V0028-FlashTitan

FlashTitan 0.0.28 Release Notes 🚀

Version

0.0.28

dependency update

SHA256 sha256:a61449b71b0a201c89ce289101103986a5297f048390f1395ba5d4c762db51d9

Highlights ✨

• fixed renderer-side CodeQL findings around HTML attribute sanitization
• improved preset loading safety by switching preset option rendering to DOM-based assignment
• removed attribute-style device button ID wiring in favor of safer runtime binding
• kept the packaged app bridge, USB detection, and preset-loading fixes from the recent stabilization work

User-facing improvements 🙂

• preset loading remains part of the normal visible image flow
• startup messaging is clearer when the desktop bridge cannot start correctly
• device selection rendering is safer without changing how the UI behaves for normal users

Security and hardening improvements 🛡️

• removed remaining interpolated attribute writes that CodeQL flagged in renderer.js
• preset <option> creation now uses DOM property assignment instead of HTML string interpolation
• device selection buttons no longer rely on interpolated data-* attributes in generated HTML
• preload bridge continues to use a narrow allowlist and sanitized payload flow

Stability updates 🔧

• preserved the desktop bridge fixes that restored:
  • preset loading
  • removable USB detection
  • packaged app startup behavior
• kept safer fallback behavior when Windows metadata lookups are slow or unavailable

Packaging notes 📦

• current packaged Windows output is built from the hardened renderer and preload path
• installer and win-unpacked builds remain the recommended ways to validate this release

Verification ✅

Checks completed for this release:

• node --check renderer.js
• npm test

Current automated test status:

• 27/27 tests passing

Open source license 📄

FlashTitan 0.0.27 is released under the Apache License 2.0.

• LICENSE

Build outputs

Common release artifacts for this version:

• FlashTitan-0.0.27-Installer.exe
• dist/win-unpacked/FlashTitan.exe

Notes for testers 🧪

• run FlashTitan as Administrator for real media creation
• test with a sacrificial USB drive first
• verify both write completion and real boot behavior on hardware
• record real-world results in TEST-MATRIX.md

Full Changelog: V0025-FlashTitan...V0027-FlashTitan

Full Changelog: V0027-FlashTitan...V0028-FlashTitan

V0027-FlashTitan

FlashTitan 0.0.27 Release Notes 🚀

Version

0.0.27

Highlights ✨

• fixed renderer-side CodeQL findings around HTML attribute sanitization
• improved preset loading safety by switching preset option rendering to DOM-based assignment
• removed attribute-style device button ID wiring in favor of safer runtime binding
• kept the packaged app bridge, USB detection, and preset-loading fixes from the recent stabilization work

User-facing improvements 🙂

• preset loading remains part of the normal visible image flow
• startup messaging is clearer when the desktop bridge cannot start correctly
• device selection rendering is safer without changing how the UI behaves for normal users

Security and hardening improvements 🛡️

• removed remaining interpolated attribute writes that CodeQL flagged in renderer.js
• preset <option> creation now uses DOM property assignment instead of HTML string interpolation
• device selection buttons no longer rely on interpolated data-* attributes in generated HTML
• preload bridge continues to use a narrow allowlist and sanitized payload flow

Stability updates 🔧

• preserved the desktop bridge fixes that restored:
  • preset loading
  • removable USB detection
  • packaged app startup behavior
• kept safer fallback behavior when Windows metadata lookups are slow or unavailable

Packaging notes 📦

• current packaged Windows output is built from the hardened renderer and preload path
• installer and win-unpacked builds remain the recommended ways to validate this release

Verification ✅

Checks completed for this release:

• node --check renderer.js
• npm test

Current automated test status:

• 27/27 tests passing

Open source license 📄

FlashTitan 0.0.27 is released under the Apache License 2.0.

• LICENSE

Build outputs

Common release artifacts for this version:

• FlashTitan-0.0.27-Installer.exe
• dist/win-unpacked/FlashTitan.exe

Notes for testers 🧪

• run FlashTitan as Administrator for real media creation
• test with a sacrificial USB drive first
• verify both write completion and real boot behavior on hardware
• record real-world results in TEST-MATRIX.md

Full Changelog: V0025-FlashTitan...V0027-FlashTitan

Full Changelog: V0025-FlashTitan...V0027-FlashTitan

V0025-FlashTitan

FlashTitan 0.0.25 Release Notes 🚀

Version

0.0.25

Highlights ✨

• improved packaged app reliability for the desktop bridge
• better removable drive detection and safer USB filtering
• broader preset catalog for Linux, ARM, and Windows sources
• clearer installer flow with separate license and safety acknowledgment handling
• refreshed project docs and Apache 2.0 open-source licensing

User-facing improvements 🙂

• simpler first-screen flow focused on:
  • choose image
  • choose USB drive
  • make bootable drive
• better empty states and clearer status text
• improved progress wording during checks, writing, and verification
• better completion and “what to do next” messaging
• presets are now part of the normal visible image flow instead of being buried behind advanced options

Reliability and safety improvements 🛡️

• safer device filtering for removable USB and SD media
• better fallback behavior when Windows metadata lookup is slow or unavailable
• clearer retry guidance after:
  • cancellation
  • locked-drive errors
  • disconnects
  • verification failures
• stronger tests around suspicious, blocked, and removable device handling

Archive and image handling improvements 📦

• improved .zip, .xz, and .gz archive handling
• archive preview support added before extraction
• clearer errors when no flashable image is found in an archive
• safer handling when multiple flashable images exist in one archive
• clearer classification output for how FlashTitan will handle a selected image

Packaging and installer updates 🏗️

• packaged app now includes the files needed for the preload bridge and safety filtering
• installer build path for the safety acknowledgment page was corrected
• Windows packaged output and installer builds were rebuilt for this release

Documentation updates 📚

• README rewritten to better match the current app
• contributing, security, architecture, privacy, release, and testing docs refreshed
• .gitignore added for GitHub publishing
• project license switched to Apache 2.0

Open source license 📄

FlashTitan 0.0.25 is released under the Apache License 2.0.

• LICENSE

Build outputs

Common release artifacts for this version:

• FlashTitan-0.0.25-Installer.exe
• dist/win-unpacked/FlashTitan.exe

Notes for testers 🧪

• run FlashTitan as Administrator for real media creation
• use sacrificial USB drives for early testing
• verify boots on real hardware before trusting a workflow broadly
• record pass/fail results in TEST-MATRIX.md

Full Changelog: https://github.com/KernFerm/FlashTitan/commits/V0025-FlashTitan

Full Changelog: https://github.com/KernFerm/FlashTitan/commits/V0025-FlashTitan