{ "version": "0.7.4", "notes": "### Changed\n- OAuth tokens are now stored in the OS keychain (Credential Manager on Windows, Secret Service on Linux) instead of a plaintext JSON file. Existing users are migrated transparently on the next sign-in refresh; the old file is zeroed and removed. A \"tokens stored in plaintext fallback\" banner appears in Settings if the keychain is unavailable (#66, #78, #79, #81)\n- Cached account info is now HMAC-signed with a keychain-stored key: writing `subscription_status` to `account.json` manually can no longer bypass the Premium gate (#80)\n- PIN hashing migrated from SHA-256 to Argon2id for brute-force resistance (CWE-916). Existing SHA-256 PINs are verified transparently and rehashed on next successful unlock; new PINs use Argon2id (#54)\n\n### Security\n- Closed CWE-312 (cleartext storage of OAuth tokens), CWE-345 (missing integrity check on the subscription cache), and CWE-916 (weak PIN hashing). Legacy `tokens.json` and legacy unsigned `account.json` caches are rejected by the gating path until the next token refresh re-establishes a keychain-anchored trust (#66, #54)", "pub_date": "2026-04-14T15:51:31Z", "platforms": { "linux-x86_64": { "signature": "dW50cnVzdGVkIGNvbW1lbnQ6IHNpZ25hdHVyZSBmcm9tIHRhdXJpIHNlY3JldCBrZXkKUlVUakFVTzBFb0RYZ2dyZ3ByRGlHOEVudXNUand2YlVTRDg0MmRHRmRRTHhhNFNOeXMwWS9iVWxvbXVPNFpjZi82eXFGV0ZpQXo0UnlqcjVGV3RXbVFncCszQ3RLdDE0Y2d3PQp0cnVzdGVkIGNvbW1lbnQ6IHRpbWVzdGFtcDoxNzc2MTgxMzI3CWZpbGU6U2ltcGwgUmVzdWx0YXRfMC43LjRfYW1kNjQuZGViClBveVhnY0pETTF0UU1oWGJ0ZTJScDR5dU9ERThhZFBsNDBpMXJXTCtqKzVSVldWZjRGa2RhMG5ZN3RZYzNrN0ZGTlZ4RytUYy9kSXhxVHphNjF2c0F3PT0K", "url": "https://git.lacompagniemaximus.com/maximus/Simpl-Resultat/releases/download/v0.7.4/Simpl Resultat_0.7.4_amd64.deb" }, "windows-x86_64": { "signature": "dW50cnVzdGVkIGNvbW1lbnQ6IHNpZ25hdHVyZSBmcm9tIHRhdXJpIHNlY3JldCBrZXkKUlVUakFVTzBFb0RYZ3REL20xbVlUcElOZXh5b0FKM1NGZDN0Ti96cVFZR2dIRXl2WEdGdmZZd21WaVdrVnlQTlROY1orSFVoUUdqVlZRK1JRWlBldUVGZ1NxTGczblY1ZmdrPQp0cnVzdGVkIGNvbW1lbnQ6IHRpbWVzdGFtcDoxNzc2MTgxODkwCWZpbGU6U2ltcGwgUmVzdWx0YXRfMC43LjRfeDY0LXNldHVwLmV4ZQpPQlkyb25LbXZjNm9xbWkySjFPNjlKdyt1d1dLZ2d6M3NLRmVUdkNDdUdML0RyKzlvSGZ6Y0R5bVkyMFZQcU1BU3JueWxYOWdVWmF2SVFROFhWYUJCUT09Cg==", "url": "https://git.lacompagniemaximus.com/maximus/Simpl-Resultat/releases/download/v0.7.4/Simpl Resultat_0.7.4_x64-setup.exe" } } }