• v2.0.0 406a399f9c

    DinoX v2.0.0
    All checks were successful
    Build / Validate Manual Selection (push) Has been skipped
    Build / Mirror AppImage Runtimes (push) Has been skipped
    Build / Core Build & Test (push) Successful in 19m23s
    Build / Build AppImage (push) Successful in 17m42s
    Build / Build Flatpak (push) Successful in 24m57s
    Stable

    dinoxim released this 2026-06-04 17:48:24 +02:00 | 112 commits to master since this release

    Milestone: DinoX 2.0.0 Relaunch

    Tracking issue: DinoX 2.0.0 public relaunch follow-up

    DinoX v2.0.0

    Modern XMPP client with extended features.

    What's New

    Added

    • Botmother automation: Added the Botmother management UI, local REST API, token/scopes model, webhook controls, Telegram/AI bridge controls, dedicated bot MUC behavior modes, and validation coverage for the API boundary.
    • Encrypted file transfer pipeline: Added hardened encrypted HTTP and Jingle file-transfer paths with verified plaintext release, sender selection, progress phases, cancellation guards, retry coverage, and private MUC transfer gates.
    • OMEMO and Jingle coverage: Added OMEMO2/JET encrypted transport handling, receive-store coverage, private MUC fanout smokes, and packaged Windows/Linux runtime gates for encrypted Jingle S5B transfers.
    • OpenPGP workflow: Added stronger XEP-0027, XEP-0373, and XEP-0374 key handling, OpenPGP file-transfer verification, private MUC recipient modeling, and live GPG helper test coverage.
    • Forgejo packaging: Added Forgejo release publishing, checksummed release assets, manual package build toggles, Linux and Flatpak package-builder images, AppImage runtime mirroring, and static package-runtime matrix checks.
    • Windows runtime: Added packaged Windows protocol-handler support, improved OpenPGP subprocess handling, font and pixbuf loader packaging fixes, and Windows runtime smoke gates for file transfer and OMEMO paths.

    Changed

    • Linux System Tray: Replaced the external libdbusmenu dependency with DinoX's own minimal DBusMenu exporter for the StatusNotifierItem menu. The tray status menu and quit action remain available on SNI-compatible desktops.
    • Packaging defaults: Deb, AppImage, and Flatpak builds now use the Forgejo package-builder baseline with bundled runtime dependencies and checksum validation.
    • MUC UI: Improved MUC details, member and affiliation display, member search, hats support, room settings, and chat-switch responsiveness.

    Security

    • File release hardening: Plaintext file access is now gated on verified completion so incomplete, cancelled, tampered, or failed transfers do not expose partially written plaintext.
    • Proxy isolation: Jingle S5B direct and proxy candidates now respect account proxy/Tor policy gates, including no-direct transfer scenarios.
    • Botmother API hardening: Tightened Botmother API field validation, token handling, scope enforcement, webhook URL sanitization, encrypted secret storage, and loopback/network-mode handling.

    Fixed

    • MUC Presence: Rejoining a MUC now preserves the globally selected presence state instead of always appearing as online until the status is changed again.
    • MUC Rejoin: Leaving and closing a MUC no longer leaves stale state that prevents joining the room again.
    • Contacts: Subscription requests are now routed through the correct accept/request paths instead of delaying the contact acceptance prompt until later messages.
    • File sharing: Stateless file-sharing sources that arrive before the referenced message are cached and replayed instead of being ignored as unknown.
    • Package builds: Fixed builder-image verification, dependency cache compatibility, WebRTC audio-processing packaging, AppImage diagnostics, Flatpak cache reuse, and Debian/AppImage bundled media runtime checks.
    • AppImage OpenPGP: Isolated external GnuPG/GPGConf subprocesses from AppImage libraries to avoid host-library conflicts and repeated secure-memory initialization noise.
    • Botmother startup: Loading Botmother manager/create UI state no longer restarts the local Botmother API when global or account-level Botmother is disabled.
    • XMPP noise: Reduced misleading ping and PubSub warnings for cancelled or detached streams.
    • Downloads: Transient automatic media download failures no longer block a later manual retry.
    • Windows UI/runtime: Fixed packaged font startup, pixbuf loader scanning, OpenPGP shutdown packaging, and several Windows-specific UI/build warnings.

    Installation

    Debian/Ubuntu

    sha256sum -c dinox_2.0.0_*.deb.sha256
    sudo apt install ./dinox_2.0.0_*.deb
    

    AppImage

    sha256sum -c DinoX-2.0.0-*.AppImage.sha256
    chmod +x DinoX-*.AppImage
    ./DinoX-*.AppImage
    

    Flatpak

    flatpak install flathub org.gnome.Platform//49
    sha256sum -c dinox-2.0.0-x86_64.flatpak.sha256
    flatpak install --user ./dinox-2.0.0-x86_64.flatpak
    flatpak run im.dinox.dinox
    

    Build from Source

    tar xf dinox-2.0.0.tar.gz
    cd dinox-2.0.0
    ./scripts/ci-build-deps.sh
    meson setup build -Dplugin-mqtt=enabled -Dplugin-rtp=enabled -Dlocation-sharing=enabled -Dplugin-rtp-vaapi=enabled
    ./scripts/build.sh --strict
    ./build/main/dinox
    
    Downloads