maximus/Simpl-Resultat
1
0
Fork 0
Code Issues 19 Pull requests 8 Projects Releases 34 Packages Wiki Activity Actions

34 releases 63 tags

RSS feed
  • v0.16.0 56fc612598

    Simpl'Résultat v0.16.0
    All checks were successful
    Release / build-and-release (push) Successful in 21m50s
    Details
    Stable

    Ghost released this 2026-10-03 13:58:06 +00:00 | 140 commits to main since this release

    Added

    • Buy the Base edition from every screen that requires it: "Get Base" is now active on Budget, Adjustments, the advanced reports and extra profiles, and opens the product page in the app's language (#346).
    • In the free edition, the Updates card offers "Get Base", "I already have a key" and "Download the latest version", and the error page offers "Get Base" and "Download the latest version". The download link opens the product page, which serves the latest installers; no update check runs (#346).
    • License check at startup: when a license key is stored, the app now asks the license server whether the key was revoked, at most once every 24 hours. This is the first request the app sends on its own. It carries the product and the key, nothing else; nothing is sent without a stored key; if the server cannot be reached, nothing changes; and each check is written to the logs (Settings → System). A revoked key keeps being checked as long as it stays stored, so that a correction made on the license server is picked up at the next start (#365).

    Changed

    • The Maximus Account card no longer says an account is required for Premium: the account lets you find your licenses on lacompagniemaximus.com and identifies you in your feedback, and editions come from the license key (#346).
    • The Balance locked screen (Premium) now says Premium isn't sold online yet, instead of "Online purchase coming soon" (#346).
    • In the free edition, the Updates card says automatic updates are included in the Base edition (#346).
    • A license key revoked by the license server, for instance after a refund, now puts the app back in the Free edition, automatic updates included, and the app stays there from one session to the next. The License card, the locked screens and the Updates card say that the key was revoked. Your data is kept, and another valid key gives its edition back. A revoked key used to keep its edition (#347, #365).
    • The machine list shows how many machines are activated out of the number your key allows (#347).
    • A license key valid for more than 50 years shows "No expiry date" instead of a date (#347).
    • The market price authentication error now tells you to activate this machine in Settings → Users (#347).

    Fixed

    • Machine activation, deactivation and the machine list now call the license server's current /v1 endpoints and name the product explicitly, instead of going through a redirect on every call (#270).
    • A refusal from the license server is now explained in your language: revoked, expired or unknown key, machine limit reached, too many attempts (with the wait time), server unreachable. It used to show a generic "Activation failed" in English, and a revoked key showed up as "No machines activated" (#270).
    • When the machine limit is reached, the machine list opens by itself so you can deactivate one, and the message stays visible while it loads. Deactivating a machine no longer queries the server a second time, and deactivating a machine the server already considers free now counts as done (#270).
    • The "Buy" button of the License card now opens the product page directly, in the app's language, instead of an old address that only works through a redirect on the website (#270).
    • A valid license key now keeps its edition whatever the machine activation: an activation that has expired (after two years), or one carried over from another computer when you restore your data after a reinstall or a move, no longer drops the app to the Free edition. The License card shows the machine as not activated, and "Activate" brings back the market prices (#347, #360).
    • A refused license key is now explained in your language (wrong prefix, a key that cannot be read or verified, most often because it was not copied in full, an expired key, an edition this version does not know) instead of a raw English message, and a license file that cannot be read is named too (#347).
    • Dates on the License card follow the app's language instead of the system's (#347).
    • Entering a different license key now clears the previous key's machine activation, so the License card offers "Activate" for the new key. It used to show the machine as activated while market prices were refused for the previous license, for instance after a new purchase following a refund, or when moving from Base to Premium. Entering a key and activating a machine can no longer overlap, so they cannot cross either (#347).
    • Market prices refused because this machine's activation belongs to a revoked license now say so, instead of "This feature requires a premium subscription" (#365).

    Security

    • Updated the Rust dependency rustls (0.23.36 → 0.23.45, which requires rustls-webpki 0.103.13 → 0.103.15 alongside it), clearing RUSTSEC-2026-0285. TLS 1.3 handshake messages were accepted at the wrong encryption level when they followed a key-changing message inside the same record — a plaintext EncryptedExtensions packed together with the ServerHello, for instance — where RFC 8446 requires closing the connection instead. Medium severity, confidentiality only: the handshake transcript stays authenticated, so this cannot be used to alter or complete a handshake from a network position; the effect is that a peer can send in the clear what should have been encrypted without rustls refusing the connection. rustls is the TLS layer of the automatic update check and download, reached through tauri-plugin-updater — the application's own licence, authentication, market-price and feedback calls use a different TLS backend and were never on this path. Nothing in the application's own code changes — only the lockfile moves, and Cargo.toml is untouched. The one behaviour that does change is the fix itself: a handshake that breaks RFC 8446 §5.1 is now closed instead of accepted (#348).
    • Activating a machine no longer sends the operating system's machine identifier to the license server. The app now sends an identifier derived from it and specific to Simpl'Résultat, from which the system identifier cannot be recovered. A machine activated with an earlier version stays activated and is still marked "This machine" in the list; that earlier activation keeps the identifier it was made with until you deactivate the machine and activate it again. This change does not erase the identifiers the server has already received (#350).

    Installation

    Windows : Téléchargez le fichier .exe ci-dessous.
    Linux : Téléchargez le fichier .deb ou .AppImage ci-dessous.

    QA — cycle de mise à jour automatique

    Dû pour cette release : rustls 0.23.45 (#348) est sur le chemin TLS de l'updater. Procédure : docs/qa-update-cycle.md.

    • Linux (.deb) : v0.15.0 → v0.16.0, réussi (Max, 2026-10-03). Une invite d'authentification est apparue et Max s'est authentifié, comme aux mises à jour précédentes. Son type (polkit, zenity ou kdialog) n'est pas consigné.
    • Windows (NSIS) : fait (Michel), complétion confirmée par Max le 2026-10-10. Versions de départ et invite d'installation non consignées.
    • RPM : non testé, chemin cassé connu (#320).
    Downloads