This release fixes a CLI startup crash caused by a Yargs 18/Webpack incompatibility.

Bug Fixes

• build: treat webpack warnings as errors (82ee23f)
• cli: downgrade yargs to fix broken production bundle (18d9792)

⭐ Highlights

• Windows binaries are now signed and validated before release
• Desktop binaries are now built by CI and published as GitHub Release assets
• Release artifacts are also available from the Docker release repository (syncin/desktop-releases)
• Linux builds now include AppImage and DEB packages for x64 and ARM64
• Desktop security has been hardened around server views, navigation, IPC, external URLs, and TLS validation
• Server authentication handling is more robust, with clearer warnings for expired or missing tokens

Features

• auth: show server warning status for expired or missing tokens (1bdba9f)
• core: improve unicode path matching in NormalizedMap (dc6a162)

Security

• Fixed unsigned Windows updater artifacts by signing Windows binaries and NSIS uninstallers, then validating release payloads before publishing. GHSA-cqxc-gww4-w27f @eddieran
• Restored TLS certificate validation for server views and desktop HTTP requests, with an explicit per-server opt-in for insecure certificates. GHSA-hgqh-536m-7hhq @de3erve
• Prevented path traversal in sync diff paths so remote file paths cannot write outside the intended local sync directory. GHSA-384w-36p5-8922 @de3erve

Bug Fixes

• build: upgrade electron-builder for ARM64 NSIS installer (a6599b0)
• ci: use current app-builder blockmap API (9411344)
• core: prevent local path traversal from remote file paths (9c2f6a8)
• main: add preload scripts for wrapper and webview with scoped IPC channels (7ce2311)
• main: block renderer-created windows in server view (d195049)
• main: move server auth to desktop request manager (874f141)
• main: restrict external URL and file opening (8d68b15)
• main: scope server navigation by origin and path (b3893fd)
• renderer: adjust min-zwidth of top bar (4dc7eb7)
• security: restore TLS validation and add per-server opt-in (db16d07)
• security: verify server WebContents on remote IPC (02e489a)

Features

• i18n update dutch language (@Stephan-P) (4e703)

Bug Fixes

• core: close remote diff stream on early exit (03eaceb)

⭐ Highlights

• Guarantee compatibility with Ubuntu 23.10+ and sandbox mode
• Resolve a regression caused by session partitioning that prevents the Download Manager from appearing
• Introduce Dutch language support (@Stephan-P)

➡️ Read the release announcement

Features

• i18n: add nl (47ceffd)
• renderer: allow closing the server dialog via the cancel button (dc49fce)

Bug Fixes

• core: login screen not showing after unauthorized desktop-app signup attempt (d9b0ebc)
• main: ensure AppImage startup compatibility on Ubuntu 23.10+ (and similar restricted-sandbox distros) by enforcing --no-sandbox + --disable-setuid-sandbox (c770b5c)
• main: fix DownloadManager regression after session partitioning by binding will-download on all sessions (3e3a25a)
• main: guard DownloadManager progress updates when window/webContents are destroyed (6cdc929)
• main: harden throttleFunc timer scheduling to prevent invalid timeout warnings (c21b0c4)

⭐ Highlights

• 🆔 Support OpenID Connect Authentication
• ⚠️ Breaking change: requires Sync-in Server 2.x

➡️ Read the release announcement

Features

• auth: refactor authentication services and delegate desktop client registration to server (9c64f08)
• auth: refactor server actions to streamline client registration and enhance type safety (40de54b)
• main: implement loopback callback server for desktop OIDC flow (d13d0e1)

Bug Fixes

• main:views: refactor view destruction to ensure cleanup of views, sessions, and cookies (48028b3)
• main: force view destruction to ensure all connections are closed (a039f76)
• main: refactor view creation and destruction to ensure session partitioning and cleanup (ac4c8f0)

Bug Fixes

• core enforce valid repository subdirectories and path normalization (f6f17df)

Chore

• deps: upgrade Electron to v40 and Node.js to v24 (e7a21b5)
• main: reordering menus (0f622ee)

Full Changelog: v1.6.0...v1.6.1

Bug Fixes

• main: streamline error handling with console.error in webView methods (6d6951c)

Chore

• deps: update dependencies in package-lock.json to latest stable versions (9a0d35b)

Features

• settings: add "Hide Dock Icon" option on macOS and improve tray accessibility (59261c5)

Chore

• chore(deps): update dependencies in package-lock.json to latest stable versions (d943b4)

• chore(assets): update app and tray icons to match standard sizes (4a8f6f4)

Chore

• assets: update app and tray icons, favicon, and related assets (b302757)
• deps: update dependencies in package-lock.json (ed28649)
• manifest: add server release manifest generation (1128087)
• updater: extend user-agent header support and adjust update check interval to 8 hours (a173c77)

Highlights

• 🌍 14 languages supported — added 12 new ones: 🇩🇪 🇪🇸 🇵🇹 🇧🇷 🇮🇹 🇨🇳 🇮🇳 🇹🇷 🇯🇵 🇰🇷 🇵🇱 🇷🇺

Features

• i18n: add Japanese, Brazilian Portuguese, Polish, Korean, and Turkish translations (443b898)
• i18n: add Russian translations (82b941d)
• i18n: add support for multiple languages and optimize unused translation keys detection (85e527c)
• i18n: enhance i18n setup with dynamic translation loading and locale resolution (a07d8c6)
• i18n: modularize localization setup and extend language support (8d5eac6)
• i18n: refactor i18n manager and add language normalization logic (04fb872)