heap v0.5.4

macOS: this build is not notarized. On first launch, right-click heap.app → Open.

Windows: this build is not code-signed, so SmartScreen may say "Windows protected your PC". Choose More info → Run anyway, after checking the SHA-256 below.

Verify a download: sha256sum -c SHA256SUMS, or gh attestation verify <file> --repo sectapunterx/heap.

SHA-256 checksums

4fdcdd29b4a8d49f68301a83bc2e3d0ca07547dffea646f70acb1a3bd39b58b5  heap-v0.5.4-linux-x86_64.AppImage
ab23c9de0a73c955b2aee5c8deddce2bf39ebf9294fd468020e368aa22440834  heap-v0.5.4-macos.dmg
bf579effd084ea1467eb4ba6b56f0d71b4f17c3c87df793cc65d43b9613894b6  heap-v0.5.4-sbom.spdx.json
27d8b93c23cdba155549ebf0ec1558293672636b9a18322e3fcd50ba2e5aecc3  heap-v0.5.4-windows-portable.zip
d6d08c04c0665e0d4580c7a2a97e65d3fc0ea1fa0da3ee9818fe48cd53a0f820  heap-v0.5.4-windows-setup.exe

What's Changed

• ci(qmllint): fix the module import that made the ratchet always red by @sectapunterx in #167
• feat: file attachments and saved views by @sectapunterx in #168
• fix: S/A findings of the 2026-09-30 e2e audit by @sectapunterx in #169
• Design audit: contrast tokens and keyboard focus (S tier) by @sectapunterx in #170
• Design audit: A, B and C tiers by @sectapunterx in #174
• Audit 2026-09-30: B·S and B·A tiers by @sectapunterx in #175

Full Changelog: v0.5.3...v0.5.4