Skip to content

Cotabby for Windows v0.5.1

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Oct 14:17
· 18 commits to main since this release
v0.5.1
ad95b52
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Cotabby for Windows v0.5.1

Tagged build from commit ad95b5274dbbd770b32956e7ab1b28d363a0b98d.

Fixed

  • Selectively port model-download hardening from Windows upstream
    Msde-7/cotabby-windows e625947:
    restart rather than append when a server ignores HTTP Range; reject truncated
    responses and non-GGUF downloads; replace invalid existing final files.
  • Validate 206 Content-Range offsets and total length before resuming. Promote a
    416 partial only when the server's explicit total equals the local file size.
  • Remove download error-body and redirected-URL logging.

Scope and verification

  • 14 deterministic downloader cases supplement the existing 319 tests. Hosted
    Windows workflows also build, publish and exercise existing synthetic runtime
    proofs. See download safety notes.
  • No cloud endpoint, clipboard-context, typing-history or UI rewrite imported.
    All earlier v0.5.0 behavior remains.
  • GGUF magic and size checks are sanity checks, not cryptographic validation.
    Existing caches retain the historical 85% size tolerance. A changed remote
    model during resumption cannot be detected without a trusted checksum/validator.
    Live Hugging Face downloads and real-model suggestions need owner testing.

Assets

  • Cotabby-win-x64-v0.5.1.zip — self-contained folder build. Extract into a new folder; do not flatten runtimes.
  • Cotabby-win-x64-v0.5.1.zip.sha256 — verified checksum of the ZIP above.

SHA-256: 50aa7beb310240360eb95646106c39ad5984eaa07dc5dd57fb949c1d7dd1f613

Verification

  • Windows CI on this commit runs the full test suite, the synthetic real-UI-Automation credential proof and a GPU counter/persistence smoke test.
  • The published ZIP is extracted and every member is hashed against the packaged manifest before upload.
  • Live model decoding, physical GPU readings, per-adapter behavior and browser/application credential coverage remain owner-verified.
  • Inference stays local: no telemetry and no cloud completion. Do not share raw logs; they can contain typed text.
Assets 4
Loading