Callisto v0.14.0

Callisto v0.14.0

Now hosted on GitHub. Real Touch ID unlock (the previous mechanism silently never enforced presence at all), plus a security fix for raw-private-key wallets that had their passphrase changed.

Install

macOS — download Callisto-v0.14.0-darwin-arm64.zip (Apple silicon) or
-darwin-amd64.zip (Intel), unzip, and move Callisto.app to /Applications.
Notarized by Apple — it just opens.

Already running Callisto? Just use Settings → Check for updates — it verifies
and installs this release for you.

Verify (optional)

shasum -a 256 -c SHA256SUMS

SHA256SUMS is ed25519-signed as SHA256SUMS.sig with the maintainer key (the
same key the in-app updater checks).

A note if you've ever changed a private-key wallet's passphrase

This release fixes a real bug: changing the passphrase on a wallet imported via
Import private key… could silently cause it to unlock with the correct
passphrase but derive the wrong address afterward. If that's ever happened to
you, update first, then confirm the wallet still unlocks to the address you
expect — cmd/keystore-recover in this repo can diagnose and repair an affected
keystore file if not. See the changelog entry below for the full explanation.

Changes

See the v0.14.0 changelog
for the full list.