v1.0.3

Changelog

Added

• New AddShare flow for importing shares (incl. relay-plan request via window.electronAPI.computeRelayPlan). ([GitHub][1])
• New Onboarding screen / welcome step and updated app state flow for onboarding + share-loaded tracking. ([GitHub][1])
• Relay planner + types (computeRelayPlan, relay normalization/dedupe/priority merge, exported RelayPlan). ([GitHub][1])
• Typed preload API / IPC surface (contextBridge ElectronAPI, window typing, dedicated preload tsconfig). ([GitHub][1])
• New signer keep-alive module to improve long-running signer behavior. ([GitHub][1])

Changed / Improved

• Refactored renderer to use the preload bridge (window.electronAPI) instead of direct ipcRenderer usage. ([GitHub][1])
• Improved echo/relay wiring in main process (new handlers for relay-plan + echo start/stop, multi-target listener wiring, stricter window guards). ([GitHub][1])
• Recovery UX: masked NSEC, reveal/copy/auto-clear behavior, and timeout cleanup. ([GitHub][1])
• Build/bundler pipeline updated to compile preload + webpack/electron-builder adjustments (buffer/ProvidePlugin, fallbacks, TS build configs). ([GitHub][1])

Security

• IPC input validation using Zod schemas; expanded IPC schemas + safer invoke/handler patterns. ([GitHub][1])
• Electron hardening (context isolation + preload, CSP meta tag, navigation/windowOpen handling patterns tested). ([GitHub][1])
• SSRF-aware relay validation + sanitized user-facing errors. ([GitHub][1])
• Stricter share save permissions (restrictive directory/file modes; Windows ACL notes). ([GitHub][1])
• Save callback no longer receives passwords; SaveShare signature updated to (salt, encryptedShare). ([GitHub][1])

Fixed

• Reduced race conditions and improved mount/unmount safety + echo listener cleanup. ([GitHub][1])
• LoadShare legacy length sanity checks + better sanitized decode/load errors. ([GitHub][1])

Tests

• Major expansion of unit/integration/security tests + centralized electron API mocking; ~445 tests passing referenced in the PR summary. ([GitHub][1])

v1.0.2

Igloo v1.0.2

Release date: October 23, 2025

✨ What’s new

1) Centralized relay planning for echo paths

We’ve moved all relay normalization/deduplication and planning into a shared module so both the UI and the main process derive echo relays consistently. This reduces edge-case bugs (mixed ws/wss/http/https, casing, query/fragment noise) and makes multi-target listening predictable. ([GitHub]1)

• New src/lib/echoRelays.ts with:

  • normalizeRelayUrl, dedupeKey utilities
  • readConfiguredRelaysSync (env-aware)
  • computeRelayPlan (combines defaults, group relays, and env overrides)

• AddShare.tsx and main.ts now consume computeRelayPlan, removing one-off logic and enabling multi-target listener registration in the main process. ([GitHub]1)

2) Echo/relay handling refinements (from staging)

Polish from the staging merge includes challenge-aware echo callbacks, standardized IPC payloads, environment-driven relay overrides for testing, and more robust debug logging. Also bumps @frostr/igloo-core to keep desktop aligned with the latest core behavior. ([GitHub]2)

Highlights:

• Challenge parameter propagated through callbacks & IPC
• Relay URL normalization + case-insensitive dedupe
• IGLOO_TEST_RELAY & IGLOO_DEBUG_ECHO support for testability
• @frostr/igloo-core upgraded (echo-listening compatibility) ([GitHub]2)

🧰 Developer notes

• The relay planner is now the source of truth for echo listeners across the app; if you were relying on local helpers, migrate to computeRelayPlan to avoid drift. ([GitHub]1)
• Staging refactor standardized callback shapes and IPC payloads. If you consume these events in custom builds, re-check payload keys (shareCredential, challenge). ([GitHub]2)

🐞 Fixes & reliability

• Fewer duplicate or malformed relay connections due to stricter normalization and stable dedupe keys.
• Clearer debug surface for diagnosing relay issues in test and staging environments. ([GitHub]1)

🔐 Verification & downloads

As with prior releases, builds are code-signed/notarized (macOS) and GPG-signed with checksums for all platforms. See VERIFICATION.md linked from the repo/readme, and follow the same verification steps as v1.0.1 while we propagate 1.0.2 assets on the Releases page. (v1.0.1 format & verification steps shown here for reference.) ([GitHub]3)

---

PRs included

• #61 – Use shared relay planner for desktop echo paths (centralized relay planning, multi-target listener registration, integration in AddShare.tsx and main.ts) ([GitHub]1)
• #60 – Staging (echo callback/IPC standardization, env overrides, debug logging, @frostr/igloo-core upgrade) ([GitHub]2)

---

Thanks

Huge thanks to everyone testing echo flows and reporting relay inconsistencies — this release should make relay configuration far more predictable across environments.

refs/tags/v1.0.1

Igloo v1.0.1

Downloads

Choose the appropriate file for your platform:

• Windows:

  • Igloo-Setup-1.0.1.exe - Installer
  • Igloo-1.0.1-portable.exe - Portable

• macOS:

  • Igloo-1.0.1-x64.dmg - Intel Mac Disk Image
  • Igloo-1.0.1-arm64.dmg - Apple Silicon Mac Disk Image
  • Igloo-1.0.1-x64.zip - Intel Mac ZIP Archive
  • Igloo-1.0.1-arm64.zip - Apple Silicon Mac ZIP Archive

• Linux:

  • igloo-1.0.1.AppImage - AppImage
  • igloo_1.0.1_amd64.deb - Debian Package

Verification

All releases are signed with GPG. To verify this release:

1. Download the verification files:

   • igloo-signing-key.asc - Developer's public key
   • SHA256SUMS - File checksums
   • SHA256SUMS.asc - Signature for checksums

2. Import the public key:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v1.0.1/igloo-signing-key.asc | gpg --import

3. Verify the checksums signature:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v1.0.1/SHA256SUMS.asc | gpg --verify

4. Verify file checksums:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v1.0.1/SHA256SUMS | shasum -a 256 -c

For detailed verification instructions, see VERIFICATION.md

v0.1.3

Igloo v0.1.3

Downloads

Choose the appropriate file for your platform:

• Windows:

  • Igloo-Setup-0.1.3.exe - Installer
  • Igloo-0.1.3-portable.exe - Portable

• macOS:

  • Igloo-0.1.3-x64.dmg - Intel Mac Disk Image
  • Igloo-0.1.3-arm64.dmg - Apple Silicon Mac Disk Image
  • Igloo-0.1.3-x64.zip - Intel Mac ZIP Archive
  • Igloo-0.1.3-arm64.zip - Apple Silicon Mac ZIP Archive

• Linux:

  • igloo-0.1.3.AppImage - AppImage
  • igloo_0.1.3_amd64.deb - Debian Package

Verification

All releases are signed with GPG. To verify this release:

1. Download the verification files:

   • igloo-signing-key.asc - Developer's public key
   • SHA256SUMS - File checksums
   • SHA256SUMS.asc - Signature for checksums

2. Import the public key:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.1.3/igloo-signing-key.asc | gpg --import

3. Verify the checksums signature:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.1.3/SHA256SUMS.asc | gpg --verify

4. Verify file checksums:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.1.3/SHA256SUMS | shasum -a 256 -c

For detailed verification instructions, see VERIFICATION.md

refs/tags/v0.1.2

Igloo v0.1.2

Downloads

Choose the appropriate file for your platform:

• Windows:

  • Igloo-Setup-0.1.2.exe - Installer
  • Igloo-0.1.2-portable.exe - Portable

• macOS:

  • Igloo-0.1.2-x64.dmg - Intel Mac Disk Image
  • Igloo-0.1.2-arm64.dmg - Apple Silicon Mac Disk Image
  • Igloo-0.1.2-x64.zip - Intel Mac ZIP Archive
  • Igloo-0.1.2-arm64.zip - Apple Silicon Mac ZIP Archive

• Linux:

  • igloo-0.1.2.AppImage - AppImage
  • igloo_0.1.2_amd64.deb - Debian Package

Verification

All releases are signed with GPG. To verify this release:

1. Download the verification files:

   • igloo-signing-key.asc - Developer's public key
   • SHA256SUMS - File checksums
   • SHA256SUMS.asc - Signature for checksums

2. Import the public key:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.1.2/igloo-signing-key.asc | gpg --import

3. Verify the checksums signature:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.1.2/SHA256SUMS.asc | gpg --verify

4. Verify file checksums:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.1.2/SHA256SUMS | shasum -a 256 -c

For detailed verification instructions, see VERIFICATION.md

refs/tags/v0.1.1

Igloo v0.1.1

Downloads

Choose the appropriate file for your platform:

• Windows:

  • Igloo-Setup-0.1.1.exe - Installer
  • Igloo-0.1.1-portable.exe - Portable

• macOS:

  • Igloo-0.1.1-x64.dmg - Intel Mac Disk Image
  • Igloo-0.1.1-arm64.dmg - Apple Silicon Mac Disk Image
  • Igloo-0.1.1-x64.zip - Intel Mac ZIP Archive
  • Igloo-0.1.1-arm64.zip - Apple Silicon Mac ZIP Archive

• Linux:

  • igloo-0.1.1.AppImage - AppImage
  • igloo_0.1.1_amd64.deb - Debian Package

Verification

All releases are signed with GPG. To verify this release:

1. Download the verification files:

   • igloo-signing-key.asc - Developer's public key
   • SHA256SUMS - File checksums
   • SHA256SUMS.asc - Signature for checksums

2. Import the public key:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.1.1/igloo-signing-key.asc | gpg --import

3. Verify the checksums signature:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.1.1/SHA256SUMS.asc | gpg --verify

4. Verify file checksums:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.1.1/SHA256SUMS | shasum -a 256 -c

For detailed verification instructions, see VERIFICATION.md

refs/tags/v0.1.0

Igloo v0.1.0

Downloads

Choose the appropriate file for your platform:

• Windows:

  • Igloo-Setup-0.1.0.exe - Installer
  • Igloo-0.1.0-portable.exe - Portable

• macOS:

  • Igloo-0.1.0-x64.dmg - Intel Mac Disk Image
  • Igloo-0.1.0-arm64.dmg - Apple Silicon Mac Disk Image
  • Igloo-0.1.0-x64.zip - Intel Mac ZIP Archive
  • Igloo-0.1.0-arm64.zip - Apple Silicon Mac ZIP Archive

• Linux:

  • igloo-0.1.0.AppImage - AppImage
  • igloo_0.1.0_amd64.deb - Debian Package

Verification

All releases are signed with GPG. To verify this release:

1. Download the verification files:

   • igloo-signing-key.asc - Developer's public key
   • SHA256SUMS - File checksums
   • SHA256SUMS.asc - Signature for checksums

2. Import the public key:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.1.0/igloo-signing-key.asc | gpg --import

3. Verify the checksums signature:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.1.0/SHA256SUMS.asc | gpg --verify

4. Verify file checksums:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.1.0/SHA256SUMS | shasum -a 256 -c

For detailed verification instructions, see VERIFICATION.md

refs/tags/v0.0.9

Igloo v0.0.9

Downloads

Choose the appropriate file for your platform:

• Windows:

  • Igloo-Setup-0.0.9.exe - Installer
  • Igloo-0.0.9-portable.exe - Portable

• macOS:

  • Igloo-0.0.9-x64.dmg - Intel Mac Disk Image
  • Igloo-0.0.9-arm64.dmg - Apple Silicon Mac Disk Image
  • Igloo-0.0.9-x64.zip - Intel Mac ZIP Archive
  • Igloo-0.0.9-arm64.zip - Apple Silicon Mac ZIP Archive

• Linux:

  • igloo-0.0.9.AppImage - AppImage
  • igloo_0.0.9_amd64.deb - Debian Package

Verification

All releases are signed with GPG. To verify this release:

1. Download the verification files:

   • igloo-signing-key.asc - Developer's public key
   • SHA256SUMS - File checksums
   • SHA256SUMS.asc - Signature for checksums

2. Import the public key:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.0.9/igloo-signing-key.asc | gpg --import

3. Verify the checksums signature:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.0.9/SHA256SUMS.asc | gpg --verify

4. Verify file checksums:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.0.9/SHA256SUMS | shasum -a 256 -c

For detailed verification instructions, see VERIFICATION.md

refs/tags/v0.0.8

Igloo v0.0.8

Downloads

Choose the appropriate file for your platform:

• Windows:

  • Igloo-Setup-0.0.8.exe - Installer
  • Igloo-0.0.8-portable.exe - Portable

• macOS:

  • Igloo-0.0.8-x64.dmg - Intel Mac Disk Image
  • Igloo-0.0.8-arm64.dmg - Apple Silicon Mac Disk Image
  • Igloo-0.0.8-x64.zip - Intel Mac ZIP Archive
  • Igloo-0.0.8-arm64.zip - Apple Silicon Mac ZIP Archive

• Linux:

  • igloo-0.0.8.AppImage - AppImage
  • igloo_0.0.8_amd64.deb - Debian Package

Verification

All releases are signed with GPG. To verify this release:

1. Download the verification files:

   • igloo-signing-key.asc - Developer's public key
   • SHA256SUMS - File checksums
   • SHA256SUMS.asc - Signature for checksums

2. Import the public key:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.0.8/igloo-signing-key.asc | gpg --import

3. Verify the checksums signature:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.0.8/SHA256SUMS.asc | gpg --verify

4. Verify file checksums:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.0.8/SHA256SUMS | shasum -a 256 -c

For detailed verification instructions, see VERIFICATION.md

refs/tags/v0.0.7

Igloo v0.0.7

Downloads

Choose the appropriate file for your platform:

• Windows:

  • Igloo-Setup-0.0.7.exe - Installer
  • Igloo-0.0.7-portable.exe - Portable

• macOS:

  • Igloo-0.0.7-x64.dmg - Intel Mac Disk Image
  • Igloo-0.0.7-arm64.dmg - Apple Silicon Mac Disk Image
  • Igloo-0.0.7-x64.zip - Intel Mac ZIP Archive
  • Igloo-0.0.7-arm64.zip - Apple Silicon Mac ZIP Archive

• Linux:

  • igloo-0.0.7.AppImage - AppImage
  • igloo_0.0.7_amd64.deb - Debian Package

Verification

All releases are signed with GPG. To verify this release:

1. Download the verification files:

   • igloo-signing-key.asc - Developer's public key
   • SHA256SUMS - File checksums
   • SHA256SUMS.asc - Signature for checksums

2. Import the public key:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.0.7/igloo-signing-key.asc | gpg --import

3. Verify the checksums signature:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.0.7/SHA256SUMS.asc | gpg --verify

4. Verify file checksums:

   curl -sL https://github.com/FROSTR-ORG/igloo/releases/download/v0.0.7/SHA256SUMS | shasum -a 256 -c

For detailed verification instructions, see VERIFICATION.md