• Fix crash on launch on Apple Silicon Macs: 26.17.0 was signed without the com.apple.security.cs.allow-jit entitlement (#3474)

This release adds per-game launch settings, lets you install downloads that aren't tagged for your platform, reworks the installed library page and the manage dialog, and rebuilds the sidebar search around your own library. It requires butler 15.30.0 or newer.

• Each installed game now has a Launch settings screen, reachable from the manage dialog, with per-game sandbox, network access, and environment variable options (#366, #3102)
• Introduces a "Command Pattern" launch options: support either plain arguments to add or a %command% pattern to add wrapper commands or environment variables (#342, #3238, #2713)

• Downloads that aren't tagged for your platform are now able to be revealed and intsalled. (#3430, #3237, #3270, #2929, #2556, #2446, #2275)
• itch://install accepts a launch parameter, which opens the launch dialog instead of reinstalling when the upload is already downloaded

The sidebar search has been replaced:

• Autocomplete candidates now only show locally available projects, eg. things you have bought, or synced from collections or bundles.
• Autocomplete results now include Collections and Bundles, making it easy to naviagte directly to the corresponding page in the app.
• There's now a Search on itch.io... option presented first that will take you to itch.io's full search page to search across the site.

This replaces the old API search autocomplete which presented items in a confusing order that made it hard to actually find anything. We feel that autocomplete works best for things you already have, and everything else should go through the site's full search experience.

• Installed items show install size, version, and play time inline, plus a manage button next to the main action
• The installed page can be sorted by last played, play time, size on disk, and install date, and filtered to games you've never played
• The content type filter is now a dropdown and includes soundtracks, game mods, and other (#3421)
• The manage dialog was redesigned around quick actions and no longer duplicates the install dialog, it links to it instead

• Requires butler 15.30.0 or newer
• Play time and last played are now tracked per profile. Play time recorded before this change is pulled from the server the first time your library refreshes

• Fixed a race condition where closing a dialog could dismiss the one it just opened

This release adds a page for browsing and installing games from itch.io bundles you own, a platform filter on the collection, bundle, and library pages, accessibility improvements to the sort and filter dropdowns, and an Electron bump.

• Bundles you own now show up in your Library, each with its own page listing every game in the bundle
• The bundle page can be sorted, searched by title, and filtered by platform, classification, and installed status
• Games can be installed directly from the bundle page
• Requires a version of butler with bundle support

• Added a platform filter (Windows, macOS, Linux, Web) to the collection, bundle, and library pages

• The sort and filter dropdowns are now keyboard and screen reader friendly, with combobox/listbox roles and arrow-key navigation

• Removed the Ctrl+Alt+Backspace shortcut that force-killed the last running game (#3453)

• Fixed the file labels shown for builds that are still processing

• Upgraded Electron from 42.1.0 to 43.0.0

A follow-up to 26.12.0 with Upload page fixes and an Electron bump.

• The source picker in the push dialog now has separate "Select folder" and "Select .zip" buttons, since a single file dialog can't pick both a folder and a file
• Fixed drag and drop of a source folder or .zip onto the push dialog, which broke when Electron removed the File.path property; the path is now resolved via webUtils.getPathForFile
• The build list toolbar now reflows for narrow window widths instead of overflowing

• Upgraded Electron from 41 to 42.1.0

• Synced translations

A small follow-up to 26.11.0 that opens the Upload page to all users and surfaces information about optimized patches.

• The Upload entry in the sidebar and the Upload tile on the new-tab page are now shown to everyone, not just kitch users
• When butler has finished producing an optimized patch for a build, the Upload page now reports the optimized patch size (instead of the original) with a bolt icon and a tooltip explaining what it is
• The per-build file list shows the original and optimized patches as separate entries, with the original listed first

• npm audit fix for transitive dependency advisories

This release adds a UI for uploading builds to itch.io with butler without needing to drop down to the terminal, upgrades to Electron 41 and TypeScript 6, and includes a handful of accessibility, hotkey, and Linux autostart fixes.

This version of the app is linked to butler version 15.27.0.

A new "Upload" entry in the sidebar opens a Builds page that lists every build you've pushed with butler, with project, channel, version, status, size, and pushed time. The list can be filtered by status (All / Live / Processing / Failed) and searched by project, channel, or version. Each row expands to show per-file details (archive, patch, signature, manifest, unpacked), the build ID, the user who pushed it, the original butler push command, and an error message if the push failed.

A new push dialog lets you push a build by picking a project, picking or creating a channel (with an option to mark new channels as hidden), entering an optional user version, and dropping a folder or .zip as the source. Recent source folders are remembered and offered for re-use.

Before pushing, you can run a preview that compares the source against the latest build on the channel and shows the number of files that would be uploaded, the patch size, the source size, and the top new, modified, and deleted files.

While a push is running, you can track it with a live progress display showing the current phase (preparing, diffing, uploading, finishing), bytes read and uploaded, patch size, and ETA. System notifications are used to update you on the status of the build.

Every program started via itch now has ITCHIO_APP=1 set in its environment. Games can read this to detect that they were started by the itch.io desktop app.

• The OAuth login screen now has a "Browser didn't open?" disclosure that reveals the OAuth URL with a copy button, so the URL can be pasted manually in environments where the app can't open a browser.

• Added zoom in (Ctrl/Cmd+=), zoom out (Ctrl/Cmd+-), and reset zoom (Ctrl/Cmd+0) to the View menu (#2305, #3099)

• Fixed several issues with openAtLogin / openAsHidden and .desktop file handling (#3311):
  • The autostart .desktop file is now written to $XDG_CONFIG_HOME/autostart instead of $XDG_CONFIG_HOME directly
  • The installed .desktop file is now looked up in $XDG_DATA_HOME/applications and /usr/share/applications, instead of only /usr/share/applications
  • "Open as hidden" now actually starts the app hidden on autostart, by injecting a --hidden flag into the autostart copy's Exec= line; manual launches via menu or icon still show a window
  • The autostart .desktop file is no longer deleted on app startup when openAtLogin is its default-off value, so user-managed autostart files survive

• Fixed prevent-sleep not engaging while a game is running, due to a null-check that was always falsy (#2293)
• Fixed the Itch object in HTML games not being exposed to the page; now uses Electron's contextBridge instead of the deprecated webFrame.executeJavaScript (#3271)
• Don't crash the React render when the saved locale code is invalid; locale codes are now normalized to BCP 47 (pt_BR → pt-BR) and validated via Intl before use, falling back to English on invalid values (#2619)
• Sidebar tab list now scrolls vertically when there are more tabs than fit, instead of clipping (#3401)
• Fixed the "disable network in sandbox" checkbox in preferences being toggled when clicking elsewhere in the surrounding row
• Fixed a bug where auto-update could get stuck cyling between items and never finishing any of them

• The custom select dropdown (used for language, install location, sandbox type, and upload pickers) is now reachable by keyboard tab navigation and rendered as a real <button>

• Upgraded Electron from 40 to 41
• Upgraded to TypeScript 6; removed the legacy noImplicitAny: false and useUnknownInCatchVariables: false compatibility flags
• Added a translation for butlerd error code 19000 so messages from butler surface as readable text instead of a raw code

• Reworked the i18n sync script
• Fixed the Weblate project URL
• Synced translations

• Restored hot reloading on code changes; the renderer bundle is no longer cached across app refreshes
• develop.mjs no longer leaves the terminal in a broken state when the app is interrupted with Ctrl-C (runs stty sane on exit)

This release upgrades Electron from 25 to 40, overhauls sandboxing across Linux, macOS, and Windows, makes install planning non-blocking, and adds support for compressed HTML game files.

macOS 10.15 (Catalina) is no longer supported. macOS 12 (Monterey) or later is now required.

• Upgrade from Electron 25 to Electron 40 (#3382)
  • Minimum supported macOS version is now 12 (Monterey)
  • Linux now defaults to native Wayland in Wayland sessions
• Updated esbuild targets to Node 24 and Chrome 144 to match Electron 40
• Updated openAsHidden login item setting to only apply on Windows (removed from macOS in newer Electron)

• Refactored install planning to split install target listing (Install.GetUploads) from per-upload planning (Install.PlanUpload). Due to how the app computes space requirements, it may take some time as our CDN warms up cold files. For this reason we made the size calculation happen asynchronously so you can queue an install immediately without having to wait for install size calculation to complete.
• Added cancellation support for in-flight install planning requests when changing upload or closing the modal
• Fixed quadratic operation in collection and library sync that could cause the app to lock up when synchronizing large collections
• Added hard limits on collection sync (2000 items) and owned keys (5000) to prevent excessive resource consumption

• Added new Bubblewrap sandbox backend with user-namespace isolation, a persistent per-game home directory, read-only system mounts, and GPU, audio, and display passthrough
• Added Flatpak-spawn sandbox backend for running sandboxed games when itch is installed as a Flatpak
• Updated Firejail backend with network disable support, an expanded blacklist covering sensitive paths (~/.ssh, ~/.gnupg, ~/.aws, browser data), and environment variable filtering consistent with the new backends
• Auto-detection selects the best available backend: Flatpak-spawn when inside Flatpak, otherwise Bubblewrap if available, with Firejail as fallback

• New balanced (strict, default) and legacy sandbox policy modes — legacy allows broader compatibility for problematic games
• Rosetta 2 support — x86 games can now run sandboxed on Apple Silicon Macs

• Fixed "access denied" error on first sandbox launch caused by ACL permission propagation delay
• Cryptographically secure sandbox account passwords

• Unified network disable control across all sandbox backends (Bubblewrap, Flatpak-spawn, Firejail, macOS, Windows)
• Per-cave sandbox override settings (sandbox type, network access, allowed environment variables)
• Per-cave extra command-line launch arguments
• New sandbox preferences under Security & privacy: sandbox type dropdown (Auto, Bubblewrap, Firejail), "Disable network access in sandbox" toggle, and allowed environment variable names input
• Strict environment variable allowlist: only display, audio, session, and itch.io-specific variables are passed through, with user-configurable additions via preferences
• Added warning about game save data when changing sandbox settings

• Handle compressed HTML game files (gzip, brotli, .unityweb) before transferring to client, since protocol URLs do not support content encoding (#3286)
• Don't try to open non-HTTP links (like about:blank) in external browser (#3394)

• Reintroduced the in-app changelog dialog
• Added release tabs for itch, butler, and itch-setup
• Fixed changelog failing to load due to Content Security Policy restrictions by moving GitHub API fetch to main process IPC

• Added more semantic HTML and ARIA labels across controls (navigation buttons, game management actions, progress indicators, sidebar navigation)
• Game cover images now include alt text
• Updated cave version selection rows to semantic buttons
• Fixed tab list scrollbar rendering issues (#3384)
• Updated react-tabs to v4.3.0 with bundled types and added global tab styles
• Improved login form alignment and spacing
• Allow logs in log viewer to be copied and pasted (#3000)

• Fixed Windows game launching broken by a Go runtime update
• Fixed macOS memory leak in file path resolution
• Fix log entries not showing up correctly in game crash dialog
• Fix TypeScript buffer type handling in memory streams

• Changed app ID from com.squirrel.itch.itch to io.itch.itch
• Disabled remote locale fetching (locales.itch.zone no longer exists)
• Use Node's built-in sourcemap support, removing source-map-support dependency
• Reviewed the itch docs and modernized many pages. https://itch.io/docs/itch/

This release upgrades from Electron 33 to Electron 40, adds Linux sandboxing overhaul, and breaks apart install planning phase so that it doesn't block installing a game.

macOS 11 (Big Sur) is no longer supported. macOS 12 (Monterey) or later is now required.

• Upgrade from Electron 33 to Electron 40 (#3382)
  • Minimum supported macOS version is now 12 (Monterey)
  • Linux now defaults to native Wayland in Wayland sessions
• Updated esbuild targets to Node 24 and Chrome 144 to match Electron 40

• Refactored install planning to split install target listing (Install.GetUploads) from per-upload planning (Install.PlanUpload). Due to how the app computes space requirements, it may take some time as our CDN warms up cold files. For this reason we made the size calculation happen asynchronously so you can queue an install immediately without having to wait for install size calculation to complete.
• Added cancellation support for in-flight install planning requests when changing upload or closing the modal

• Added new Bubblewrap sandbox backend with user-namespace isolation, a persistent per-game home directory, read-only system mounts, and GPU, audio, and display passthrough
• Added Flatpak-spawn sandbox backend for running sandboxed games when itch is installed as a Flatpak
• Updated Firejail backend with network disable support, an expanded blacklist covering sensitive paths (~/.ssh, ~/.gnupg, ~/.aws, browser data), and environment variable filtering consistent with the new backends
• Auto-detection selects the best available backend: Flatpak-spawn when inside Flatpak, otherwise Bubblewrap if available, with Firejail as fallback
• New sandbox preferences under Security & privacy: sandbox type dropdown (Auto, Bubblewrap, Firejail), "Disable network access in sandbox" toggle, and allowed environment variable names input
• Strict environment variable allowlist: only display, audio, session, and itch.io-specific variables are passed through, with user-configurable additions via preferences

• Reintroduced the in-app changelog dialog
• Added release tabs for itch, butler, and itch-setup

• Added more semantic HTML and ARIA labels across controls (navigation buttons, game management actions, progress indicators, sidebar navigation)
• Game cover images now include alt text
• Updated cave version selection rows to semantic buttons
• Fixed tab list scrollbar rendering issues (#3384)
• Updated react-tabs to v4.2.1 and added global tab styles
• Improved login form alignment and spacing

• Reviewed the itch docs and modernized many pages. https://itch.io/docs/itch/

This release upgrades from Electron 25 to Electron 33. macOS 10.15 (Catalina) is no longer supported macOS 11 (Big Sur) or later is now required.

This is release is made available as an intermediate for upcoming Electron to allow for us to bisect for any issues.

• Upgrade from Electron 25 to Electron 33 (#3382)
• esbuild target updated to Node 20 and Chrome 130 to match Electron 33
• Updated openAsHidden login item setting to only apply on Windows (removed from macOS in newer Electron)

• Changed app ID from com.squirrel.itch.itch to io.itch.itch
• Disabled remote locale fetching (locales.itch.zone no longer exists)

First stable release since v26.1.9, includes all changes from v26.2.1-canary, v26.3.0-canary, v26.4.0-canary, and v26.5.0-canary.

Highlights: native Apple Silicon support, new OAuth login flow, full migration from GitLab CI to GitHub Actions, Electron 22 to 25 upgrade, Webpack to esbuild migration, semantic HTML accessibility improvements, and numerous bug fixes.

See the GitHub release for full details.

This is the first version of the app to officially support arm64 on macOS (aka Apple silicon)! The auto-updater will automatically pull the arm64 version for those on Apple silicon. No separate reinstallation necessary. All supplemental binaries (butler, itch-setup) will also automatically be replaced with their arm64 equivalent. The app should now start faster, be faster, and have less impact on your battery since it no longer needs to run through emulation on modern macOS computers.

This version of the app also includes our new OAuth login flow. We plan to retire username & password login in the app in favor of an OAuth login that requires a browser to complete the login. Unfortunately API endpoints that allow someone to authenticate via a username & password are prime targets for credential stuffing attacks. Our previous solution to this was to add a captcha in the app, but it broke more often than not, as electron is not a regular browser.

The OAuth login is now the default screen. Username & password will remain available as a secondary option until we verify that people don't have any issues logging in.

Because the app is booted by itch-setup, we decided to remove the universal build of the electron app we published with the last canary version. itch-setup will pick the version of the app that is correct for your system, so it's not necessary to download an app that is 2x the size that runs on both intel and arm64. (We do provide universal builds on the kitch installation program though)

This update also completes our major refactor and migration of our CI system to GitHub Actions. All executables are now built, signed, notarized, and deployed through a GitHub actions workflow. We look forward to adding support for arm64 Windows and Linux in future updates now that we have completed the foundation.

With the new CI we are fully retiring all 32 bit binaries that we used to publish. Many of these were already not being updated anymore, but we'll be removing the download links entirely from broth.

• macOS signing and notarization done on GitHub Actions via separate job (new release/sign-macos.js)
• Windows code signing via Azure Code Signing in CI
• Separate macOS x64 and arm64 builds (removed @electron/universal, builds are no longer merged into a universal binary)
• Tagged builds are published to itchio via butler through GitHub Actions
• Restored integration test workflow on GitHub Actions
• Removed GitLab CI references, fully migrated to GitHub Actions
• Use tarballs for artifact transfer to preserve symlinks and permissions
• Upgraded @electron/packager v18 to v19, @electron/notarize v2 to v3
• No longer installs external npm dependencies during packaging (dependencies are bundled by esbuild)

• New OAuth login flow with PKCE as the default login method
• Password login still available as a fallback ("Log in with password" link)
• OAuth callback handled via itch://oauth-callback protocol
• Manual code paste fallback for when the browser redirect doesn't work
• New butlerd message: Profile.LoginWithOAuthCode

• Upgrade React 16 to React 17
• Upgrade styled-components to 5.3.11
• Added typed Redux hooks (useAppDispatch, useAppSelector)
• Many class components converted to functional components with React.memo
• Replaced react-container-dimensions with built-in ContainerDimensions component using ResizeObserver
• Removed rimraf dependency (use native fs.rm)
• Removed RandomSvg component (unused)
• Removed recursive-copy dev dependency

• Broth component in preferences now expandable, showing executable path, version, directory, stage, source channel
• Playtime duration tooltips now show precise hours/minutes/seconds on hover
• Remembered profiles layout improvements

• We did a pass over all clickable button like elements to ensure that they use semantic HTML elements like to ensure that they can be navigated to and activated with a keyboard
• Icons now have role="img" and aria-label for screen readers
• Search results use standard scrollIntoView() for keyboard navigation instead of deprecated scrollIntoViewIfNeeded()
• Remembered profiles use flexbox layout instead of absolute positioning, improving tabbing order

• macOS: proper arm64 architecture detection for broth packages (no longer hardcoded to amd64)
• macOS: binary architecture validation — re-downloads amd64 binaries on arm64 Macs
• Broth package state now tracks download channel

• Updated localization strings (Farsi, Chinese Simplified, Indonesian, Italian, and others)

• Add arm64 and universal builds to GitHub Actions
• Add @electron/universal for macOS universal binary support
• Clean build artifact names published to the GitHub release

Note: Due to modern Windows signing requirements we'll likely be migrating the entire build system to GitHub actions. Right now we're doing builds in parallel to work out the details. Currently no builds uploaded to GitHub releases are signed or notarized

• Migrate from Webpack to esbuild
• Remove happypack dependency
• Migrate release scripts to ES modules
• Upgrade electron-packager to @electron/packager (v17 to v18)
• Set up GitHub Actions for building and deploying
• Update TypeScript to latest version
• Add production minification and metafile generation for bundle analysis

• Upgrade to Electron 25
• Update protocol registration method

• Migrate to @itchio/butlerd
• Remove url module dependency in renderer (use browser builtins)
• Remove util package dependency in renderer
• General dependency cleanup

• Modal dialogs now use semantic <dialog> element with focus trapping (#3292)
• Buttons and links migrated to semantic HTML elements
• Remove "draggable" attribute from modal dialogs

• Allow refreshing the app's UI again, instead of opening it in your system browser
• Fix missing uninstall dialog title
• Fix button behavior and login form submit handling
• Include architecture in user agent string

• Update screenshots