rebinding/CSRF, finestre console nascoste, fix delle traduzioni italiane).