Cawget 0.1.2

Cawget 0.1.2

Packages: AppImage (any recent x86_64 Linux), .deb, .rpm. Verify downloads with SHA256SUMS.

The AppImage embeds update information; the matching .zsync file is in this release. Update it in place
with AppImageUpdate or appimageupdatetool (https://github.com/AppImageCommunity/AppImageUpdate).

The AppImage bundles GTK, WebKitGTK and their dependencies from Ubuntu 22.04; bundled-libraries.txt
lists them with their source packages (apt-get source , or launchpad.net/ubuntu/+source/).
Licences: LICENSE, THIRD_PARTY_LICENSES.md and docs/BUNDLED_LIBRARIES.md in the repository.

Cawget 0.1.1

Cawget 0.1.1

This release moves saved logins out of the database and into the system keyring, fixes several issues around
logins, and brings two fixes to the desktop window.

What's new

• Credentials are stored in the system keyring. Download logins, proxy logins, cookies and custom headers are
  kept in the Secret Service keyring (for example GNOME Keyring or KWallet). The database keeps only references
  to them.
• user:password@host addresses work. Such downloads used to fail with HTTP 401 after the first request; the
  login is now sent with every segment request, and it is never kept in the stored or shown address.
• Jobs wait for the keyring instead of failing. If a download's login cannot be read because the keyring is not
  available, the job stays queued with the status "waiting for the system keyring" and starts by itself once the
  keyring answers. It is never sent without its login.
• The CLI no longer prints passwords. Addresses are shown as user:***@host in CLI output, settings, error
  messages and debug output. Addresses that cannot be parsed are refused instead of being stored.
• Keyring calls time out after 30 s and run off the scheduler and UI threads, so a locked or hanging keyring no
  longer stalls other downloads or the window. Credentials start working as soon as the keyring starts, without
  restarting Cawget.
• The tray icon now shows correctly in the Flatpak build. It used to appear as a "missing icon" placeholder,
  because the panel could not read the icon file inside the sandbox.
• Dialogs can be moved by dragging their title bar, and header text no longer gets selected accidentally.
  Values such as the download address can still be selected and copied.

Upgrade note

• On the first start after upgrading, Cawget migrates the plaintext logins stored by 0.1.0 into the keyring.
• Before it changes anything, it writes a backup of the database next to it:
  cawget.db.pre-keyring-<timestamp>.bak, mode 0600. This backup still contains the old plaintext logins.
  Delete it once your downloads work.
• A running Secret Service (GNOME Keyring, KWallet or another implementation) is required to save or use
  logins. There is no plaintext fallback: without a keyring, saving a login fails with a clear error, and downloads
  that need one wait. If no keyring is available on the first start, the migration is postponed (the plaintext
  stays where it is) and retried on the next start.
• The Flatpak bundle requests --talk-name=org.freedesktop.secrets so that it can reach the keyring from the
  sandbox.

Known limitations

• Quitting Cawget can take up to 30 s if a keyring call is hanging at that moment.
• If the keyring is locked and its unlock prompt stays open for more than 30 s, adding that download fails; add it
  again after unlocking.
• Cawget is not on Flathub; the Flatpak is a bundle attached to this release. The AUR package is not available yet.

Install

Cawget is not on Flathub. All packages are on this release page and are x86_64 only.

Your system	File	Install
Any x86_64 Linux	Cawget_0.1.1_amd64.AppImage	chmod +x Cawget_0.1.1_amd64.AppImage, then run it
Debian, Ubuntu and derivatives	Cawget_0.1.1_amd64.deb	sudo apt install ./Cawget_0.1.1_amd64.deb
Fedora, openSUSE and other RPM systems	Cawget-0.1.1-1.x86_64.rpm	sudo dnf install ./Cawget-0.1.1-1.x86_64.rpm (or zypper install)
Flatpak (bundle, not Flathub)	cawget-0.1.1-x86_64.flatpak	flatpak install --user cawget-0.1.1-x86_64.flatpak (needs the Flathub remote for the GNOME runtime)
Arch Linux	PKGBUILD in the repository	makepkg -si in a folder with the PKGBUILD; the AUR package is not available yet

Details: docs/INSTALL.md.

Packages are built and the automated tests run on Ubuntu 22.04. The AppImage bundles GTK, WebKitGTK and their
dependencies from Ubuntu 22.04; bundled-libraries.txt lists them with their source packages, and
cawget-0.1.1-bundled-sources.tar.zst contains the Debian source packages of the copyleft ones.

Checksums

Verify your download with sha256sum -c SHA256SUMS --ignore-missing in the folder that holds it (the Flatpak bundle
has its own cawget-0.1.1-x86_64.flatpak.sha256). The block below lists all of them, including the Flatpak bundle and
the bundled-library sources archive.

af38ea4b879e035c80a198ceb736436dba9bf2264bf2a0223723c793c9176efa  Cawget-0.1.1-1.x86_64.rpm
4d7ffbd95c9298149fd97d10a6e194459b4eb721f1800a815d4d8f508ba2596f  Cawget_0.1.1_amd64.AppImage
a807a9959a402e7e4e915a4aeaa2d68228575242ac56fcb9c7aa0c58cd59624f  Cawget_0.1.1_amd64.deb
c19d79d7887170311ddd5c15b8af521b4423eb1770feb8ff856a6a178665305a  bundled-libraries.txt
d2f47d3f6b95cabbb2b89d9ed79283796f0e347e9d7587df9058b386a3b8d1a9  cawget-0.1.1-x86_64.flatpak
bff78a38ff5c53318c798c302bffe39085ffc0d67734e78778dcdd00edb2f09f  cawget-0.1.1-bundled-sources.tar.zst

Full list of changes: CHANGELOG.md.

Cawget 0.1.0

Cawget 0.1.0

The first public release of Cawget, a fast segmented download manager for Linux (Rust, Tauri): a desktop
app, plus a command line tool (built from source) that shares the same download engine.

Highlights

• Parallel segmented HTTP/HTTPS downloads; an idle connection takes over the tail of a slow one.
• Resume after Ctrl-C, a crash or kill -9; server validators are re-checked.
• Persistent queue with scheduling, a daily start window, retries, a global speed limit and SHA-256 verification.
• Categories by file type, each with its own folder; proxy settings, custom CA, headers and cookies.
• A window layout that adapts from 480x360 to 4K, light and dark themes, right-to-left layout, zoom.

Install

Package	How
AppImage (any recent x86_64 distribution)	chmod +x Cawget_0.1.0_amd64.AppImage && ./Cawget_0.1.0_amd64.AppImage
Debian, Ubuntu (.deb)	sudo apt install ./Cawget_0.1.0_amd64.deb
Fedora, openSUSE (.rpm)	sudo dnf install ./Cawget-0.1.0-1.x86_64.rpm
Arch Linux	AUR package coming soon; use the AppImage for now
From source	see the README ("Build")

Details: docs/INSTALL.md.

Verify your download

The packages and bundled-libraries.txt are listed in SHA256SUMS (the SHA-256 of the sources archive is given
below, under "Source code of the bundled libraries"):

sha256sum -c SHA256SUMS --ignore-missing

Not available yet, and not tested

Shown in the app but disabled ("Coming soon"), or not there yet:

• Bulk add and page scanner
• Import / export of download lists
• Named queues with their own start/stop
• Saved per-site logins
• Start on login, clipboard watching
• Taking over downloads from web browsers (extension)
• Encrypted credential storage (credentials are stored unencrypted, in a file only your user can read)
• Protocols other than HTTP and HTTPS (no FTP, torrent or metalink)
• Packages in other formats (Flatpak, Snap)

Accepted but not tested end to end: proxies taken from the environment, https:// downloads through a proxy,
https:// proxy URLs and socks5:// proxies. Known limit: a file that changes on the server during a run,
without its size changing, is not detected (changes between runs are).

Licences

Cawget is free software under GPL-3.0-or-later. Third-party components compiled into the programs are listed
with their licence texts in THIRD_PARTY_LICENSES.md; the libraries the AppImage bundles are listed in
docs/BUNDLED_LIBRARIES.md and, for this build exactly, in bundled-libraries.txt (attached). All are also
inside the packages under /usr/share/doc/cawget/. The .deb and .rpm use your distribution's libraries.

---

Source code of the bundled libraries

The AppImage bundles unmodified libraries from Ubuntu 22.04 (GTK, WebKitGTK and their dependencies); the
exact list with package versions is in bundled-libraries.txt (attached).

The complete corresponding source code of every bundled library that is under a copyleft licence (GPL, LGPL,
MPL and similar) is attached to this release as cawget-0.1.0-bundled-sources.tar.zst
(376,339,566 bytes, SHA-256 ffd72ece15982fa75eb7bd3069d1ec6ee5526ab22fc23ecf45c1307857168796):

• 61 Ubuntu source packages, each exactly as published by Ubuntu: the .dsc, the upstream tarball(s) and the
  Debian packaging, at the versions used in this AppImage. Every file matches the checksums in its .dsc.
• A package is included when any of its copyright files names a copyleft licence, also if that covers only
  part of the package or is one option of a dual licence.
• The README inside the archive maps each source package and version to the libraries in the AppImage, and
  lists the 31 bundled packages that are not included because their licences (MIT, BSD, X11, Apache-2.0 and
  similar) do not require distributing source code.

Unpack with tar --zstd -xf cawget-0.1.0-bundled-sources.tar.zst (or zstd -dc … | tar -xf -), then build a
package with dpkg-source -x <name>.dsc and dpkg-buildpackage. The .deb and .rpm packages bundle none of
these libraries.