Skip to content

Aether v1.0.0-beta.8

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 25 Aug 15:04
· 2 commits to main since this release
v1.0.0-beta.8
a4a8e06

Aether v1.0.0-beta.8

The security & stability release. This build ships major hardening across the extension sandbox, frontend rendering, and Linux packaging — plus the first AppImage built entirely by our CI pipeline.

🔒 Security

  • Modrinth Browser XSS fixed — mod titles, authors, descriptions and icons from Modrinth are no longer rendered as raw HTML. All card content is now built with safe DOM APIs, icons are restricted to cdn.modrinth.com over HTTPS, and a strict Content-Security-Policy is enforced inside the extension UI.
  • Extension IPC hardened — messages between extension UIs and the launcher are now validated (origin + marker check) instead of accepting wildcard postMessage('*').
  • Sandbox network hardening — HTTP redirects to non-allowlisted hosts are now blocked; response size limits enforced on all sandbox downloads.
  • Atomic config writes — settings and account files are written atomically (.tmp → rename), so a crash mid-save can no longer corrupt them.
  • Safer auth storage — accounts.json is mutex-protected against concurrent writes and auto-recovers (with backup) if found corrupted.
  • Removed {@html} usage from toast notifications as defense-in-depth.

🐧 Linux

  • AppImage rebuilt properly — correct AppDir layout (.DirIcon, desktop entries, hicolor icon) packaged via appimagetool, produced automatically on every build. If you previously had "the AppImage doesn't start", this build should fix it — please report back!

✨ Improvements

  • Report bugs from Settings — new Help & Support section with one-click "Report a Bug on Discord".
  • Offline resilience — Mojang's version manifest is cached locally (with request timeouts), and mod loader metadata is cached for 24h. Once cached, creating instances and launching loaders keeps working through outages and flaky DNS.
  • Smoother Microsoft sign-in — transient DNS failures during login are retried automatically, with a clear offline hint instead of a cryptic error.
  • Discord Rich Presence 1.0.1 — grass-block & per-loader icons, correct display for vanilla instances, fixed presence for single-character instance names, and no more dropped presence ("context canceled").
  • Modrinth Browser 1.2.2 — cleaner version labels (no more duplicated names), tooltips, and graceful truncation of long entries.
  • Mod Manager 1.0.1 — proper puzzle-piece icons instead of the generic ZIP icon.
  • Instance creation hardened — names and paths are validated up front.

🛠️ Frontend Stability

  • Fixed event-listener leaks that accumulated every time you visited Home or Settings.
  • Extension pages now cleanly mount/unmount when switching sidebar tabs — no more zombie webviews.
  • Instance details reliably reload when jumping between instances.
  • Numerous Svelte reactivity fixes across navigation and forms.

📚 Docs

  • SECURITY.md, API.md, and ARCHITECTURE.md updated to match the new sandbox behavior, IPC validation, and async extension loading pipeline.

⬇️ Downloads

Platform File
Windows (x64) Aether-windows-amd64-installer.exe / .exe
macOS (Intel) Aether-macos-amd64.dmg
macOS (Apple Silicon) Aether-macos-arm64.dmg
Linux (x64) Aether-linux-amd64.AppImage / .tar.gz

🙏 Call for Testing

This is the first release with a CI-built Linux AppImage — Linux users, we especially need your feedback. If anything breaks, hit Settings → Help & Support → Report a Bug on Discord, or join directly: https://discord.gg/hyPWTs9FfM

Full Changelog: v1.0.0-beta.7...v1.0.0-beta.8

Assets 8
Loading