• The main SQLite store migrates from schema 29 to 36 on first start: portable friendships, a private message's reference and per-mailbox cursor, replies, reactions on chat lines and on stored private messages, and stubs of read messages. Forward-only, as before: take a backup first (docs/operating.md, "Backups"). The registrar's database is unchanged.

• A new secret, messaging-requests.key beside [inbox] db ([messaging] request_secret), is made owner-only on first start wherever [messaging] and [inbox] are configured, and one that cannot be read refuses the start. Back it up with the other keys. Each address's count of requests sent today starts over once.

• [messaging] max_message_bytes is now at most 65505, and twice request_messages messages of that size must fit a page of the classic wire's Get Message Requests; a config past either is refused at start. The defaults are well inside both.

• Get User Info shows a user's login and address only to that user and to a session holding disconnect_users; everyone else, the bootstrap guest included, reads - in their place.

• A private message to a login now reaches every attached session of the account but the sender's, rather than one of them.

• To an account taking part in messaging, a guest's message by login is now a message request, or refused where the account takes none.

• On the ng wire, a stored private message is named by ref, and id

...

The first release.

• From this release on, the SQLite databases (the main store and a registrar's) migrate their schema forward on start and cannot be downgraded: an older hxd refuses a database a newer one has migrated, so going back means restoring the backup taken before the upgrade (docs/operating.md, "Backups").

Designed but not built yet:

• Vouching (docs/identity-vouch.md).
• File attachments on chat lines and private messages (docs/attachments.md).
• Importing mhxd's and Mobius's news.
• Secure rooms, and rooms across links.
• Bans placed from the config, and the ban list on the ng wire.
• A registrar's standing and probation, and its key backup.
• The delivered/read split for private messages: delivery to a classic client still marks a message read.
• Instant messaging on the classic wire (the extension's 800-block for period clients), and portable friendships (docs/proposals/portable-friends.md).
• Legacy text encodings other than Mac Roman, such as Shift-JIS or Latin-1.
• The real-client exit test for rooms (period 1.2, 1.5 and 1.9 clients) has not been run.

• Hotline 1.2 and 1.5 clients (and 1.9 where its behavior is known) on TCP :5500: login, the agreement, user list, nick and icon changes, Get User Info, keepalive, with mhxd's observable behavior.
• Public chat, /me, the chat subject, private chats and their invites, private messages, broadcast.

...

• No schema migration and no config change.
• On the ng wire, the msg reply to a message that went as an instant message carries im: true and the message's guid, the one it was sent with or the server's own, so a client names it by guid for replies and reactions rather than as a stored message. A client that ignores unknown fields sees no other change.

• A private message waiting for its recipient, retried by login under its guid once they were back, never reaching their attached session.

• A retry by login of a private message read and pruned since answered as an instant message.

Image: ghcr.io/mishan/hxd-ng:0.3.0

• Colored nicknames: Servers can deliver nickname colors to color-aware clients via the new HL_FIELD_USER_COLOR (0x0500) field on user-change broadcasts, and optionally honor colors clients set themselves (TranSetClientUserInfo, 304). New ColoredNicknames: block in config.yaml (and ColoredNicknames* plist keys): Delivery (off / auto / always), HonorClientColors, DefaultAdminColor, DefaultGuestColor. Per-account Color overrides the defaults. GUI: new Colored Nicknames settings section and a color row in the Account Editor.
• Auto-ban for repeat offenders: An IP that trips the per-IP rate limiter 10 times within 5 minutes is added to the persistent banlist and dropped at accept, before any read or TLS handshake. Controlled by the new AutoBanEnabled setting (default on), with a matching GUI checkbox; the Bans tab gains a Refresh button to show bans written by the running server.
• Chat history settings in the GUI: All nine ChatHistory* keys are now editable and round-trip through GUI saves (previously a GUI save silently dropped them), including a one-click Generate Key… for encryption at rest.

...

Downloads

• Lemoniscate-0.1.8.dmg  (3.6 MB)
• lemoniscate-linux-x86_64-0.1.8.zip  (118.7 KB)

This release cleans up saved logins and date formatting: bookmarks keep their password settings when they cross between Rust and the interface, reconnects retrieve saved credentials, and news timestamps follow your system’s locale and time zone.

Builds also move entirely onto GitHub-hosted runners. macOS, Windows, Linux, Android, and iOS / iPadOS packages are built in Actions without depending on a personal Mac mini or remote build machine. Downloads get a smaller async stack footprint, with additional regression coverage on Windows.

• GitHub-hosted builds for every platform — macOS universal, Windows x64, Linux x64 and ARM64, Android, and unsigned iOS / iPadOS packages are available below.
• Individual platform rebuilds — The Apple and Android workflow can build all three platforms together or retry just macOS, iOS, or Android.

• Dates that follow your system — Threaded news and file-info dates use your locale and time zone instead of a fixed US format.
• Saved credentials survive reconnects — Bookmark password flags now match the interface’s field names, and manual and automatic reconnects retrieve passwords from encrypted storage. Explicitly empty passwords remain valid.
• Lower download stack usage — The streaming copy buffer moves to the heap, reducing the size of the async download future. Windows regression tests cover multi-chunk transfers.

...

Downloads

• Hotline.Navigator_0.3.1_aarch64.AppImage  (85.1 MB)
• Hotline-Navigator-0.3.1-ios-unsigned.ipa.zip  (9.6 MB)
• Hotline.Navigator-0.3.1-universal.dmg  (22.8 MB)
• Hotline.Navigator_0.3.1_amd64.AppImage  (86.2 MB)
• Hotline.Navigator_0.3.1_amd64.deb  (13.2 MB)
• Hotline.Navigator_0.3.1_arm64.deb  (13.8 MB)
• hotline-navigator-unsigned.ipa  (9.7 MB)
• Hotline.Navigator_0.3.1_universal.dmg  (22.8 MB)
• Hotline.Navigator_0.3.1_x64-setup.exe  (7.8 MB)
• Hotline.Navigator_0.3.1.apk  (100.4 MB)

• News remembers Board or Threaded per server across reconnects and bookmark autoconnects.
• The Connection menu no longer goes inactive after switching the news view.

Downloads

• Heidrun-1.7.1-234.dmg  (8.4 MB)

• News auto-download: threaded servers load board and threaded news on first open and show the one with content (threaded when both have content); progress and Cancel in the Task Manager.
• Settings → News: turn auto-download off and pick the default news view (Automatic, Threaded or Board).

• Softer sound effects: the classic sounds are denoised, filtered, faded and level-matched.
• ⌥⌘W closes all other windows and tabs (File → Close Others), also ones showing the server agreement.
• Disconnect closes the window while other connections stay open; only the last one returns to the connection form.

Downloads

• Heidrun-1.7.0-232.dmg  (8.4 MB)

• Chat
• /exec runs the command on your computer, rather than sending the line to everyone in the chat; start a line with // to send it to the server as typed, as in //exec. A server's own commands are recognized only by their full names
• Accessibility
• Fixed GtkHx crashing as soon as a screen reader read a chat view
• A chat picture is read as its description once, without "image" said again after it
• The dock's corner menu buttons are each named for their pane, and a divider no longer reads as two different numbers
• On a first run, Settings opens over the main window, rather than as a window of its own that could open behind it
• The section headings in Settings' sidebar are easier to read in the light style

Downloads

• GtkHx-v1.6.2-aarch64.flatpak  (9.0 MB)
• GtkHx-v1.6.2-macos-arm64.zip  (33.2 MB)
• GtkHx-v1.6.2-macos-x86_64.zip  (35.3 MB)
• GtkHx-v1.6.2-win64.zip  (70.8 MB)
• GtkHx-v1.6.2-x86_64.flatpak  (10.3 MB)

• Transfers
• A folder download can be paused and resumed: Start skips the files it already has, picks up the one it stopped in, and fetches the rest
• A file's upload, up to 4 GiB, can be paused and resumed: Start sends the rest of the file from what the server already has, or, when the server can't resume it, the whole file again; an upload whose file changed while it was paused, or that the server refuses, stays paused, saying why
• A folder's upload can be paused and resumed: Start asks the server to take up the folder it holds, and sends each file from what the server already has of it, skipping any it has whole; an upload with a file that changed while it was paused stays paused, saying so
• Fixed folder uploads to Janus stalling after the first file, and folder uploads to Janus and hlservd ending early, leaving as many items unsent as the folder has subfolders
• Connections
• Reconnect, on the banner after a lost connection, reconnects that tab to the server it lost, however it connected (the Connect dialog, a bookmark, a link, the tracker, /server or --server), rather than to whichever server some other tab connected to last
• Post News posts to the server it was opened for, even when another connection opens and takes the focus while you write; it closes with its tab, and if that connection drops first it keeps what you wrote rather than closing

...

Downloads

• GtkHx-v1.6.1-aarch64.flatpak  (9.0 MB)
• GtkHx-v1.6.1-macos-arm64.zip  (33.1 MB)
• GtkHx-v1.6.1-macos-x86_64.zip  (35.3 MB)
• GtkHx-v1.6.1-win64.zip  (70.8 MB)
• GtkHx-v1.6.1-x86_64.flatpak  (10.2 MB)

• /news clear flat|threaded|all chat command wipes news on the live server (admin, deleteNewsBundles); audited as news_reset.

• Plain-news posts end with a blank line and an underscore divider instead of dashes.
• heidrun-admin news reset notes that a running server overwrites it.