Skip to content

AutoPaper 0.1.4

Choose a tag to compare

View all tags
@msitarzewski msitarzewski released this 13 Oct 11:03
· 15 commits to main since this release
v0.1.4
14e2b0b

AutoPaper 0.1.4

A security round across macOS, Windows and Linux. If you have 0.1.3, it updates itself (Mac: Sparkle; Windows: App Installer; Linux: see below).

Changed

  • Your keys stay out of logs and messages. An API key or token can no longer appear in a stored failure, the Console, or an error shown by the app, however a service echoes it back.
  • Your data folder is private to you (owner-only access on Mac and Linux).
  • Direct connections reach only your own network. Names like .local or localhost resolve only to local addresses, so a name can't quietly send AutoPaper somewhere else.
  • Large images are refused instead of using all your memory, including deep-colour images.
  • Mac updates are checked before they are opened, and the update feed itself is signed.
  • Windows: the core is built with Control Flow Guard.
  • Builds are more reproducible: pinned build steps and locked dependencies. The full review is in the repository (docs/security-review-2026-10.md).

Linux: add the repository again

The Flatpak repository has a new signing key. Remove and re-add the remote with the new .flatpakrepo from the install section, then update as usual.

Install

Same as before: the Install section. MIT licensed.

Assets 12
Loading