ThistleOS v0.5.2

v0.5.2 - 2026-05-03

Recovery trust-root hardening release.

• Removed the blocking UART console from the minimal recovery control loop so web-triggered WiFi and bundle installs run without serial input.
• Made board catalog/config selection authoritative for recovery bundle matching; generic board pin probing is disabled in recovery.
• Recovery now verifies catalog SHA-256 hashes and Ed25519 signatures before flashing firmware, installing executable drivers/window managers, or applying SD-card firmware updates.
• Bundle firmware entries now flash directly to ota_1 and set the boot partition during install instead of staging an update file on SD.

ThistleOS v0.5.1

Patch release from the watch compatibility and build-stabilisation work.

Highlights:

• Added recovery board catalog support so board lists can be served through the recovery web interface.
• Integrated watch compatibility and e-paper bring-up work, including Waveshare 2.06 Watch and T-Watch Ultra board data.
• Integrated PR #24 e-paper bring-up and input/launcher fixes.
• Fixed online simulator and WASM builds with missing platform and board helper stubs.
• Fixed the recovery CI artifact upload path so the release includes the recovery binary.
• Quieted residual firmware build warnings and removed stale LTO sdkconfig noise.

Verification:

• ThistleOS CI run 25275488269 passed: firmware build/sign/upload, recovery build/upload, Rust kernel tests, cargo-audit, Semgrep, and Trivy.
• Tests run 25275488273 passed.
• Pages/WASM simulator run 25275488274 passed.

Release assets:

• thistle_os.bin
• thistle_os.bin.sig
• thistle_os.bin.pub
• thistle-recovery