Prepare Ceiling 0.43.3 release

[tsouth89]

Promote the 0.43.3 line from beta to stable now that the Jul 2026 security hardening (SOU-148) has fully merged to main.

Version

• Bump 0.43.3-beta.2 -> 0.43.3 across rust/Cargo.toml, desktop Cargo.toml, tauri.conf.json, package.json, Cargo.lock, and version.env (BUILD_NUMBER 89 -> 90).
• Add the 0.43.3 CHANGELOG entry.

What is in this release since beta.2

Four merged security PRs (all reviewed by CodeRabbit + Sol, CI green on main):

• Harden Windows local access controls #24 Harden Windows local access controls (SOU-149, SOU-150)
• Harden credential storage hygiene #25 Harden credential storage hygiene (SOU-151, SOU-159)
• Restrict Tauri command boundaries #26 Restrict Tauri command boundaries (SOU-153)
• Update serde_with security patch #27 serde_with security patch (SOU-193, GHSA-7gcf-g7xr-8hxj)

Release

After merge, tag v0.43.3 on main to trigger the signed Windows build, which drafts the GitHub release.

Summary by CodeRabbit

• Security
  • Strengthened protection for secrets and stored credentials with user-scoped encryption and access controls.
  • Removed plaintext cookie caches and ensured temporary cookie data is cleaned up on exit.
  • Restricted status communication, window commands, and folder access to authorized application contexts.
• Release
  • Promoted the application to version 0.43.3.
  • Updated the build number to 90.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 85e46cdb-f1f8-4149-80d8-47588893116a

📥 Commits

Reviewing files that changed from the base of the PR and between b4867b0 and 454347f.

⛔ Files ignored due to path filters (1)

• Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (6)

• CHANGELOG.md
• apps/desktop-tauri/package.json
• apps/desktop-tauri/src-tauri/Cargo.toml
• apps/desktop-tauri/src-tauri/tauri.conf.json
• rust/Cargo.toml
• version.env

---

📝 Walkthrough

Walkthrough

The release metadata now reports stable version 0.43.3, with build number 90. The changelog adds the 0.43.3 release entry and documents security hardening and a serde_with update.

Changes

0.43.3 Release Preparation

Layer / File(s)	Summary
Release metadata alignment apps/desktop-tauri/package.json, apps/desktop-tauri/src-tauri/Cargo.toml, apps/desktop-tauri/src-tauri/tauri.conf.json, rust/Cargo.toml, version.env	Version fields change from 0.43.3-beta.2 to 0.43.3, and BUILD_NUMBER increases from 89 to 90.
Release changelog entry CHANGELOG.md	Adds the 0.43.3 release notes, including security hardening items and the serde_with advisory update.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Possibly related PRs

• tsouth89/ceiling#8: Updates release metadata across the same version and changelog files.
• tsouth89/ceiling#16: Covers the same 0.43.3 release line and metadata updates.

Suggested reviewers: finesssee

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly matches the main change: preparing the Ceiling 0.43.3 stable release.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch codex/release-0.43.3

---

_{Comment @coderabbitai help to get the list of available commands.}

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	ceiling	454347f	Commit Preview URL Branch Preview URL	Jul 16 2026, 02:35 AM