0.3.0-rc.20

What's Changed

• Fix duplicate Section field in the .deb control file by @yokomohoyo in #132
• Version bump by @yokomohoyo in #133

Full Changelog: 0.3.0-rc.19...0.3.0-rc.20

0.3.0-rc.19

What's Changed

• Bump ip-address from 10.4.0 to 10.7.2 by @dependabot[bot] in #120
• Bump brace-expansion from 1.1.18 to 1.1.21 by @dependabot[bot] in #122
• Bump fast-uri from 3.1.7 to 3.1.8 by @dependabot[bot] in #123
• Update axios, undici, grpc-js, dompurify and serialize-javascript by @yokomohoyo in #127
• Publish insomnium-bin to the AUR on each release by @yokomohoyo in #128
• Point Arch users at the release downloads until we maintain the AUR package by @yokomohoyo in #130
• Version bump by @yokomohoyo in #129

Full Changelog: 0.3.0-rc.18...0.3.0-rc.19

0.3.0-rc.18

What's Changed

• Report failures from every response save path by @yokomohoyo in #115
• Parse proto files on a worker thread instead of blocking the app by @yokomohoyo in #116
• Hold deep links until the window they open in is listening by @yokomohoyo in #117
• Back up data on upgrade and remove startup debug logs by @yokomohoyo in #118
• Version bump by @yokomohoyo in #119

Full Changelog: 0.3.0-rc.17...0.3.0-rc.18

0.3.0-rc.17

What's Changed

• Read picked import files directly instead of via file:// URI by @yokomohoyo in #108
• Only fail plugin installs on yarn errors, not warnings by @yokomohoyo in #109
• Report Send and Download write failures instead of "Saved to" by @yokomohoyo in #110
• Deliver insomnia:// links that cold-start the app by @yokomohoyo in #112
• Fail fast on missing proto imports instead of hanging by @yokomohoyo in #111
• Version bump by @yokomohoyo in #114

Full Changelog: 0.3.0-rc.16...0.3.0-rc.17

0.3.0-rc.16

What's Changed

• Verify the DMG before bumping the Homebrew cask by @yokomohoyo in #105
• Push to the tap only from the main-only homebrew-tap environment by @yokomohoyo in #106
• Version bump by @yokomohoyo in #107

Full Changelog: 0.3.0-rc.15...0.3.0-rc.16

0.3.0-rc.15

What's Changed

• Sign and notarize macOS builds by @yokomohoyo in #103
• Version bump by @yokomohoyo in #104

Full Changelog: 0.3.0-rc.14...0.3.0-rc.15

0.3.0-rc.14

What's Changed

• Run cask bump and APT publish only after a release-triggered build by @yokomohoyo in #100
• Upgrade Electron 41 -> 43 by @yokomohoyo in #101
• Version bump by @yokomohoyo in #102

Full Changelog: 0.3.0-rc.13...0.3.0-rc.14

0.3.0-rc.13

What's Changed

• Fix smoke-test server crash on Express 5 by @yokomohoyo in #96
• Stop rewriting the cask url on bump by @yokomohoyo in #97
• Version bump by @yokomohoyo in #98

Full Changelog: 0.3.0-rc.12...0.3.0-rc.13

0.3.0-rc.12

What's Changed

• Bump dawidd6/action-download-artifact from 21 to 24 by @dependabot[bot] in #87
• Bump actions/upload-pages-artifact from 3 to 5 by @dependabot[bot] in #88
• Bump fast-uri from 3.1.5 to 3.1.7 by @dependabot[bot] in #89
• Bump @xmldom/xmldom from 0.8.13 to 0.8.15 by @dependabot[bot] in #91
• Bump hono from 4.13.1 to 4.13.7 by @dependabot[bot] in #92
• Bump svgo from 2.8.3 to 2.8.4 by @dependabot[bot] in #93
• Bump qs and express by @dependabot[bot] in #90
• Version bump by @yokomohoyo in #95

Full Changelog: 0.3.0-rc.11...0.3.0-rc.12

0.3.0-rc.11

This is an infrastructure verification release. There are no application changes since 0.3.0-rc.10 — if you are already on rc.10, there is nothing here for you.

It exists to prove a fix to the release pipeline that could only be tested by cutting a real release. Binaries are byte-for-byte equivalent in behaviour to rc.10; the version number is the only functional difference.

Why this release exists

The workflow that publishes the APT repository had never once succeeded on its own. It was triggered by release: published, which runs in the tag's context, while the github-pages environment only permits deployments from main. Every release failed within about a second, before a single step ran:

Tag "0.3.0-rc.10" is not allowed to deploy to github-pages due to
environment protection rules.

Every previous release therefore needed a manual gh workflow run apt-repo.yml --ref main afterwards, and left a failed check on the release regardless.

#85 changed the trigger to workflow_run on the artifact build, which runs in the default branch's context. That also removed a second, quieter bug: the old trigger fired concurrently with the build, so the workflow went looking for a .deb that had not finished uploading.

Neither fix could be verified without publishing an actual release, hence rc.11.

Result: this release completed with no manual intervention. APT Repository started on its own and succeeded, having pooled this release's .deb first — confirming both the environment fix and the race fix.

For Debian/Ubuntu users

apt upgrade now sees 0.3.0~rc.11. The upgrade path is working as intended — which is the substance of what this release verifies.

What's Changed

• Bump browserslist from 4.28.2 to 4.28.8 by @dependabot[bot] in #84
• Trigger the APT repo build from workflow_run, not release by @yokomohoyo in #85
• Version bump by @yokomohoyo in #86

Full Changelog: 0.3.0-rc.10...0.3.0-rc.11

---

Looking for the security fixes?

They are in 0.3.0-rc.10, which cleared 1 critical, 12 high and 11 moderate advisories — xmldom, js-yaml, js-cookie, serialize-javascript, protobufjs, @hono/node-server, xml2js, and react-router 6 → 7. Anything at rc.9 or earlier should upgrade for those.