xdzip 0.2.0

xdzip 0.2.0

xdzip 0.2.0，build 27 是功能更新版本，增加独立命令行客户端，并让 macOS 自定义代理与直连模式支持原生安装更新。

本版更新

• macOS 更新代理：系统代理、无凭据 HTTP CONNECT／SOCKS5 自定义代理和直连均可用于原生安装更新。feed 与归档共用启动前冻结的网络策略，自定义代理失败不会回退直连，直连明确绕过系统静态代理、PAC 和自动发现。发布签名、TLS、候选身份、任务退出和恢复检查保留。
• 独立 CLI 客户端：提供 Windows x86_64、macOS Apple Silicon 和 Linux x86_64 命令行包，无需 Qt 或显示会话。支持 list、extract、create、add、test、update、gui、setup，以及 JSON、非交互模式、密码输入和取消。格式、加密、分卷及写入边界与桌面核心一致，密码不通过命令行参数传入。
• 命令行安装与更新：桌面包内也带有 CLI，终端入口由用户通过 setup 显式启用。独立发行包使用受签名清单保护的管理式更新；源码和开发构建仅检查或下载。桌面 CLI 的更新交接保留应用任务和安装占用屏障，交接成功不等于安装完成。
• 修复 macOS 内置 CLI 元数据位置导致的应用完整性签名失败，将该资源纳入正常 bundle 封装。
• QtNetwork 安全修复：采用固定 Qt 6.8.2 官方补丁派生库，修复 CVE-2026-116337 的 HTTP 响应接收限制及 CVE-2026-105946 的认证解析边界。保留原 SDK 的其他模块和 TLS 功能，来源与替换材料见补丁说明。

下载与升级

• 图形界面用户选择对应平台的桌面安装包或便携包；仅使用终端时选择名称以 xdzip-cli-0.2.0- 开头的独立包。CLI 命令和安装说明见命令行契约。
• 旧版 macOS 客户端不会因新版本发布而获得新的代理实现。首次取得本版时，若旧客户端自定义代理无法自动安装，请先使用系统代理或从本发布页手动安装。
• 桌面更新与独立 CLI 更新分别提供签名清单，全部发行附件提供 SHA256SUMS。已公开旧版本的附件保持不变。

支持与验证边界

• 支持范围为受维护的 Windows 11 x86_64、macOS 14 或更新版本 Apple Silicon，以及 Ubuntu 24.04 LTS x86_64、glibc 2.39 或更新版本。桌面 Linux 使用 X11；独立 CLI 不依赖 X11，但需要系统 OpenSSL 3 和 CA 证书。
• macOS 代理与直连变更已在 macOS 15.8.2 arm64 原生 CI 和 macOS 27.2.1 Apple Silicon 本机验证，覆盖实际安装、重启、配置快照、静态代理/PAC 对照、TLS 拒绝和设置恢复。macOS 14 当前没有可用原生环境，仍未验证，不以其他系统结果替代。
• CLI 已有三平台原生自动验证。发行工作流另外构建本版本桌面和 CLI 包，执行各平台适用的部署、启动、安装生命周期与 CLI 核验；实际运行和附件复核记录见发行任务 #260。Windows Server CI 不等于 Windows 11 人工验收，本版不新增人工桌面验收声明。
• Windows 安装器未签署发行者证书；macOS 使用 ad-hoc 完整性签名，未使用 Developer ID 或公证，系统可能显示安全提示。更新附件的密码学签名不代替平台发行者签名。
• 发行材料保留适用通知、许可和 SBOM，Sparkle 派生框架的源码、补丁与构建身份单独记录。不生成或上传单独的对应源码压缩包；GitHub 自动提供的标签源码快照不由发行流水线生成或上传。

English

xdzip 0.2.0, build 27 adds a standalone command-line client and native macOS installation updates with custom proxies and explicit direct connections.

Changes

• macOS update transport: system proxies, credential-free HTTP CONNECT/SOCKS5 proxies and direct connections support native installation updates. Feed and archive share an immutable policy configured before startup. Custom proxies never fall back to direct; direct mode bypasses static system proxies, PAC and discovery. Signature, TLS, candidate, task-exit and recovery checks remain in force.
• Standalone CLI: native Windows x86_64, Apple Silicon macOS and Linux x86_64 packages run without Qt or a display session. Commands include list, extract, create, add, test, update, gui and setup, with JSON, noninteractive operation, password input and cancellation. Existing format, encryption, split-archive and write limits apply. Passwords are never accepted as command-line arguments.
• CLI installation and updates: desktop packages also contain a private CLI; users explicitly enable terminal registration with setup. Standalone release packages use managed updates protected by a signed manifest. Source and development builds remain check/download-only. Desktop CLI handoff retains task and installation occupancy barriers; handoff does not mean installation succeeded.
• Fixed bundled macOS CLI metadata placement so it is sealed as a normal bundle resource without blocking application integrity signing.
• QtNetwork security fixes: a pinned Qt 6.8.2 build applies the official patches for CVE-2026-116337 HTTP response limits and CVE-2026-105946 authentication parsing. Other SDK modules and TLS features retain their existing provenance; complete patches and replacement instructions are provided in the maintenance guide.

Downloads and upgrading

• Choose a desktop installer or portable package for graphical use, or an independent archive starting with xdzip-cli-0.2.0- for terminal-only use. See the CLI contract for commands and setup.
• Older macOS clients retain their original updater implementation. If a custom proxy prevents automatic installation, obtain this first supporting version using a system proxy or install it manually from this release.
• Desktop and standalone CLI updates have separate signed manifests. SHA256SUMS covers the release attachments; previously published assets remain unchanged.

Support and verification limits

• Supported targets are serviced Windows 11 x86_64, macOS 14 or later on Apple Silicon, and Ubuntu 24.04 LTS x86_64 with glibc 2.39 or later. Linux desktop uses X11; standalone CLI needs system OpenSSL 3 and CA certificates, without X11.
• The macOS transport changes were verified natively on macOS 15.8.2 arm64 CI and a local Apple Silicon Mac running macOS 27.2.1, including actual installation, restart, frozen settings, static-proxy/PAC controls, TLS rejection and restored system settings. macOS 14 remains unverified because no native environment is available; other OS results do not substitute for it.
• CLI has existing native automated evidence on all three platforms. The release workflow separately builds this version's desktop and CLI packages and performs applicable deployment, launch, installation-lifecycle and CLI checks; actual run and attachment verification are recorded in release issue #260. Windows Server CI does not constitute manual Windows 11 acceptance. This release adds no new manual desktop acceptance claim.
• The Windows installer has no publisher signature. macOS uses ad-hoc integrity signing without Developer ID or notarization, and system security prompts may appear. Cryptographic update signatures do not replace platform publisher signatures.
• Release materials retain applicable notices, licenses and SBOMs, with separate source, patch and build identities for the derived Sparkle framework. No separate corresponding-source archive is generated or uploaded. GitHub's automatic tag source snapshots are not generated or uploaded by the release pipeline.

xdzip 0.1.3

xdzip 0.1.3

xdzip 0.1.3，build 26 是稳定补丁版本，修复应用归档解压后的目标文件夹名称。

本版更新

• 默认创建同名文件夹时，归档名称去掉压缩扩展名后若仍以 .app 结尾，会继续去掉该后缀。例如 Demo.app.zip 解压到普通的 Demo 文件夹，避免 macOS Finder 将外层文件夹误认为损坏的应用。归档内应用的名称、内容和签名不变；不创建同名文件夹时输出路径不变。

支持与限制

• Windows 11（受维护版本）x86_64，macOS 14 或更新版本 Apple Silicon，Ubuntu 24.04 LTS x86_64、X11、glibc 2.39 或更新版本。
• Windows 安装器未签署发行者证书；macOS 使用 ad-hoc 完整性签名，未使用 Developer ID 签名或公证。系统可能显示安全提示。
• 本次修复已在 Apple Silicon 本机使用实际 app.zip 验证默认解压、目标预览、文件内容、链接、签名及启动；未执行人工视觉验收，也未将其他平台结果推定为已通过。正式发布工作流的实际打包与验证结果另行记录。
• 发行材料包含适用通知和 SBOM，不附单独的对应源码压缩包；该政策本身不代表所有适用许可义务已自动满足。

English

xdzip 0.1.3, build 26 is a stable maintenance release fixing destination folder naming for application archives.

Changes

• When the default archive-named folder is enabled, a trailing .app is removed after the archive extension. For example, Demo.app.zip extracts into the ordinary Demo folder, preventing macOS Finder from treating the outer folder as a damaged app. The name, contents and signature of the app inside are unchanged; paths are unchanged when the option is disabled.

Support and limitations

• Windows 11 (supported servicing versions) x86_64, macOS 14 or later on Apple Silicon, and Ubuntu 24.04 LTS x86_64 with X11 and glibc 2.39 or later.
• The Windows installer has no publisher signature. macOS uses ad-hoc integrity signing without Developer ID signing or notarization. System security prompts may appear.
• The fix was verified on an Apple Silicon Mac with an actual app.zip, including default extraction, destination preview, file contents, links, signature and startup. No manual visual acceptance was performed, and results for other platforms are not presumed. Actual release-workflow packaging and validation results are recorded separately.
• Release materials include applicable notices and SBOMs without a separate corresponding-source archive. This policy does not itself establish that all applicable license obligations are satisfied.

xdzip 0.1.2

xdzip 0.1.2

xdzip 0.1.2，build 25 是稳定补丁版本，修复目录浏览、macOS 更新交接和发行 ZIP 兼容性问题。

本版更新

• 修正 Qt 运行时通知中关于源码材料获取位置的不准确描述。

• 目录、搜索或排序查询期间保留已提交的列表、网格或空状态，减少工作区加载遮罩造成的闪烁。

• macOS 无法自动安装更新时，说明安装身份、更新源或代理等限制，并提供 DMG 和 app.zip 的手动安装指引。下载完成不代表安装完成。

• 修复 macOS ZIP 中安全的父相对符号链接解压，继续拒绝越界、循环及不完整链接；Windows 不恢复 POSIX 符号链接。

支持与限制

• Windows 11（受维护版本）x86_64，macOS 14 或更新版本 Apple Silicon，Ubuntu 24.04 LTS x86_64、X11、glibc 2.39 或更新版本。
• Windows 安装器未签署发行者证书；macOS 使用 ad-hoc 完整性签名，未使用 Developer ID 签名或公证。系统可能显示安全提示。
• macOS 的 Finder 和手动安装演练在 Apple Silicon 本机执行；更新故障恢复使用测试密钥及受控候选。Windows 11 对公开 Windows ZIP 的应用界面解压已验证；Windows 不恢复 macOS 包中的 POSIX 符号链接。
• 发行材料包含适用通知和 SBOM，不附单独的对应源码压缩包；该政策本身不代表所有适用许可义务已自动满足。

English

xdzip 0.1.2, build 25 is a stable maintenance release fixing directory browsing, macOS update handoff and release ZIP compatibility.

Changes

• Correct the Qt runtime notice describing where source materials can be found.

• Keep the last committed list, grid or empty state during directory, search and sorting queries, reducing flashes caused by the workspace loading overlay.

• Explain installation identity, update feed or proxy restrictions when macOS automatic installation is unavailable, and provide manual DMG and app.zip instructions. A completed download is not an installation.

• Extract safe parent-relative symbolic links in macOS ZIP archives while continuing to reject escaping, cyclic and incomplete links. Windows does not restore POSIX symbolic links.

Support and limitations

• Windows 11 (supported servicing versions) x86_64, macOS 14 or later on Apple Silicon, and Ubuntu 24.04 LTS x86_64 with X11 and glibc 2.39 or later.
• The Windows installer has no publisher signature. macOS uses ad-hoc integrity signing without Developer ID signing or notarization. System security prompts may appear.
• Finder and manual installation were exercised on an Apple Silicon Mac; update failure recovery used test keys and controlled candidates. Windows 11 application extraction of the public Windows ZIP was verified; Windows does not restore POSIX links from the macOS archive.
• Release materials include applicable notices and SBOMs without a separate corresponding-source archive. This policy does not itself establish that all applicable license obligations are satisfied.

xdzip 0.1.0

xdzip 0.1.0

xdzip 0.1.0，build 23 是首个稳定版，提供 Windows、macOS 和 Linux 的原生安装或便携包。每个发行包和通知材料均附带 SHA-256 校验信息。本版不提供单独的对应源码压缩包。

功能

• 浏览、搜索、排序和检查 ZIP、TAR、TAR.GZ、7z、RAR、CAB、ISO 与 UDF 压缩包或映像。
• 解压受支持的文件和目录；创建 ZIP、TAR、TAR.GZ 与 7z，支持适用格式的 AES-256 加密、分卷和压缩级别。
• 使用多标签页或多窗口管理归档；按需拖放、添加或移动受支持的归档内容。
• 通过设置发起软件更新检查；安装版在发行签名、版本和安装身份均有效时可使用更新交接。

本版更新

• 改进设置窗口滚动布局和更新状态辅助功能，并修复设置窗口原生悬停回归。
• 更新检查使用系统代理路由，并补充 Windows 设置和安装包验证。
• 修复第三方通知收集，并规范源码 SBOM 中的 SPDX 许可表达式及 Rust 运行时候选依赖图。

系统支持与限制

• Windows 11（受维护版本），x86_64；macOS 14 或更新版本，Apple Silicon arm64；Ubuntu 24.04 LTS，x86_64、X11、glibc 2.39 或更新版本。
• Windows 安装器没有发行者签名；macOS 使用 ad-hoc 完整性签名，未使用 Developer ID 签名或公证。更新材料的签名不代表平台发行者身份。
• 不提供 Intel Mac、Windows 或 Linux ARM64、Wayland 支持。尚不支持文件内容预览、RAR／CAB／ISO／UDF 创建与修改、加密或分卷 7z 修改、稀疏 TAR、独立非 TAR 的 GZIP、第三方扩展和百万条磁盘索引；7z 修改有 512 MiB 工作集上限。
• Windows 包包含应用目录内 VC++ 运行库，不包含 Windows SDK 图形编译 DLL 或软件 OpenGL 回退库。

项目原创内容采用 Apache License 2.0。第三方组件遵守各自许可，发行附件提供适用的通知和 SBOM，不包含单独的对应源码压缩包。此分发政策不表示适用许可义务已自动满足。

English

xdzip 0.1.0, build 23 is the first stable release, with native installer or portable packages for Windows, macOS and Linux. Each release package and notice materials include SHA-256 integrity information. This release does not provide a separate corresponding-source archive.

Features

• Browse, search, sort and check ZIP, TAR, TAR.GZ, 7z, RAR, CAB, ISO and UDF archives or images.
• Extract supported files and directories; create ZIP, TAR, TAR.GZ and 7z archives with AES-256 encryption, volume splitting and compression levels where supported.
• Manage archives in multiple tabs or windows, and drag, add or move supported archive contents.
• Initiate update checks from Settings. Installed builds can use the update handoff when release signatures, version and installation identity are valid.

Changes

• Improved Settings scrolling layout and accessibility for update status, and fixed a native hover regression in Settings.
• Routed update checks through the system proxy and expanded Windows Settings and installer verification.
• Fixed third-party notice collection and normalized SPDX license expressions and Rust runtime-candidate dependencies in source SBOMs.

Supported systems and limitations

• Windows 11 (supported servicing versions), x86_64; macOS 14 or later, Apple Silicon arm64; Ubuntu 24.04 LTS, x86_64, X11 and glibc 2.39 or later.
• The Windows installer has no publisher signature. macOS uses ad-hoc integrity signing without Developer ID signing or notarization. Update-material signatures do not represent platform publisher identity.
• Intel Mac, Windows/Linux ARM64 and Wayland are unsupported. File-content preview, RAR/CAB/ISO/UDF creation or modification, encrypted or split-volume 7z modification, sparse TAR, standalone non-TAR GZIP, third-party extensions and million-entry disk indexes are not supported. 7z modifications have a 512 MiB working-set limit.
• Windows packages include the app-local VC++ runtime and do not include Windows SDK graphics compiler DLLs or the software OpenGL fallback library.

Original project content is licensed under Apache License 2.0. Third-party components retain their own licenses; release materials include applicable notices and SBOMs, without a separate corresponding-source archive. This distribution policy does not establish that applicable license obligations are otherwise satisfied.

xdzip 0.1.0-alpha.9

发行附件调整（2026-11-05）： 本版本的对应源码压缩包已按维护者决定撤下。原 SHA256SUMS 保持不变，其中对应源码条目现不再指向可下载附件；其他未单独撤回的附件保持原样。

Release asset update (2026-11-05): The corresponding-source archive has been withdrawn by owner direction. The original SHA256SUMS remains unchanged and still lists the now-unavailable source archive; other assets not separately withdrawn are unchanged.

xdzip 0.1.0-alpha.9

历史附件更新： alpha.8 的 Windows 安装器和便携包已撤回，其原签名清单仍列出两个失效的下载链接。本页下文对 alpha.8 包的描述为历史事实；详情见 #135。

Historical asset update: The alpha.8 Windows installer and portable package have been withdrawn. Its original signed manifest still lists their unavailable download links. References below to the alpha.8 packages describe historical facts; see #135.

xdzip 0.1.0-alpha.9，build 22 是实验性跨平台预发布候选。具体候选、验证记录及剩余事项见 #216 和 #53。

本次变更

• Windows 开发部署不再随包携带 d3dcompiler_47.dll、dxcompiler.dll、dxil.dll 三份 Windows SDK 图形 DLL，使用系统提供的图形运行时；正式候选包需按 #216 核对实际载荷和运行结果。
• 设置窗口、归档任务和文件关联包含 alpha.8 之后的修正。Windows 文件关联类型描述随应用语言更新；macOS 的 CAB、RAR 和 UDF 关联行为见安装与关联说明。不同平台的实际验证范围按 #53 分别记录。
• 原 alpha.8 的 Windows 附件仍包含上述 SDK 文件，其历史分发条件与处置见 #135；新候选不追认历史接收者的协议选择。

系统与更新

候选面向 Windows 11 x86_64、macOS 14+ Apple Silicon、Ubuntu 24.04 x86_64／X11。Windows 安装器无发行者签名；macOS 使用 ad-hoc 完整性签名，没有 Developer ID 或公证。更新签名不等同平台发行者身份。当前不提供 Intel Mac、Windows／Linux ARM64 或 Wayland 支持。

已安装且满足身份、版本和签名条件的 alpha.8 可从设置中主动检查更新；alpha.6 及更早版本缺少现行更新组件，需要手动安装一次。便携版继续手动更新。实际新版本的发现、签名和安装升级须按 #216 的候选身份验证，不能以此说明代替结果。

Mac／Ubuntu 的未完成桌面验收、参考机性能与发行许可复核继续按 #53 登记。既有其他版本的人工结果保留原身份，SBOM 完整性及未决许可不能因自动测试通过而视为完成。

English

xdzip 0.1.0-alpha.9, build 22 is an experimental cross-platform prerelease candidate. Candidate-specific evidence and outstanding work are tracked in #216 and #53.

Windows development deployment no longer bundles the Windows SDK graphics DLLs d3dcompiler_47.dll, dxcompiler.dll and dxil.dll, relying on the system graphics runtime. Actual release-candidate payloads and operation remain subject to #216 verification. Settings, archive tasks and file associations include fixes since alpha.8; Windows association descriptions follow the app language, and macOS CAB, RAR and UDF behavior is described in the association guide. Platform verification is tracked separately in #53. The original alpha.8 Windows assets still contain the SDK files; their historical conditions and disposition remain in #135.

Targets are Windows 11 x86_64, macOS 14+ Apple Silicon and Ubuntu 24.04 x86_64/X11. Windows installers have no publisher signature; macOS uses ad-hoc integrity signing without Developer ID or notarization. Update signatures are separate from publisher identity. Intel Mac, Windows/Linux ARM64 and Wayland are not currently supported.

Eligible installed alpha.8 builds can initiate update checks from Settings; published alpha.6 and earlier clients lack the current updater and need one manual installation. Portable builds are updated manually. Actual candidate discovery, signatures and installation upgrades must be verified under #216. Unfinished Mac/Ubuntu desktop checks, reference-host performance and licensing review remain in #53; historical human observations retain their own build identities and automated checks do not resolve incomplete SBOM or license items.

第三方致谢 / Third-party acknowledgments

本软件部分基于 FreeType 团队的工作。

This software is based in part on the work of the FreeType Team.

本软件部分基于 Independent JPEG Group 的工作。

This software is based in part on the work of the Independent JPEG Group.

本软件包含源自 Imlib2 的代码。

This software includes code derived from Imlib2.

xdzip 0.1.0-alpha.8

发行附件调整（2026-11-05）： 本版本的对应源码压缩包已按维护者决定撤下。原 SHA256SUMS 保持不变，其中对应源码条目现不再指向可下载附件；其他未单独撤回的附件保持原样。

Release asset update (2026-11-05): The corresponding-source archive has been withdrawn by owner direction. The original SHA256SUMS remains unchanged and still lists the now-unavailable source archive; other assets not separately withdrawn are unchanged.

xdzip 0.1.0-alpha.8

Windows 附件已撤回： alpha.8 的 Windows 安装器和便携包已停止提供。请使用不含三份 SDK 图形 DLL 的 alpha.9。alpha.8 原有签名清单与校验和文件保持不变，仍列出已撤回的附件，其下载链接现已失效，因此该版本的完整附件集不再齐备。历史分发条件见 #135。

Windows assets withdrawn: The alpha.8 Windows installer and portable package are no longer available. Use alpha.9, whose Windows packages omit the three SDK graphics DLLs. The original signed manifest and checksum file remain unchanged and still list the withdrawn assets; their download links no longer work, so the original full asset set is incomplete. Historical distribution conditions remain tracked in #135.

xdzip 0.1.0-alpha.8，build 21 是实验性跨平台预发布版本。具体候选、验证记录和未完成事项见 #53。

本次能力与修复

• ZIP、TAR/GZIP、7z、RAR、CAB、ISO/UDF 使用项目独立 Rust 格式后端，并保留隔离工作进程和安全文件提交。7z 支持创建、密码与文件名加密；RAR、CAB、ISO 和 UDF 保持只读。
• 支持归档内文件打开、原生拖出、拖入添加和普通未加密单文件归档的受限修改。常见旧编码名称贯通浏览、解压和普通包修改；创建和添加排除 macOS 元数据。
• 用户的归档名、文件名、目录和路径优先使用系统字体及平台回退，固定界面文案保留产品字体。空文件夹、空压缩包和搜索无结果分别显示对应提示。
• 关于页提供用户主动检查更新；满足安装身份、版本及签名条件的安装版可进行更新。**已公开的 alpha.6 及更早版本没有现行更新组件，须先从较新版本发布页手动下载并安装。**便携版继续手动更新。

系统与已知限制

原版提供 Windows 11 x86_64 的安装器和便携包、macOS 14+ Apple Silicon 的 app.zip 和 DMG，以及 Ubuntu 24.04 x86_64／X11 的 tar.gz 和 DEB；其中两个 Windows 附件现已撤回。当前不提供 Intel Mac、Windows／Linux ARM64 或 Wayland 支持。

Windows 安装器没有发行者签名；Mac 使用 ad-hoc 完整性签名，没有 Developer ID 或公证。更新清单和 Mac 更新材料使用的签名与系统发行者身份不同。文件内容预览、百万条磁盘索引和第三方扩展尚未实现；加密或分卷归档的修改、7z 重建工作集及其他格式限制见 README 和工程契约。

此前 a1a3940 的 Windows 真人界面结果及旧版本安装结果保留各自构建身份。Mac／Ubuntu 真人桌面、指定参考机性能以及实际候选的来源、许可与再分发复核仍按 #53 登记；SBOM 保留 incomplete 状态，未决材料不因自动检查通过而视为完成。

Windows alpha.8 安装器和便携包包含 Microsoft SDK 图形 DLL。原安装器显示 VC++ 协议，没有单独的 SDK 接收者保护条款确认流程；相关再分发条件仍在 #135 核查。原 SDK 许可文本曾随 Windows 包提供；此说明不表示历史接收者已同意新条款。

English

xdzip 0.1.0-alpha.8, build 21 is an experimental cross-platform prerelease. Candidate-specific validation and outstanding work are tracked in #53.

ZIP, TAR/GZIP, 7z, RAR, CAB and ISO/UDF use the project's independent Rust format backends with isolated workers and guarded file commits. 7z creation, content encryption and filename encryption are supported; RAR, CAB, ISO and UDF remain read-only. Archive browsing, native export, adding files, restricted rewriting, legacy filename decoding and macOS metadata filtering are available within the documented format limits.

Archive names, filenames, directories and paths prefer the system font and platform fallback; fixed interface text keeps the bundled font. Empty folders, empty archives and searches without results have distinct messages.

Updates are initiated by the user from About, and eligible installed builds can update after identity, version and signature checks. Published alpha.6 and earlier clients lack the current updater and require one manual installation from a newer release page. Portable builds continue to be updated manually.

The original packages targeted Windows 11 x86_64, macOS 14+ Apple Silicon and Ubuntu 24.04 x86_64/X11; the two Windows assets have now been withdrawn. Windows installers have no publisher signature; Mac apps use ad-hoc integrity signing without Developer ID or notarization. Update signatures are distinct from platform publisher identity. Encrypted or split archives cannot be modified, and 7z rewriting has a 512 MiB working-set limit. Intel Mac, Windows/Linux ARM64, Wayland, content preview, million-entry disk indexing and third-party extensions are outside the current support scope.

Prior Windows human observations and earlier installation checks retain their original build identities. Mac/Ubuntu human desktop work, reference-host performance and candidate-specific provenance, licensing and redistribution review remain tracked in #53. SBOM completeness remains marked incomplete; passing automated checks does not close those open material questions.

The Windows alpha.8 installer and portable package include Microsoft SDK graphics DLLs. The original installer displays the VC++ agreement and did not provide a separate acceptance flow for SDK recipient protection terms; the related redistribution conditions remain under review in #135. The original SDK license text was included in the Windows packages; this notice does not claim historical recipients accepted new terms.

对应源码与许可补充

本版本的 对应源码与许可补充材料 提供补充的来源、许可原文、可编辑输入和 Qt 重建说明。Linux 原包的 QtCore 源码替换曾先后因 GLib 和 Zstandard 配置失败；修复后，原包副本的自动加载、浏览、取消与解压验证已通过，记录见 #118。CLDR 通用数据仍包含大量与 ISO 639-3 相同的语言标识符及别名；排除原始表不单独解决其来源和条款，详见 #138 和 #140。其余未决来源、许可及平台验收见 #53。

Corresponding source and license supplement

The corresponding source and license supplement provides additional provenance, license texts, editable inputs and Qt rebuild guidance. Replacing QtCore in the original Linux package previously failed due to GLib and Zstandard configuration. After correction, automated loading, browsing, cancellation and extraction passed on an isolated copy; see #118. CLDR common data still contains many language identifiers and aliases matching ISO 639-3; excluding the original tables does not by itself settle their provenance or terms. See #138 and #140. Other outstanding provenance, licensing and platform acceptance remain in #53.

第三方致谢 / Third-party acknowledgments

本软件部分基于 FreeType 团队的工作。

This software is based in part on the work of the FreeType Team.

本软件部分基于 Independent JPEG Group 的工作。

This software is based in part on the work of the Independent JPEG Group.

本软件包含源自 Imlib2 的代码。

This software includes code derived from Imlib2.

xdzip 0.1.0-alpha.6

发行附件调整（2026-11-05）： 本版本的对应源码压缩包已按维护者决定撤下。原 SHA256SUMS 保持不变，其中对应源码条目现不再指向可下载附件；其他未单独撤回的附件保持原样。

Release asset update (2026-11-05): The corresponding-source archive has been withdrawn by owner direction. The original SHA256SUMS remains unchanged and still lists the now-unavailable source archive; other assets not separately withdrawn are unchanged.

xdzip 0.1.0-alpha.6，build 19，实验性跨平台预发布。

本次基于已验收提交 e7f49979ef036261880c0e2d86c4675b58c80758，不替换历史公开版本的资产。

本次更新

• 修复托盘恢复窗口时关闭按钮短暂闪红，保留窗口边框、圆角及普通、最大化、全屏状态。
• 修复 Git 源码 TAR 的 GNU 长文件名兼容，优化起始页错误提示，关闭窗口时清空其标签，后台任务继续运行。
• 支持分卷 ZIP 浏览与解压，双击压缩包内普通文件后解压到私有临时目录并调用系统关联打开。
• 修复“打开压缩包”设置保存，改进胶囊标签的溢出滚动、拖动排序和加载取消操作。
• 保留单实例、共享托盘及按设置在新标签或新窗口打开的会话模式。

下载与系统要求

平台	安装或运行包	系统要求
Windows x86_64	windows-x86_64.zip、windows-x86_64-setup.exe	受维护的 Windows 11
macOS arm64	macos-arm64.app.zip、macos-arm64.dmg	macOS 14.0+，Apple Silicon
Linux x86_64	linux-x86_64.tar.gz、ubuntu24.04-x86_64.deb	Ubuntu 24.04，glibc 2.39，X11

实际附件文件名均带完整版本。Windows 包携带应用目录内 VC++ 运行库和图形兼容库，安装器未作发行者签名。macOS ZIP 和 DMG 来自同一已部署、ad-hoc 完整性签名并验证的应用，未经 Developer ID 签名或 Apple 公证。系统可能显示来源或安全提示，请保留系统安全保护。

验证与发布协议

专用 Release 流水线在原生三平台执行构建、测试、部署审计、独立启动及包生命周期核验，六类包齐备且哈希一致后才公开；公开后重新下载所有附件复验。Windows 本版本人工视觉验收已由用户确认，托盘恢复关闭按钮不再闪红，记录见 #24。本次发布记录见 #25。

release.json 采用更新协议 schema_version: 1，绑定完整版本、渠道 alpha、构建号、标签和完整提交 SHA，记录六类资产的系统要求、字节数、SHA-256 和固定标签下载 URL。SHA256SUMS 覆盖清单及所有交付附件。对应源码包含 Rust vendor、Qt 源码和补丁及重建材料；各平台 materials 附件包含通知、许可、SBOM 和部署／验证回执。

未来更新客户端应分页获取 Releases 列表，按语义版本、允许渠道、平台、架构和包类型选择，并验证字节数和 SHA-256。预发布不能依赖 /releases/latest。当前尚未实现自动更新器。

已知边界

仍属实验性预发布。macOS 和 Linux 的本次完整人工视觉验收未执行，自动化验证不等于人工验收。许可来源复核仍由 #4 跟踪，不因本次发布而视为通过。尚不支持 RAR／7z、Intel Mac、Windows／Linux ARM64 或 Wayland。重要文件请保留备份。

Experimental prerelease based on the accepted commit above. Six native packages are verified before publication, with schema-v1 release.json, complete SHA256SUMS, corresponding source and per-platform licensing/SBOM materials. Windows manual visual acceptance is confirmed; full manual visual acceptance on macOS/Linux and licensing review remain pending. Windows installers are unsigned; macOS uses ad-hoc integrity signing without Developer ID or notarization. No automatic updater is included.

xdzip 0.1.0-alpha.1

发行附件调整（2026-11-05）： 本版本的对应源码压缩包已按维护者决定撤下。原 SHA256SUMS 保持不变，其中对应源码条目现不再指向可下载附件；其他未单独撤回的附件保持原样。

Release asset update (2026-11-05): The corresponding-source archive has been withdrawn by owner direction. The original SHA256SUMS remains unchanged and still lists the now-unavailable source archive; other assets not separately withdrawn are unchanged.

xdzip 0.1.0-alpha.1，首个实验性跨平台预发布。

• 修复弹窗激活使主窗口退出最大化的问题。
• 每个登录会话共用一个进程和托盘，支持在新标签页或新窗口打开归档。
• 关闭页面后任务继续运行，明确退出时执行取消、清理与异步关闭。
• 提供 Windows x86_64 便携 ZIP 和安装器，macOS 14+ arm64 app ZIP 和 DMG，Ubuntu 24.04 x86_64 X11 运行包和 deb。

Windows 包包含应用目录内 VC++ 运行库及图形兼容库。macOS 仅 ad-hoc 完整性签名，未经 Developer ID 签名和 Apple 公证。Linux 要求 Ubuntu 24.04、glibc 2.39、X11。

release.json 是更新协议 v1，按语义版本、允许渠道、平台、架构及包类型选择资产。预发布列表须分页获取，不能依赖 /releases/latest。每个资产以 SHA-256 验证；本版本尚未实现自动更新器。

本版本仍属实验性，独立安全审查、独立许可审查及完整桌面人工验收尚未完成，跟踪见 #4。自动化记录不等同于人工视觉验收或签名发行。对应源码、通知、许可、SBOM 与重建材料见附件。

Experimental prerelease. Independent security/licensing review and full manual desktop acceptance remain pending. macOS uses ad-hoc integrity signing only, without Developer ID or notarization. No automatic updater is included.