QSO Graph Desktop 0.5.0

Quick downloads

Windows

• Installer: 64-bit .exe
• Portable: .zip

Linux

• AppImage: x86_64 · arm64 (Raspberry Pi 5)
• Debian, Ubuntu (.deb): amd64 · arm64, or our apt repository (Stable releases only)
• Fedora, RHEL, Rocky (.rpm): x86_64 · aarch64, or our dnf repository (Stable releases only)
• Portable: x64 .zip · arm64 .zip

macOS

• Apple silicon: .dmg · portable .zip, or brew install qso-graph/tap/qso-graph-desktop (Stable releases only)

---

Added

• The Monitor: WSJT-X's decodes, as they arrive (#125). Turn on the WSJT-X adapter and the
  Monitor in Settings → Extensions, point WSJT-X's UDP Server at this computer, and the Monitor
  shows each copy of WSJT-X's dial frequency, mode and whether it is transmitting, with its decodes
  grouped by cycle, newest first, low-confidence and off-air ones marked. All shows every copy
  together; each copy has a tab of its own. It asks WSJT-X for the decodes it already has, so it is
  not empty when it opens. It is read-only: nothing is sent to WSJT-X but that one request, and
  nothing it shows changes your data.
• Integrations, in the rail: what is listening for the programs your station runs. Nothing
  listens until you turn an adapter on, and turning it off closes its port. Each adapter listens on
  this computer alone unless you choose a network, and on a network only the computers you name
  may send. The page shows the port, who may send, whether it is hearing WSJT-X and when it last
  did, and anything it dropped and why.

Fixed

• Settings and Home no longer scroll the whole window. A second scrollbar appeared beside the
  page's own, and scrolling it moved the header, the rail and the status bar off the window, leaving
  an empty band below. Only the page scrolls now.
• The rpm installs on Rocky Linux and RHEL 10 without EPEL. It required libXScrnSaver, which
  the application does not use and which those systems ship only in EPEL, so on a system without
  EPEL dnf refused to install it. The deb drops the same library (libxss1).

---

Tested: CI's checks passed on Windows, Linux x64, Linux arm64 and macOS, in the build these files came from.

A pre-release: the final 0.5.0, out for testing before it is marked Latest.
Signed by KI7MT: Windows as Gregory Beam, macOS as Greg Beam (Apple Developer ID) and notarized by Apple.

A .zip is the portable build: unpack it anywhere and run it, nothing to install.
Check a download against SHA256SUMS.txt. Every file here was built by this repository's CI, and GitHub signs that it was: gh attestation verify <file> -R qso-graph/qso-graph-desktop (how to verify a download).

QSO Graph Desktop 0.4.1

Quick downloads

Windows

• Installer: 64-bit .exe
• Portable: .zip

Linux

• AppImage: x86_64 · arm64 (Raspberry Pi 5)
• Debian, Ubuntu (.deb): amd64 · arm64, or our apt repository (Stable releases only)
• Fedora, RHEL, Rocky (.rpm): x86_64 · aarch64, or our dnf repository (Stable releases only)
• Portable: x64 .zip · arm64 .zip

macOS

• Apple silicon: .dmg · portable .zip, or brew install qso-graph/tap/qso-graph-desktop (Stable releases only)

---

Security

• The update feed is signed, and nothing in it is believed without that signature (#128). On
  Linux an AppImage update was trusted on what the feed said alone, so whoever could change the feed
  could choose what was installed. The feed is now signed with the release key that signs our apt
  and dnf repository, and the application checks that signature, and that the feed is not older
  than one it has already seen, before it reads a word of it. Windows and macOS were already
  protected by the installer's own signature, and now have both.

Fixed

• QRZ Logbook's credential test works with just its API key (#8). It asked for a username the
  setup never offered, so a key saved through Setup could not be tested.
• QSO Graph Desktop tells QRZ and every other service its real version (#129), instead of
  0.0.0-preview.1.

Changed

• A release's page starts with Quick downloads: the file for your computer, Windows, Linux or
  macOS, before the full list, and ends with one line saying CI's checks passed on every platform,
  linked to the build the files came from.

• The documentation says what the application does. Every extension starts off until you turn it
  on in Settings → Extensions (four READMEs said "on by default"); the extensions README lists the
  four that ship; the Windows installer is signed (Troubleshooting said it wasn't); Linux packages
  come from our signed apt and dnf repository; diagnostics are saved from Help → Save Diagnostics for
  Support…; security fixes are made for the latest Stable release on main; and the install page
  shows Homebrew for macOS.

---

Tested: CI's checks passed on Windows, Linux x64, Linux arm64 and macOS, in the build these files came from.

A pre-release: the final 0.4.1, out for testing before it is marked Latest.
Signed by KI7MT: Windows as Gregory Beam, macOS as Greg Beam (Apple Developer ID) and notarized by Apple.

A .zip is the portable build: unpack it anywhere and run it, nothing to install.
Check a download against SHA256SUMS.txt. Every file here was built by this repository's CI, and GitHub signs that it was: gh attestation verify <file> -R qso-graph/qso-graph-desktop (how to verify a download).

QSO Graph Desktop 0.4.0

Added

• The Windows installer has our own artwork: the QSO Graph icon on the app's dark navy, on the
  installer's first and last pages and along the top of the others. (#122)

• Start it when the installer finishes: the Windows installer's last page has Run QSO Graph Desktop,
  ticked; untick it to finish without starting. (#122)

• Linux: install from our own apt or dnf repository, and QSO Graph Desktop updates with the rest
  of your system. Every package and index is signed with our release key, which KI7MT's own key
  signs; the install page has the steps. (#113)

Fixed

• What's New shows only what's new to you. After an update, it shows the releases from the version you
  had to the one you have now, and nothing older, even if you never closed the line on Home after earlier
  updates. Updating from 0.2.1 to 0.3.1 shows 0.3.0 and 0.3.1. After going back to an older version, Home
  says Went back to it, with nothing to read. (#119)
• A test build can go back to a release. A lab build installed by hand now checks for updates like a
  Preview, so Choose a version… lists the Stable releases to go back to. It installs only an update
  signed by us. (#121)
• An update that can't be installed says so. If the version you chose can't be installed after you
  click Restart to update, QSO Graph Desktop tells you, changes nothing, and opens again as it was,
  instead of closing and leaving nothing on screen. (#121)

---

A pre-release: the final 0.4.0, out for testing before it is marked Latest.
Signed by KI7MT: Windows as Gregory Beam, macOS as Greg Beam (Apple Developer ID) and notarized by Apple.

A .zip is the portable build: unpack it anywhere and run it, nothing to install.
Check a download against SHA256SUMS.txt. Every file here was built by this repository's CI, and GitHub signs that it was: gh attestation verify <file> -R qso-graph/qso-graph-desktop (how to verify a download).

Preview of 0.4.0

A preview of 0.4.0, built from main at 42a8a2d (version 0.4.0-202610281352-42a8a2d9543).

For testing what is coming, not for running your station (docs/RELEASES.md). Rebuilt each night main has changed.

• Windows: signed by Gregory Beam (KI7MT). The signature is new, so Edge may say the file isn't commonly downloaded (Keep), and Windows may say it protected your PC: More info shows the publisher, then Run anyway.
• macOS: signed by Greg Beam (KI7MT) with an Apple Developer ID, and notarized by Apple.
• A .zip is the portable build: unpack it anywhere and run it.

Check a download against SHA256SUMS.txt.

QSO Graph Desktop 0.3.1

Changed

• Restart to update says what happens first. A dialog says which version is installing, that QSO Graph
  Desktop closes and reopens by itself, and how long that takes (about a minute on Windows, where nothing is on
  screen while it installs). OK installs; Cancel leaves it to install when you next quit. (#114)

Security

• Conditions can't be held up by a malformed NOAA reply. Stripping the padding NOAA's servers sometimes
  add took time growing with the square of its length: a reply padded with 200,000 of them in the middle held
  the page for about 15 seconds. It's now stripped in one pass. Found by GitHub's code scanning, with seven
  more alerts fixed and one closed as a false alarm in code the native-addon library generates. (#115)

Fixed

• A busy service's wait is never cut short. When two requests to the same service were out at once,
  whichever answered last decided how long to leave it alone, even if that was shorter than the other
  had been asked for. The longer wait now always stands. (#110)

---

A pre-release: the final 0.3.1, out for testing before it is marked Latest.
Signed by KI7MT: Windows as Gregory Beam, macOS as Greg Beam (Apple Developer ID) and notarized by Apple.

A .zip is the portable build: unpack it anywhere and run it, nothing to install.
Check a download against SHA256SUMS.txt. Every file here was built by this repository's CI, and GitHub signs that it was: gh attestation verify <file> -R qso-graph/qso-graph-desktop (how to verify a download).

QSO Graph Desktop 0.3.0

Changed

• Checking for updates only checks. When a newer version is out, Settings and the status bar say
  so, with Download and install; nothing is downloaded until you choose. Then, as before, it waits
  for you to restart, or installs when you quit. (#52)
• Polite to the services it asks. No source is asked more often than it needs: POTA spots once a
  minute, NOAA's conditions every 15 minutes, and the park and summit lists once a day, whatever a
  page's Refresh or Settings' Update asks. A list that is current says when its next check is,
  instead of offering Update. A service that says it is busy is left alone for as long as it asks.
  (#79)
• Choose a version, and go back. Choose a version… in Settings → Updates lists the versions you
  can install: newer ones, and the Stable releases before yours. Before any update installs, your
  callsigns, Locations, settings and extensions' data are copied as they are; going back to a Stable
  release puts back the copy from when you left it, and says first what is lost. Your logins are
  never touched. A third choice, Previews, offers last night's build; Early and Previews carry no
  guarantee. While a newer Stable release is out, the window's title says so. (#77)
• One backup, with ticks. Tools → Back Up… saves your Callsigns and Locations and your
  Settings (theme, pins, which extensions are on, your POTA Focus Area, the updates choice), both
  ticked; untick either. Restore… shows what a backup holds, ticked; each part you restore replaces
  this computer's, and restoring the settings restarts the application, which it says first.
  Backups from earlier versions still restore. Still no login, username or Location notes. (#64)

Security

• The part that holds your logins and makes secure connections is up to date. Seven published
  weaknesses in the libraries it uses for encrypted connections (rustls, its certificate checking and
  its list of trusted certificate authorities) and for constant-time comparisons are fixed, including
  one that could accept certificates from a distrusted authority. Every build now checks these
  libraries against the public advisory databases and stops if one has a known problem. (#103)

---

A pre-release: the final 0.3.0, out for testing before it is marked Latest.
Signed by KI7MT: Windows as Gregory Beam, macOS as Greg Beam (Apple Developer ID) and notarized by Apple.

A .zip is the portable build: unpack it anywhere and run it, nothing to install.
Check a download against SHA256SUMS.txt. Every file here was built by this repository's CI, and GitHub signs that it was: gh attestation verify <file> -R qso-graph/qso-graph-desktop (how to verify a download).

QSO Graph Desktop 0.2.1

Added

• You can check that a download is an official build, and who published it: the README's
  Verify your download shows how on Windows, Linux and macOS. Every published file now carries
  GitHub's signed record that this project's own build made it. (#83)

Fixed

• QSO Graph Desktop works on a freshly installed Windows 11. It needs Microsoft's Visual C++
  runtime, which a new PC doesn't have, and without it nothing that goes online worked. The installer
  now gets Microsoft's own installer from Microsoft, checks Microsoft signed it, and runs it (one
  administrator prompt, once per PC); the Microsoft Store package asks the Store for it; and if it's
  still missing, the application says so when it starts, with Microsoft's page. (#91)
• Help's documents open from the main branch, which is where they are kept now. (#94)

---

A pre-release: the final 0.2.1, out for testing before it is marked Latest.
Signed by KI7MT: Windows as Gregory Beam, macOS as Greg Beam (Apple Developer ID) and notarized by Apple.

A .zip is the portable build: unpack it anywhere and run it, nothing to install.
Check a download against SHA256SUMS.txt. Every file here was built by this repository's CI, and GitHub signs that it was: gh attestation verify <file> -R qso-graph/qso-graph-desktop (how to verify a download).

QSO Graph Desktop 0.2.0

Changed

• Windows builds are signed in the developer's name, Gregory Beam (KI7MT), as the macOS builds
  are: Windows shows who published the installer instead of an unknown publisher.
• A Windows update is installed only when it is signed by the same publisher as the copy that
  is running, as on macOS. One that isn't is removed, and Settings → Updates says why.
• QSO Graph Desktop for the Microsoft Store (Windows), submitted for Microsoft's review:
  installed from the Store, without the download warnings, and kept up to date by the Store. The Store copy says so in Settings → Updates,
  and that uninstalling it also deletes your callsigns, Locations and settings, so back up first.

---

A pre-release: the final 0.2.0, out for testing before it is marked Latest.
The macOS build is signed and notarized. Windows is unsigned for now, so SmartScreen warns the first time it runs.

A .zip is the portable build: unpack it anywhere and run it, nothing to install.
Check a download against SHA256SUMS.txt.

QSO Graph Desktop 0.1.3

Changed

• The window opens where you left it: the same place and size, and maximized if it was, unless
  that place is no longer on a screen.
• A View menu: Zoom In, Zoom Out and Actual Size (Ctrl or ⌘ with +, − and 0, or with the mouse
  wheel), from 80% to 150%, and Full Screen.
• Menus where each platform keeps them: on macOS, Settings… (⌘,) and Check for Updates… are in
  the QSO Graph Desktop menu; on Windows and Linux, Settings… (Ctrl+,) is in Setup and Check for
  Updates… in Help.
• Parks On the Air has a Settings tab, and its Focus Area (was My POTA Focus Area, on
  Locations) is there: an extension's own settings live in its area, and Settings is the
  application's. Setup → POTA Focus Area… opens it, and is there only while POTA is on.
• About QSO Graph Desktop is in the QSO Graph Desktop menu on macOS, and in Help on Windows and
  Linux.
• Help → Save Diagnostics for Support… saves the redacted diagnostics archive for you to attach to
  a report yourself. Nothing is sent for you.
• The status bar's callsign and Location each open their page, to change them, and the empty
  slot beside them is gone.

Fixed

• Restoring a backup is all or nothing. A backup is checked whole (every callsign and every
  Location, by the same rules as one entered by hand) before anything on the computer changes;
  the Locations are written in one transaction; and what is restored is exactly the file that was
  previewed. Before, a bad file could remove what was there and then refuse itself.
• Updates follow the settings as they are: turning checking off, or moving from Early to
  Stable, while a check is under way no longer downloads an update; and a platform is only ever
  offered its own file.
• Settings → About names the licence as GPL-3.0-only, as the project is licensed; it said
  "or later".
• County fill finds every county a grid square reaches, however thin the sliver: CM87us now
  offers San Francisco as well as Alameda, instead of filling Alameda alone.
• Most Wanted ranks every park in your focus area (it ranked only the first 20,000 by
  reference), and a park in two locations takes its count from the list fetched more recently.
• Near Me finds parks just inside 300 km, at the equator and toward the poles, that it left out.
• The Distance filter is exact: distances show to a tenth of a km, so a park 25.4 km away no
  longer passes "Within 25 km".
• Spots counts activators, not spots: one activator at two parks is one.
• Astro's days follow your computer's clock on the days summer time starts and ends, and the
  radio depths' today and tomorrow are your clock's days, not the Location's solar day.
• Conditions dates NOAA's scales, and the page's time includes them.
• My POTA Focus Area shows its choices the first time, when it is still your Location's own.
• Refresh says Refreshing… until the page has its new answer, then Refreshed; it said
  Refreshed the moment it was pressed.
• Diagnostics no longer say passwords and keys were removed: the logs never hold any.
• Updates switched back on while offline no longer go on saying checking is off.
• What's New after updating from a preview shows that release's notes, not develop's.

Twenty of these were found by Turing (OpenAI Codex), one of the AI agents QSO Graph Desktop is
built with, in a security review and a correctness review: eight and twelve findings, every one
confirmed against the code and fixed with a test that failed first.

---

A pre-release: the final 0.1.3, out for testing before it is marked Latest.
The macOS build is signed and notarized. Windows is unsigned for now, so SmartScreen warns the first time it runs.

A .zip is the portable build: unpack it anywhere and run it, nothing to install.
Check a download against SHA256SUMS.txt.

QSO Graph Desktop 0.1.2

Changed

• Settings → Updates takes two lines: the switch, then Stable or Early, what the last check
  found, and Check now.
• Conditions keeps its figures together instead of spread across the page, and says under them
  what NOAA's R, S and G scales are.
• Astro's grey-line map is no wider than 720 pixels, so it no longer fills a full-screen
  window.
• Astro's grey-line DX check asks for a DX grid, without saying the grey line twice.
• Help starts with About QSO Graph Desktop and What's New. About (and, on macOS, the
  application menu's About) opens Settings → About: the version, what the application sends
  anywhere, the project's documents, a link to What's New for this version, and the icons' credit.
• Settings → Updates says why a build does not check: the switch is off, or it is a development
  build or a preview.

Fixed

• A backup now carries which callsign is active, and restoring it makes that callsign active
  again. Backups made before this are still read. A copy of 0.1.0 or 0.1.1 says a new backup is
  from a different version instead of reading it.

---

A pre-release: the final 0.1.2, out for testing before it is marked Latest.
The macOS build is signed and notarized. Windows is unsigned for now, so SmartScreen warns the first time it runs.

A .zip is the portable build: unpack it anywhere and run it, nothing to install.
Check a download against SHA256SUMS.txt.