diff --git a/CHANGELOG.md b/CHANGELOG.md index 776aa19..6c2ec4b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,6 +9,8 @@ and Quipu uses [Semantic Versioning](https://semver.org/spec/v2.0.0.html). ## [Unreleased] +## [0.5.1] - 2026-10-29 + ### Fixed - Parser errors, including invalid UTF-8, hiding recoverable compiler errors @@ -102,7 +104,8 @@ and Quipu uses [Semantic Versioning](https://semver.org/spec/v2.0.0.html). - Bundled example projects and offline documentation. - A bounded compiled-rules cache. -[Unreleased]: https://github.com/corelight/quipu/compare/v0.5.0...HEAD +[Unreleased]: https://github.com/corelight/quipu/compare/v0.5.1...HEAD +[0.5.1]: https://github.com/corelight/quipu/compare/v0.5.0...v0.5.1 [0.5.0]: https://github.com/corelight/quipu/compare/v0.4.0...v0.5.0 [0.4.0]: https://github.com/corelight/quipu/compare/v0.3.0...v0.4.0 [0.3.0]: https://github.com/corelight/quipu/compare/v0.2.0...v0.3.0 diff --git a/app/package-lock.json b/app/package-lock.json index b8e8b0e..ae6876d 100644 --- a/app/package-lock.json +++ b/app/package-lock.json @@ -1,12 +1,12 @@ { "name": "quipu", - "version": "0.5.0", + "version": "0.5.1", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "quipu", - "version": "0.5.0", + "version": "0.5.1", "license": "BSD-3-Clause", "dependencies": { "@tauri-apps/api": "^2", diff --git a/app/package.json b/app/package.json index 40bd3c2..0fe9310 100644 --- a/app/package.json +++ b/app/package.json @@ -1,7 +1,7 @@ { "name": "quipu", "private": true, - "version": "0.5.0", + "version": "0.5.1", "description": "A desktop workbench for writing, validating, compiling, and testing YARA rules.", "license": "BSD-3-Clause", "homepage": "https://github.com/corelight/quipu", diff --git a/docs/release-testing-0.5.1.md b/docs/release-testing-0.5.1.md new file mode 100644 index 0000000..ab926dc --- /dev/null +++ b/docs/release-testing-0.5.1.md @@ -0,0 +1,44 @@ +# Quipu 0.5.1 acceptance record + +Status: **pending**. The release remains a draft until the final packages have +passed platform acceptance. The maintainer verified the diagnostics fix in the +local `0.5.1-issue47.1` Debian test build; that does not mark the final release +packages or other platforms tested. + +Record the `v0.5.1` source SHA, successful public main CI and Release run IDs, +private signing run ID, and final package hashes alongside the results below. +Use the draft's `RELEASE_BUILD.json`, macOS provenance records, and nine-package +`SHA256SUMS` to identify the exact binaries tested. Do not replace tagged source +or published binaries if a code fix is needed; prepare a new version instead. + +| Platform | OS / hardware | Packages | Result | +| --- | --- | --- | --- | +| Linux x86-64 | Pending | AppImage, DEB, RPM | Pending | +| Windows x86-64 | Pending | Standard/offline EXE and MSI; upgrade | Pending | +| macOS Apple Silicon | Pending | Signed aarch64 DMG | Pending | +| macOS Intel | Pending | Signed x64 DMG | Pending | + +For each platform: + +- Install or upgrade from 0.5.0 and launch normally. On macOS, use a browser + download, keep Gatekeeper enabled, install into Applications, and record prior + Quipu approval history. No security override should be needed. +- Verify [#47](https://github.com/corelight/quipu/issues/47): an invalid UTF-8 + file and an ordinary syntax error must still allow recoverable semantic + errors and warnings from other selected files to appear in Problems. Confirm + file/line navigation works for readable files and Scan stays unavailable + after a failed compile, including after a previous successful compile. +- Open bundled examples, compile rules with includes, scan text and files, + and inspect expected matches. Check editor diagnostics and structural errors + such as missing includes and cycles. +- Edit, save, recompile, quit, and reopen. Restore cached compiled rules and + scan again. Exercise native menus, shortcuts, copy/paste, file dialogs, + preferences, pane layout, and offline help. +- Check unsaved edits: Cancel preserves work and explicit discard/quit works. + On Windows, cover actual standard/offline EXE and MSI installation and + WebView2 behavior. On both macOS architectures, compile and scan in the final + signed app to exercise the hardened-runtime JIT. + +Record issues and their resolutions before marking any row passed. Automated +build/signature checks and earlier release acceptance do not replace these +checks against the final 0.5.1 packages.