• v1.0.0-Beta.03 c728741344

    v1.0.0-Beta.03
    All checks were successful
    CI / check (push) Successful in 1m15s
    CI / tests (push) Successful in 1m30s
    Release / release (push) Successful in 1m44s
    Pre-release

    k4wit0 released this 2026-09-09 01:07:33 +02:00 | 2 commits to main since this release

    Added

    • The installer can undo itself: --uninstall removes it and keeps the
      reports, --uninstall --purge erases them too after you type DELETE.
    • A configuration file at /etc/lasthelp/lasthelp.env, written once on a fresh
      install and never overwritten afterwards — an upgrade keeps the port, the
      proxy setting and anything else you edited by hand.
    • The service unit ships with the release and is listed in the signed
      SHA256SUMS, so the sandbox the service runs inside is verified like the
      binary rather than being printed by whatever copy of the installer you ran.
      It carries the full set of systemd restrictions the rest of the house uses.

    Changed

    • The installer is POSIX sh rather than bash, so the documented
      curl … | sudo sh runs under dash on Debian and Ubuntu and under BusyBox on
      Alpine, not only where /bin/sh happens to be bash. Install with sudo sh;
      the beta channel is now LASTHELP_CHANNEL=beta.
    • The binary lives at /opt/lasthelp/bin/lasthelp, owned by the service
      account, which is what lets the built-in updater replace it.

    Fixed

    • The installer refuses a port that something else is already listening on,
      instead of installing a service that cannot start.
    Downloads
  • v1.0.0-Beta.02 95ff094dbe

    v1.0.0-Beta.02
    All checks were successful
    CI / check (push) Successful in 1m15s
    CI / tests (push) Successful in 1m30s
    Release / release (push) Successful in 1m45s
    Pre-release

    k4wit0 released this 2026-09-09 00:28:57 +02:00 | 6 commits to main since this release

    Added

    • A content security policy on every response, with no unsafe-inline in it:
      scripts and styles load from this server or not at all. The interface keeps
      the handful of values only the browser knows — an accent colour, a tooltip
      position — through the CSSOM rather than through style attributes.
    • HSTS over TLS, and nothing private in a search index: the panel, the sign-in
      page and any link carrying a follow token say so in their own headers.
    • The list of security controls is a test rather than a document: each control
      names the test that keeps it true, and deleting one fails with the control's
      name in the message.
    • A public side worth arriving at: the landing page, the boards, the roadmap,
      the report pages and every form, with a mark of its own and a sign-in page to
      match.
    • An overview that says more than how many: the last thirty days as a chart that
      breaks a day down on hover, and cards that open the listing behind them.
    • A listing of all the work, showing each person what their roles allow —
      waiting, open and closed — with the triage decision on the line of the state
      it changes.

    Changed

    • The dashboard is one screen for the whole team rather than an arrangement each
      account keeps for itself.
    • A report waiting for review no longer shows as open, and the state it does
      show is called what it is.
    • Signing out says so, in red, and the panel's own vocabulary and highlight
      follow the rest of the house.
    • Releases are built for what the installer can install: Linux on 64-bit Intel
      and ARM. The list is now checked against the installer during the build.
    • The new screens are translated into all twenty languages.

    Fixed

    • The page shown after sending a report was a dead end: it now leads back to the
      board and to the report itself, from opposite ends of the row.
    • A report opened from the panel keeps the panel around it, so there is a way
      out of it for a signed-in member of the team.
    • The moderation queue could not be decided from, and the decision now sits in a
      card of its own rather than among the tools below it.
    • Signing in reads the field the form actually has, and finishing the setup
      wizard accepts the logo it asked for.
    • Pictures are made to fit before they are stored, and every refusal reaches the
      page in words a person can read.
    Downloads
  • v1.0.0-Beta.01 0394a8b3f1

    v1.0.0-Beta.01
    All checks were successful
    CI / check (push) Successful in 1m15s
    CI / tests (push) Successful in 1m27s
    Release / release (push) Successful in 1m28s
    Pre-release

    k4wit0 released this 2026-09-08 08:36:00 +02:00 | 39 commits to main since this release

    Added

    • Public boards where anybody can report a bug or suggest an idea without an
      account, follow it with a secret link, and vote on ideas.
    • A moderation queue: nothing reaches a public page without a person approving
      it.
    • Similar-item hints while you type a title, and full-text search, both from one
      local index.
    • A public roadmap fed by what actually happens rather than maintained by hand.
    • A report page that stands on its own: the board it belongs to and the way back
      to it, its state, the vote, the thread, and the reporter's link to their own
      submission.
    • Comment threads, held for a person to read and published from the same queue
      as the reports.
    • A bug is asked which version and how to see it happen. Both travel with it:
      onto the public page, into the export and into the forge issue.
    • A bridge to GitHub, GitLab, Gitea and Forgejo, hosted anywhere including a
      private network: turn an item into an issue or attach one that already exists,
      and the item follows when that issue closes or reopens.
    • Notifications for the team over ntfy, Gotify, a generic webhook or mail,
      configured per board; an Atom feed and optional mail for whoever reported
      something.
    • Seven layers between a public form and the moderation queue, with every
      refusal counted by the layer that made it.
    • Accounts and roles: administrator of the server, owner of an organisation and
      its credentials, collaborator of one repository.
    • An administration panel: a dashboard of cards each account arranges and hides
      for itself, the organisations and repositories, the people and what they may
      do, and the settings of the installation.
    • Backups in one file, taken as a consistent snapshot rather than copied out
      from under a running server. Restoring checks the file before replacing
      anything and keeps the database it replaced.
    • The name, the mark and the accent colour this installation wears, and a theme
      and a language each visitor chooses for themselves.
    • Update checks against signed releases, on the stable channel or the beta one.
    • Twenty languages including three that read right to left.
    • Reproducible builds and signed checksums.
    Downloads