Huginn v1.4.0

First time installing?

Huginn is an open-source personal project and isn't code-signed. Windows SmartScreen and macOS Gatekeeper will both show a warning on first install — that's expected. Code-signing certificates cost real money and aren't worth it for a free personal tool. The source is public on this repo; you can read it.

Windows

1. Download Huginn-win-Setup.exe below.
2. Run it. SmartScreen will warn that the app is from an unknown publisher.
3. Click More info, then Run anyway.

macOS

1. Download the .pkg for your Mac: Huginn-osx-arm64-Setup.pkg (Apple Silicon — M1/M2/M3/M4) or Huginn-osx-x64-Setup.pkg (Intel). Not sure? Apple menu → About This Mac → the Chip/Processor line.
2. Open it. macOS will block it because it isn't signed — that's expected. In the warning, click Done (or Cancel) — not "Move to Trash", which deletes the installer you just downloaded.
3. Open System Settings → Privacy & Security, scroll to the Security section, and click Open Anyway next to the note about Huginn being blocked. Authenticate, confirm Open, then follow the installer.

Once installed, future updates download and apply themselves the next time you launch the app — you don't need to repeat any of this.

---

What's new

• Settings is now a list of sections down the left and one section at a time on the right, rather than expanders inside expanders. Each connection carries its state in the list, so a source that needs attention is visible without opening anything, and what is being held back has a section of its own instead of sitting two expanders deep.
• Routes answering 404 are reported again. Every 404 used to be dropped, which hides a route your client calls and your server does not have. Scanner traffic is held back by its shape instead: many different paths, a handful of calls each, almost all of them not-found. Anything held back is listed, with the rule that hid it and how much of it there was.
• New: what is held back can be administered rather than only read. An entry can be promoted so it is always reported, or given a rule of its own so it stays hidden; patterns can be added and removed; and anything promoted is listed so it can be taken back.
• New: every card has an overflow menu. Crashes offer the link and the issue id, pull requests the reference form and the title, builds the link and the branch name, and service findings the query behind the finding. A card marks itself while its menu is open, so "this one" is unambiguous in a list of near-identical rows.
• Fixed: your own failed builds appeared for one poll and then disappeared on their own. They were only ever asked for as far back as the previous poll, so each failure was returned exactly once and then fell outside the question.
• Agents are told what is being held back as well as what was reported.