v1.10.3

Security

Important

This release is built with Go 1.27.3. Go 1.27.3 fixes CVE-2026-111943 in crypto/x509: certificate verification now rejects chains that contain eight eMudhra intermediate CAs whose private keys were compromised. Earlier releases were built with an older Go and accept those chains. Update to this release.

What's Changed

• chore: update declscope to 0.17.2 and reinstall its skills by @mpyw in #1067
• chore: update declscope to 0.18.0 and reinstall its skills by @mpyw in #1068
• chore: upgrade declscope to 0.20.1 by way of 0.19.0 by @mpyw in #1072
• chore(deps): Bump jdx/mise-action from 4.3.0 to 5.0.0 by @dependabot[bot] in #1071
• chore(deps): Bump the go-minor group across 1 directory with 9 updates by @dependabot[bot] in #1070
• chore(deps-dev): Bump the npm-minor group in /internal/gui/frontend with 2 updates by @dependabot[bot] in #1069
• chore: update declscope to 0.20.4 and reinstall its skills by @mpyw in #1073
• ci: publish to npm as part of the release by @mpyw in #1074
• chore(deps): Bump source-map-js from 1.2.1 to 1.2.2 in /internal/gui/frontend by @dependabot[bot] in #1075
• ci: add check_only to the release entry points by @mpyw in #1076
• ci: publish to npm from the release environment by @mpyw in #1077
• chore(deps-dev): Bump the npm-minor group in /internal/gui/frontend with 4 updates by @dependabot[bot] in #1078
• chore(deps): Bump the go-minor group across 1 directory with 9 updates by @dependabot[bot] in #1080
• chore(deps): Bump the actions-minor group across 1 directory with 4 updates by @dependabot[bot] in #1079
• chore(deps-dev): Bump the npm-minor group in /internal/gui/frontend with 2 updates by @dependabot[bot] in #1081
• chore(deps): Bump the actions-minor group with 2 updates by @dependabot[bot] in #1082
• chore(deps): Bump the go-minor group across 1 directory with 14 updates by @dependabot[bot] in #1083
• chore: bump go directive to 1.27.3 (CVE-2026-111943) by @mpyw in #1084

Full Changelog: v1.10.2...v1.10.3

Downloads

macOS (GUI with CLI)

Architecture	Download
Apple Silicon (M1/M2/M3/M4)	suve_1.10.3_darwin_arm64.tar.gz
Intel	suve_1.10.3_darwin_amd64.tar.gz

Tip

If macOS shows "cannot be opened because the developer cannot be verified", run:

xattr -d com.apple.quarantine /path/to/suve

Windows (GUI with CLI)

Architecture	Download
x86_64	suve_1.10.3_windows_amd64.zip
aarch64	suve_1.10.3_windows_arm64.zip

Tip

On first run, if Windows SmartScreen shows "Windows protected your PC", click More info → Run anyway.

Linux GUI (webkit2gtk-4.0: Ubuntu 22.04, Debian 11/12, etc.)

Architecture	Tarball	Debian/Ubuntu	RHEL/Fedora
x86_64	suve_1.10.3_linux_amd64.tar.gz	suve_1.10.3-1_amd64.deb	suve-1.10.3-1.x86_64.rpm
aarch64	suve_1.10.3_linux_arm64.tar.gz	suve_1.10.3-1_arm64.deb	suve-1.10.3-1.aarch64.rpm

Linux GUI (webkit2gtk-4.1: Ubuntu 24.04+, Fedora 40+, etc.)

Architecture	Tarball	Debian/Ubuntu	RHEL/Fedora
x86_64	suve_1.10.3_linux_amd64_webkit2_41.tar.gz	suve_webkit2_41_1.10.3-1_amd64.deb	suve_webkit2_41-1.10.3-1.x86_64.rpm
aarch64	suve_1.10.3_linux_arm64_webkit2_41.tar.gz	suve_webkit2_41_1.10.3-1_arm64.deb	suve_webkit2_41-1.10.3-1.aarch64.rpm

Linux CLI/TUI-only (no dependencies)

Architecture	Tarball	Debian/Ubuntu	RHEL/Fedora
x86_64	suve-cli_1.10.3_linux_amd64.tar.gz	suve-cli_1.10.3-1_amd64.deb	suve-cli-1.10.3-1.x86_64.rpm
aarch64	suve-cli_1.10.3_linux_arm64.tar.gz	suve-cli_1.10.3-1_arm64.deb	suve-cli-1.10.3-1.aarch64.rpm

Checksums

checksums.txt