Skip to content

Release: merge develop into beta (v7.0.5-beta) - #1028

Merged
justcoding121 merged 249 commits into
betafrom
develop
Sep 10, 2026
Merged

Release: merge develop into beta (v7.0.5-beta)#1028
justcoding121 merged 249 commits into
betafrom
develop

Conversation

@justcoding121

Copy link
Copy Markdown
Owner

Summary

  • Recut product tag v7.0.5-beta from current develop (311fe6a9).
  • First automatic Chocolatey push of titanium-cli / titanium-inspector (7.0.5-beta, non-embed + Inspector PolyForm NC requireLicenseAcceptance).
  • Includes QUIC flake harden for TLS leaf E2E, RPS/wiki performance charts, peer gates, packaging, and docs since last beta.

Test plan

  • PR checks: .NET / build, all ui-portable legs, RPS saturation / rps (compare-spot), path guard — all green
  • After merge: rps-publish-gate (editions) + rps-peer-gate (spot) + NuGet 7.0.5-beta + cut-product-tag
  • release.yml: tests, signed assets, GitHub prerelease v7.0.5-beta, publish-chocolatey
  • titaniumproxy.com/download Beta shows v7.0.5-beta asset links

justcoding121 and others added 30 commits September 1, 2026 12:28
…-stable

docs: 7.0.4 stable — winget stubs, NuGet/docs, PERF-GATES note
Move update channel under Help with an About dialog, and let Check for updates install the selected channel's latest build (including downgrades and same-version channel switches).
…ing (#1014)

Sign win-x64 CLI (titanium.exe/twp.exe), TitaniumInspector.exe, and
the Inspector MSI with OIDC + azure/artifact-signing-action. CLI
win-x64 now publishes on windows-latest so SignTool can run.

Co-authored-by: justcoding121 <justcoding121@users.noreply.github.com>
…Flathub, Homebrew) (#1015)

Wire release.yml for macOS DMG (notarize when Apple secrets exist),
Linux AppImage/deb/rpm on glibc RIDs, SHA256SUMS (+ optional GPG),
and website download preferences. Add Flathub manifests, Homebrew
formula (tap justcoding121/homebrew-titanium), and install/packaging docs.

Co-authored-by: justcoding121 <justcoding121@users.noreply.github.com>
…it code (#1016)

* fix(release): notarize containers only; patchelf .so filter; clear exit code

- notarytool rejects raw Mach-O; codesign binaries, notarize zip/dmg/app only
- stop matching System.Net.Sockets.dll via *.so* wildcard
- reset LASTEXITCODE after soft-skipped patchelf so GHA pwsh does not fail

* chore: gitignore local Apple signing material

---------

Co-authored-by: justcoding121 <justcoding121@users.noreply.github.com>
- Host-arch appimagetool with ARCH=target (fixes arm64 Exec format error)
- Extract tool without FUSE; fail hard for glibc AppImages
- Publish titanium-releases.asc and document fingerprint on install.md

Co-authored-by: justcoding121 <justcoding121@users.noreply.github.com>
Relative OUT paths were resolved after cd into mktemp, so the AppImage
landed in a deleted WORK dir. Resolve absolute output first; always
ship a PNG named in the .desktop file.

Co-authored-by: justcoding121 <justcoding121@users.noreply.github.com>
#1019)

Point flatpak manifests and homebrew formula at v7.0.4-beta assets with
real SHA256 digests for pre-stable dry-run. Add packaging-catalog-smoke
workflow to run flatpak-builder and brew install against those fills.

Co-authored-by: justcoding121 <justcoding121@users.noreply.github.com>
* fix(packaging): Flatpak icon + brew tap smoke install

Install 256x256 app icon for AppStream compose; smoke Homebrew via
justcoding121/titanium tap instead of a bare formula path.

* fix(homebrew): brew test matches VersionPrefix; smoke uses local tap copy

---------

Co-authored-by: justcoding121 <justcoding121@users.noreply.github.com>
Co-authored-by: justcoding121 <justcoding121@users.noreply.github.com>
* packaging: retarget Flathub/Homebrew/winget stubs to v7.0.5

Stable signed release assets; catalog SHA/URL bumps after beta dry-runs.

* docs(packaging): link Flathub and winget submission PRs

---------

Co-authored-by: justcoding121 <justcoding121@users.noreply.github.com>
…seUrl (#1023)

Point stubs at working PolyForm license path and current submission PRs.

Co-authored-by: justcoding121 <justcoding121@users.noreply.github.com>
Drop home FS and exclusive x11+wayland; use xdg titanium dirs and
wayland + fallback-x11 for Inspector.

Co-authored-by: justcoding121 <justcoding121@users.noreply.github.com>
* docs(packaging): record Flathub close-out and winget wait state

Flathub #10054/#10055 were closed (console CLI ineligible; AI policy /
demo-video issues). Document human-only Inspector retry path and current
winget moderator wait for #428410/#428421.

* chore(packaging): drop Flatpak CLI; keep Inspector-only Flathub setup

Remove CLI Flatpak manifest/metainfo and catalog-smoke build step. Flathub
rejects console software; document Inspector-only path. No Flathub contact.

---------

Co-authored-by: justcoding121 <justcoding121@users.noreply.github.com>
Co-authored-by: justcoding121 <justcoding121@users.noreply.github.com>
…I, and Plus

Normalize 3-part feed tags vs 4-part assemblies, tighten channel-offer UX, emit plus.version, and skip no-op Plus downloads.
Disable selection-dependent menu items when unused, and surface async results with busy progress, severity colors, attention pulse, and important toasts.
Surface when body: skips disk-spilled payloads and when hard eviction shrunk the capture window, without scanning disk on every keystroke.
Add structured Keychain/NSS trust results with optional certutil install, Keychain re-verify, and an opt-in Capture menu action for Firefox trust.
Gracefully quit Firefox after consent, find Snap/Flatpak profiles, and pre-warn about the OS Trusted Root Yes/No dialog.
Concurrent develop pushes were failing the job on generated docs merge conflicts; sync, regenerate, and retry push instead.
Let users choose Light, Dark, or Automatic (OS) from Options, persist the preference, and apply theme-aware styling with clearer status semantics and improved dark-mode contrast.
Add SetTransientStatus so outcome toasts and brief colored status revert to Ready baseline instead of staying green or yellow. Fix DataGrid row selection contrast in light and dark themes and soften dark-mode warning text in the status bar.
… and CLI.

Expose built-in and user bypass/tunnel-only rules in one dialog, session exclude flow, opaque-tunnel reasons, and per-OS bypass preview; ship MitmExclusionDefaults and YAML decrypt skip lists for edge proxies.
Make selected session rows easier to spot in light/dark themes, hide the current-cell focus ring, and keep Start-proxy accent labels readable.
Seed factory OS-bypass and tunnel-only hosts into editable Inspector/CLI/NuGet lists so removals stick, with Reset to defaults and docs for Win/macOS/Linux.
Match other settings dialogs — drop 11/12px overrides so help text and host lists stay readable.
Drop gate jargon and maintainer harness details from the README and website so the pages focus on how we measure and what the charts show.
Union comparison-group product shards (Win/Linux + Mac) and heavier
modes; paste product/heavier/gRPC; regenerate practical, product-matrix,
and heavier PNGs. Paste scripts accept shard-suffixed artifact folders.
Practical, product-matrix, and heavier renderers center only measured
proxies per cluster instead of reserving five fixed offsets.
0 / n/a products are dropped and remaining bars share the full group width
so H2→h2c / H3 / gRPC clusters no longer show empty slots.
Lead website, wiki, and READMEs with jobs-to-do; keep CI/gate jargon in Maintainer notes. Include Envoy/HAProxy harness fixes used by the saturation workflow.
Dropped peers collapse empty slots; surviving bars stay the same width instead of stretching to fill the cluster.
Double-quoted h3=:port terminated the YAML scalar and aborted QuicListener
bring-up (yaml-cpp end of map), leaving envoy-reverse-http3-* Not measured.
GHA Linux compiles USE_QUIC_OPENSSL_COMPAT; without global limited-quic,
quic4@ binds ALERT and H3 inbound arms produce empty CSVs.
…l reverse.

Label compressed-relay wins in wiki/paste/charts/captions and put terminate wires first on practical charts so readers do not treat header-dominated medals as the edge reverse story.
Replace embedders with .NET library users, and plain-language the RPS framing (frame copy / typical reverse paths / larger-body check) in wiki, website, README, paste headers, and chart footers.
…anagers.

Remove winget and Chocolatey from consumer install paths until those feeds are live; keep README short with cross-platform Download plus optional Homebrew for macOS CLI.
Restore nginx-style localhost SNI and ::1 QUIC binds for Envoy/HAProxy
(Linux MsQuic preferred ::1 and failed TLS against 127.0.0.1-only binds).
Build GHA Linux HAProxy against QuicTLS instead of OpenSSL-compat so MsQuic
can complete the handshake.
Keep the workload-shape explanation on the Performance wiki; consumer pages just show charts and link there.
Use --concurrency 1 for Envoy QUIC (GHA lacks CAP_BPF multi-worker
routing), enable_reuse_port + larger SO_RCVBUF on QuicListener, and
prefer best RPS when unioning product + peer-fix CSVs.
Pin TWP_RPS_SINGLE_HTTP3_CONNECTION while Envoy H3 is up (Linux GHA
collapsed with multi-QUIC fan-out), raise cluster circuit breakers,
explicit H1c upstream options, and bump Linux UDP rcv/wmem sysctls.
Drop single-H3 client pin, --concurrency 1, inflated circuit breakers,
SO_RCVBUF/sysctl tweaks. Keep scheme/YAML/localhost dual-stack fixes.
Overlay peer-fix CSVs into wiki tables/product charts; practical
clusters are H1, H2, H3, then POST/WS/gRPC. Sustain medians use
SLO-passing repeats so noisy Mac H2→h2c peers are not zeroed out.
Drop best-case / n/a / cross-cluster caveats; say GitHub Actions with
4-core and RAM; bump footer font size.
Label the body cluster with the wire (H1 TLS→H1c); load compare-bodies
CSVs via --bodies-root. POST remains in heavier tables only.
Move body/POST work off the tiny chart (replace with H3→h2c) so heavier reverse load stays readable on README and the website.
…acceptance.

Disable HTTP/3 in WriteTls so Run_TlsLeaf_LoadsCertificate is not failed by Windows QuicListener bind noise, and add copyright plus requireLicenseAcceptance on the Inspector Chocolatey package before the first community push.
@sonarqubecloud

Copy link
Copy Markdown

Quality Gate Failed Quality Gate failed

Failed conditions
72.8% Coverage on New Code (required ≥ 80%)

See analysis details on SonarQube Cloud

@justcoding121
justcoding121 merged commit 2b3e39c into beta Sep 10, 2026
30 of 31 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant