Skip to content

v0.2.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Aug 12:19
· 14 commits to main since this release
v0.2.1
7d7997b

DSH Forge V0.2.0

中文

DSH Forge V0.2.0 聚焦运行时升级、默认视觉主题、完整安装包 OTA 和可审计的 GitHub Release
发布流程，为桌面发行版提供更完整的安装、升级与验证能力。

本版本包含

  • 将 DSH runtime、client UI primitives、client UI slots 和 invariants 升级至
    0.1.1-rc.2。
  • 将 dsh-dream-skin@8.28.0 集成到 dsh-forge-official profile，作为默认视觉主题能力，
    并固定其 npm 来源、完整性、许可证和能力审核事实。
  • 新增“设置 → 升级管理”页面，展示当前版本/build、检查状态、OTA 支持状态、可用版本和上次检查时间。
  • 支持 Windows、macOS 和 Ubuntu 22.04+ AppImage 的用户确认式完整安装包 OTA；自动检查不会打断用户，
    只有用户主动确认后才会下载和执行升级。
  • OTA 清单固定从本仓库 GitHub Release 的 version.json 读取，并按 SemVer 优先、build 次级比较，
    防止降级和同版本低 build 覆盖。
  • Release 工作流为 Windows、macOS 和 Ubuntu 安装包生成固定资产名，并同时上传 version.json 与
    release-index.json，保证清单 URL 与当前 Release tag 对齐。
  • macOS tag Release 接入 Developer ID 签名、公证和 stapling；缺少凭据或任一验证失败时不会进入 Release。
  • 桌面层统一从 TypeScript 源码构建，根目录的 build、typecheck 和 lint 会先生成所需 workspace 类型出口。

安装包与限制

  • macOS：universal（arm64 + x64）DMG 和 zip；tag Release 仅在签名、公证和 stapling 全部通过后发布。
  • Windows：x64 NSIS 安装包和 zip；本版本不提供 Windows Authenticode 签名。
  • Ubuntu：x64 AppImage；不再发布 .deb，也不支持其他 Linux 发行版或非 AppImage 启动方式。
  • OTA 是用户确认后执行的完整包升级，不支持静默下载或后台自动安装。
  • version.json 和完整安装包暂不包含摘要、签名或信任根校验；HTTPS、系统签名和用户确认不能替代
    通用的可审计更新信任机制。

下载文件

  • macOS：dsh-forge-macos.dmg、universal zip
  • Windows：dsh-forge-windows.exe、x64 zip
  • Ubuntu：dsh-forge-ubuntu.AppImage
  • 发布证据：version.json、release-index.json

感谢所有参与 DSH Forge runtime 升级、视觉主题集成、OTA 流程、跨平台打包和发布验证的贡献者。

English

DSH Forge V0.2.0 focuses on the DSH runtime upgrade, the default visual theme, full-package OTA, and
an auditable GitHub Release pipeline, providing a more complete desktop installation, upgrade, and
verification experience.

What's included

  • Upgrades the DSH runtime, client UI primitives, client UI slots, and invariants to 0.1.1-rc.2.
  • Integrates dsh-dream-skin@8.28.0 into the dsh-forge-official profile as the default visual theme,
    with its npm source, integrity, license, and capability review facts pinned.
  • Adds a “Settings → Upgrade Management” page showing the current version/build, check status, OTA
    support, available version, and last check time.
  • Supports user-confirmed full-package OTA for Windows, macOS, and Ubuntu 22.04+ AppImage. Automatic
    checks do not interrupt the user; packages are downloaded and installed only after explicit confirmation.
  • Reads the OTA manifest from version.json in this repository's GitHub Release and compares SemVer first,
    then build, preventing downgrades and replacement by an equal-version lower build.
  • Gives Windows, macOS, and Ubuntu packages stable Release asset names and uploads both version.json and
    release-index.json, keeping manifest URLs aligned with the current Release tag.
  • Adds Developer ID signing, notarization, and stapling to macOS tag Releases; missing credentials or any
    failed verification prevents the Release from being published.
  • Builds the desktop layer from TypeScript sources, with the root build, typecheck, and lint commands
    generating the required workspace type exports first.

Packaging status and limitations

  • macOS: universal (arm64 + x64) DMG and zip; tag Releases are published only after signing, notarization,
    and stapling succeed.
  • Windows: x64 NSIS installer and zip; Windows Authenticode signing is not included in this release.
  • Ubuntu: x64 AppImage only; .deb packages and other Linux distributions or non-AppImage launch modes
    are not supported.
  • OTA is a user-confirmed full-package upgrade; silent downloads and background installation are not supported.
  • version.json and full packages do not currently include digest, signature, or trust-root verification.
    HTTPS, system signing, and user confirmation are not a general auditable update trust mechanism.

Downloads

  • macOS: dsh-forge-macos.dmg, universal zip
  • Windows: dsh-forge-windows.exe, x64 zip
  • Ubuntu: dsh-forge-ubuntu.AppImage
  • Release evidence: version.json, release-index.json

Thank you to everyone who contributed to the DSH Forge runtime upgrade, visual theme integration, OTA
workflow, cross-platform packaging, and release validation.

Assets 9
Loading