Skip to content

LocalAI Cowork v0.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 Jul 18:08
v0.2.0
6142fc0

LocalAI Cowork v0.2.0

v0.2.0 introduces secure in-app updates while keeping LocalAI Cowork local-first and fully usable offline.

Highlights

  • One-click updates: LocalAI Cowork now checks GitHub Releases automatically. When a newer version is available, it can be installed directly from the burger menu with visible download and installation progress.
  • Signed update chain: Every in-app update is verified with the updater public key embedded in the application. A modified or incorrectly signed installer is rejected before installation.
  • Backup before installation: The app creates a consistent SQLite backup plus a snapshot of its local WebView configuration before downloading an update. If the backup fails, the update is not installed.
  • In-place installation: Updates replace the application files without uninstalling the existing app profile. Projects, chats, tasks, settings, and connection metadata stay in their existing profile.
  • CrewAI remains bundled: The Windows installer and every in-app update contain the verified offline CrewAI runtime, embedded Python 3.12.10, CrewAI 1.15.8, and the pinned wheelhouse.

First update from v0.1.9

v0.1.9 does not contain the updater yet. Install v0.2.0 once with the Windows installer from this release. Starting with v0.2.0, later versions can be installed from the burger menu.

The v0.2.0 installer is designed as an in-place upgrade. Do not uninstall v0.1.9 first.

Security and release integrity

  • Tauri updater signatures are mandatory and validated inside the app.
  • latest.json, the installer signature, SHA-256 checksums, CycloneDX SBOM, third-party notices, build provenance, and GitHub attestations are published with the release.
  • Release automation fails closed if the updater signing key is unavailable.
  • Local builds without the release key remain possible, but cannot produce publishable updater artifacts.

Windows publisher notice: This release is not Authenticode-signed. Windows may display “Unknown publisher” during the first manual installation. Verify SHA256SUMS and the GitHub attestations before running the installer. In-app updates are independently protected by the mandatory Tauri updater signature.

Data protection

Before each future one-click update, recovery files are written below:

%APPDATA%\io.noshitcoding.opencowork\update-backups

Each backup contains the SQLite workspace database, the relevant local application configuration, and a manifest with source and target versions.

Full changelog: v0.1.9...v0.2.0

Assets 10
Loading