Skip to content

Varve v0.5.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Oct 04:19
· 291 commits to master since this release
v0.5.1
e5a52de
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Varve 0.5.1

Patch over public-beta 0.5.0. The document schema is still 2.33. This
release replaces the bundled ICC profiles, adds AI disclosure controls,
fixes crash-screen false positives and email export/preview bugs, and
records Generative Edit, which shipped in 0.5.0 but was missing from those
notes.

Added

  • Generative Edit — Select one image and reconstruct painted pixels
    (Fill), rebuild a painted object's background without deleting the layer
    (Remove / Generative Subtract), or add pixels beyond the current bounds
    (Expand). Draft Fill/Remove uses PatchMatch with no model download;
    higher quality uses an optional local LaMa inpainting model. Desktop
    Expand has limited Linux x86_64 photo review; browser Expand needs LaMa,
    and Fast/PatchMatch Expand stays disabled after visible edge striping.
    Replace and prompt-conditioned Fill/Expand remain gated until a local
    model passes qualification. Accepting writes one undoable transaction
    and keeps an immutable source snapshot. Open it from the image
    inspector, Crop & Bounds, the Layers or canvas context menu,
    Object → Generative Edit…, or the command palette.
  • AI transparency controls — Settings → AI features is on by default
    (Ctrl+Alt+Shift+A toggles it). Layers mark AI-edited nodes; the
    Inspector shows AI Edit History; export can attach disclosure metadata
    (PNG/JPEG XMP, PDF XMP, SVG <metadata>; WebP warns because canvas
    encode cannot carry XMP). Existing AI-edited layers stay editable when
    the switch is off. Larger models still download only when requested.
  • Linux packaging — AUR varve-desktop-bin is ready for the v0.5.0
    dual-arch AppImages (checksums, MetaInfo, MIME types, license files,
    aarch64). AppStream metadata lives in the desktop linux tree.
    This landed after the v0.5.0 tag.

Changed

  • ICC profiles — Bundled sRGB is Compact ICC Profiles sRGB-v4
    (CC0-1.0, 480 bytes). Bundled CMYK is ISOcoated_v2_bas.ICC (FOGRA39 /
    ISO 12647-2:2004, Zlib via Debian icc-profiles-free / basICColor).
    v0.1.0–v0.5.0 shipped Artifex Ghostscript profiles under
    AGPL-3.0-or-later.
  • macOS Gatekeeper — Browser-downloaded .app bundles are ad-hoc
    signed so Gatekeeper no longer reports them as damaged with no Open
    Anyway path. They remain unsigned for trust labels; not Developer ID
    or notarized.
  • Linux AppImage and AUR — Packed AppImage directories and launchers
    are world-readable so AppImageHub and firejail mounts can run the
    image. The AUR varve-desktop-bin package resets extract modes instead
    of copying 0700 trees into pacman.

Fixed

  • Crash screen false positives — Recovered WebGL context loss,
    aborted jobs, and other diagnostics no longer open "Varve closed
    unexpectedly".
  • Document switch — Error boundaries reset on file change, so a bad
    render does not stick across documents. Opening a file no longer hides
    the Layers panel. Malformed text nodes are coerced on load instead of
    crashing the canvas.
  • Comic balloons — Speech, thought, and shout balloons appear in
    Quick Actions and the command palette.
  • Email workspace — Preview and HTML/plain-text export: no duplicate
    output roots, inline preview assets when no base URL is set, button
    labels from child text, fluid containers for mobile preview, inherited
    link colour, text alignment, caption column widths, rasterization
    warnings only when a raster fallback is emitted, and button labels and
    links in plain text.

Security

  • rustls 0.23.46 (RUSTSEC-2026-0346 through 0349).
  • quinn-proto 0.11.19 (RUSTSEC-2026-0338 through 0342). Transitive Tauri
    QUIC stack; the advisory fix does not claim a Varve-reachable path.

Before you install

These builds are not code-signed. That is a statement about this project’s budget, not about the files — but your operating system cannot tell the difference, and neither can you without checking. Verify the SHA-256 checksum below against your download before running it.

  • Windows shows "Windows protected your PC". Choose More info → Run anyway. Windows 11 Smart App Control can block unsigned apps with no override — use the browser version at https://varve.studio/try.
  • macOS may block the first launch of an ad-hoc-signed app. After that attempt, use System Settings → Privacy & Security → Open Anyway. Do not disable Gatekeeper system-wide. 0.5.0 still needs xattr -dr com.apple.quarantine /Applications/Varve.app.
  • Linux has no equivalent prompt; verify the checksum instead.

Downloads

Platform Package Size Install
Linux aarch64 Varve-0.5.1-linux-aarch64.AppImage 78.9 MB chmod +x, then run. Needs FUSE2.
Linux aarch64 Varve-0.5.1-linux-aarch64.deb 84.3 MB sudo apt install ./
Linux aarch64 Varve-0.5.1-linux-aarch64.rpm 84.3 MB sudo dnf install ./
Linux x86_64 Varve-0.5.1-linux-x86_64.AppImage 86.1 MB chmod +x, then run. Needs FUSE2.
Linux x86_64 Varve-0.5.1-linux-x86_64.deb 92.2 MB sudo apt install ./
Linux x86_64 Varve-0.5.1-linux-x86_64.rpm 92.2 MB sudo dnf install ./
macOS aarch64 Varve-0.5.1-macos-aarch64.dmg 88.0 MB Open, drag to Applications.
Windows aarch64 Varve-0.5.1-windows-aarch64.exe 62.2 MB Per-user install, no admin needed.
Windows x86_64 Varve-0.5.1-windows-x86_64.exe 66.7 MB Per-user install, no admin needed.

Verify your download

114add3f863f8edaf203b95ef4ca051c1b29432ca650a9b4c301c4b0e6080419  Varve-0.5.1-linux-aarch64.AppImage
4433cf38afde59056ed47d7c6d8bc69e172026c704092dc8611bd6762633af78  Varve-0.5.1-linux-aarch64.deb
af0d5c3d45a414d6527eecf7ab912ef14058891c82a2422198d0d688e14bfc25  Varve-0.5.1-linux-aarch64.rpm
af2d3fbc1bed1a4ae85c64e1fdd72e455f18e2a87564454251b5d696ed6d6c56  Varve-0.5.1-linux-x86_64.AppImage
55413c9e5fab4a17a434be830ca44c17add6d063a37dbe18958f53bd230db1d3  Varve-0.5.1-linux-x86_64.deb
193ad9cfebb7c1b1d5518d2642398757597f1ff782e6d208771538caf732e574  Varve-0.5.1-linux-x86_64.rpm
e0c510c6b884ebefb731c2ff4d842a63da66ad8dd359f0f754904467e98c3dce  Varve-0.5.1-macos-aarch64.dmg
55ccd54fb07d078185ae2a158be453905c7f76cb22e8ff9cb00cc585da657c4f  Varve-0.5.1-windows-aarch64.exe
17b5c59d50a392467fdb9de73e7f9ac40fce83a8d54b3a242ec66c8abe9a9971  Varve-0.5.1-windows-x86_64.exe

Download SHA256SUMS.txt and verify only the file you downloaded with sha256sum --ignore-missing -c SHA256SUMS.txt:

  • Linux: sha256sum --ignore-missing -c SHA256SUMS.txt or grep <filename> SHA256SUMS.txt | sha256sum -c
  • macOS: shasum -a 256 <filename>
  • Windows PowerShell: Get-FileHash .\<filename> -Algorithm SHA256

Known limitations

  • This is early software. Keep backups of anything you care about. The .varve document format may still change in ways that break older files.
  • In-app updates: once you turn on update checks in Settings, Varve checks for new versions and can install signed updates. You can also download each release manually from this page.

A CycloneDX software bill of materials is attached as varve-0.5.1-sbom.cdx.json.

Assets 40
Loading