Flowlight 0.15.7

What's new in 0.15.7

• Minimize the Store extension’s network access. The sandboxed content filter no longer declares an unused inbound-listener entitlement.
• Validate what will actually ship. The Store product gate now extracts entitlements from the built app and extension, rejecting forbidden inbound-listener access and missing outbound access on the signed executables themselves.
• Keep distribution graphs isolated. Store-only compilation flags are scoped to Store targets, and release, CodeQL, and local build paths consume the exact committed project reviewed by CI instead of regenerating it.
• Make release ordering deterministic. Tag pushes can only run the signed, notarized dry run; publishing now requires an explicit dispatch for that immutable tag after verification succeeds.

Install

Signed with Developer ID and notarized by Apple.

• brew install --cask xinbetween/tap/flowlight
• Flowlight.dmg — drag to Applications.
• Flowlight-0.15.7.pkg — installs to /Applications; offers to quit a running copy first.

macOS 15 or later, Apple silicon and Intel.

Full changelog: https://github.com/xinbetween/flowlight/releases

Checksums

6a5c804802e5127b1e6eecde8b1685884a4854a4d6118abede5d574bdb631419  Flowlight.dmg
b9d6bbb81adb117a54ec4e73a4b112f897b5c6f1bf3297f24eebfb3e51d82758  Flowlight-0.15.7.pkg