Skip to content

Harbor Desk v0.5.0

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 28 Aug 12:44
· 69 commits to main since this release
v0.5.0
0e6989d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Harbor Desk v0.5.0 preview

This preview contains the client-first desktop app with its automatic loopback policy gateway, plus the optional server-side Docker gateway installer.

Changes

Added

  • The desktop client checks the public Harbor Desk GitHub Releases metadata
    after startup and reports available updates in the shared shell. General
    settings can disable startup checks or exclude preview releases, and the
    status bar can trigger a manual refresh.
  • Update checks run in the Electron main process behind a narrow preload API.
    The client opens only the fixed Harbor Desk release-tag page after a user
    action and never downloads or executes an installer automatically.

Fixed

  • Release checksum manifests now use portable asset basenames instead of the
    CI-only release-assets/ staging path.

Downloads

  • Windows: x64 NSIS installer and blockmap
  • Linux: x86_64 AppImage and Debian package
  • macOS: x64 and arm64 DMG/ZIP packages and blockmaps
  • Server: attached GitHub release tarball harbor-desk-0.5.0.tgz
  • Integrity: SHA256SUMS contains SHA-256 checksums for every distributable asset

npm distribution

The npm registry provides v0.5.0. To run that exact version instead of following the latest dist-tag:

npx --yes harbor-desk@0.5.0 --version

Preview and security boundaries

This remains a prerelease. Desktop binaries are currently unsigned; verify SHA256SUMS before installation and use a source build where signed artifacts are required.

The desktop starts its bundled gateway automatically on 127.0.0.1 and does not require a local Docker Engine. Docker access remains behind the gateway; the renderer never receives a Docker socket or direct Engine connection. The optional server installer supports controlled Linux, Windows, and macOS Docker hosts, but requires explicit --allow-local-engine-socket acknowledgement before mounting a host's Docker Engine socket.

See SECURITY.md for the current security and dependency-advisory boundary.

Assets 16
Loading