Skip to content

v0.7.0-alpha.8

Choose a tag to compare

View all tags
@thcp thcp released this 05 Jun 12:29
v0.7.0-alpha.8
471cafd
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Important

macOS first launch (no code signing yet). After dragging StemDeck to Applications, clear the Gatekeeper quarantine flag or macOS will say the app is damaged:

xattr -dr com.apple.quarantine /Applications/StemDeck.app

Optional: fresh-install cleanup. To reproduce a true first-run with no leftover state from earlier builds, open each path in Finder via the Go menu, then Go to Folder (Shift+Cmd+G), and move the folders to Trash:

  • ~/Library/Application Support/StemDeck
  • ~/Library/WebKit/app.stemdeck.desktop
  • ~/Library/Caches/stemdeck
  • ~/Library/Caches/app.stemdeck.desktop

You can also delete ~/Library/Preferences/app.stemdeck.desktop.plist the same way. This is optional; the app will work without it.

What's new in 0.7.0 Alpha 8

Security

  • macOS now verifies the FFmpeg download before running it. Setup downloads FFmpeg and ffprobe on macOS; previously they were extracted and executed with no integrity check, so a corrupt or tampered download could have been run during setup. The macOS path now checks a pinned SHA256 before the binaries are extracted or executed, and aborts with a clear error on a mismatch, matching the verification the Windows path already did. (#172)

Installing

  • macOS: drop the .app into Applications and launch (run the xattr command above first).
  • Windows: unzip the downloaded .zip, then run StemDeck.exe from the extracted folder.

Artifact scan

  • Windows portable packages were scanned with ClamAV in CI before upload.

Artifact build

  • macOS arm64 and x64 DMGs and runtime packs were built and inspected on a macOS Woodpecker agent before upload.
Assets 12
Loading