Perspective-Server/appcast.xml at main · Techopolis/Perspective-Server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:sparkle="http://www.andymatuschak.org/xml-namespaces/sparkle" xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel>
        <title>Perspective Server Updates</title>
        <language>en</language>
        <item>
            <title>Version 1.1.0 Beta 2</title>
            <pubDate>Tue, 17 Mar 2026 20:57:03 +0000</pubDate>
            <sparkle:version>2</sparkle:version>
            <sparkle:shortVersionString>1.1.0-beta.2</sparkle:shortVersionString>
            <sparkle:minimumSystemVersion>26.0</sparkle:minimumSystemVersion>
            <sparkle:channel>beta</sparkle:channel>
            <description><![CDATA[
                <h2>Perspective Server 1.1.0 Beta 2</h2>
                <p>This beta is a targeted security release for GitHub issue #1, <strong>[Bug] Open web server manipulable by any web page</strong>. It is intended to close that localhost exposure and stabilize the affected client flows.</p>
                <ul>
                    <li>Restricts the local server to loopback access while preserving both IPv4 and IPv6 localhost connectivity</li>
                    <li>Adds bearer-token protection for local clients and repairs the in-app chat, dashboard test, and copied client setup flows to work with that requirement</li>
                    <li>Returns readable auth failures to localhost web clients so browser-based integrations see proper 401 responses instead of opaque CORS errors</li>
                    <li>Fails startup if the auth token cannot be safely persisted, avoiding an unrecoverable local auth state</li>
                </ul>
                <p>Security issue reported by Brian Sniffen.</p>
            ]]></description>
            <enclosure
                url="https://github.com/Techopolis/Perspective-Server/releases/download/v1.1.0-beta.2/PerspectiveServer-1.1.0-beta.2.zip"
                type="application/octet-stream"
                sparkle:edSignature="HeSDe+wqEK/edVCaZWq7NxrvLQT6OwqVUITSCX7t5YP+zlb/403arHRn6PkRQOg9JD6uuji5Tk3HkvpZiPrQDA=="
                length="1892226"
            />
        </item>
        <item>
            <title>Version 1.0</title>
            <pubDate>Sat, 01 Mar 2026 21:00:00 +0000</pubDate>
            <sparkle:version>1</sparkle:version>
            <sparkle:shortVersionString>1.0</sparkle:shortVersionString>
            <sparkle:minimumSystemVersion>26.0</sparkle:minimumSystemVersion>
            <description><![CDATA[
                <h2>Perspective Server 1.0</h2>
                <p>Initial release with Sparkle auto-updater, on-device AI inference, and session management.</p>
            ]]></description>
            <enclosure
                url="https://github.com/Techopolis/Perspective-Server/releases/download/v1.0/PerspectiveServer-1.0.zip"
                type="application/octet-stream"
                sparkle:edSignature="5RKmjU3r12/unjCqetgYxTO3MLEcoOZ7yfbPTNTXiGyE4HuIYhbNjpWCrIEM0PlNhTHZuiYt7Ax4rAku8vEBBQ=="
                length="1784209"
            />
        </item>
    </channel>
</rss>