Skip to content

v1.10.2 - Passy Cloud - Security Hotfix - #212

Merged
GleammerRay merged 20 commits into
mainfrom
dev
Aug 2, 2026
Merged

v1.10.2 - Passy Cloud - Security Hotfix#212
GleammerRay merged 20 commits into
mainfrom
dev

Conversation

@GleammerRay

@GleammerRay GleammerRay commented Jul 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Collaborator

Fixes:

  • CWE-295 addressed:
    • Affected users: Passy Cloud users (QR sync users not affected).
    • Compromised data: encrypted data.
    • Issue: MITM attacks were possible due to disabled TLS certificate validation, however no decrypted data is currently transmitted to/from Passy Cloud servers, everything is decrypted and processed offline on end user devices. New Passy accounts use dargon2 key derivation by default, so risk of decryption by an attacker is moderately low.
    • Solution: TLS certificate validation enabled.
  • PDF file UI fixed.
  • Unknown file type UI now displays file size and a small hex preview instead of an error.

Localizations:

Submission process:

  • Windows.
    • Program launches.
    • Program loads.
    • Cloud sync works.
  • Snap Store.
    • Program launches.
    • Program loads.
    • Program loads with existing accounts.
    • Program loads while no accounts exist.
    • Synchronization completes successfully.
    • Account password change completes successfully.
    • Browser extension link works.
    • Passy CLI launches.
    • Passy synchronization server is in normal working order.
    • Cloud sync works.
    • Account export completes successfully.
  • FlatHub.
    • Program launches.
    • Program loads.
    • Passy CLI launches.
  • AppImageHub.
  • GitHub.
    • Update website versions and links.
  • AUR.
    • Upgrade PKGBUILD.

dependabot Bot and others added 20 commits February 16, 2026 14:19
@dependabot @GleammerRay
Bump credit_card_type_detector from 2.0.0 to 3.0.0
292e6e6 
Bumps [credit_card_type_detector](https://github.com/cholojuanito/credit_card_type_detector) from 2.0.0 to 3.0.0.
- [Release notes](https://github.com/cholojuanito/credit_card_type_detector/releases)
- [Changelog](https://github.com/cholojuanito/credit_card_type_detector/blob/master/CHANGELOG.md)
- [Commits](cholojuanito/credit_card_type_detector@v2.0.0...v3.0.0)

---
updated-dependencies:
- dependency-name: credit_card_type_detector
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@GleammerRay
Update download_releases.sh
d431fd2
@GleammerRay
Merge remote-tracking branch 'origin/main' into dev
1b67913
@dependabot
Bump window_manager from 0.3.9 to 0.5.1
3043758 
Bumps [window_manager](https://github.com/leanflutter/window_manager) from 0.3.9 to 0.5.1.
- [Release notes](https://github.com/leanflutter/window_manager/releases)
- [Commits](https://github.com/leanflutter/window_manager/commits)

---
updated-dependencies:
- dependency-name: window_manager
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@GleammerRay
Merge pull request #201 from GlitterWare/dependabot/pub/dev/window_ma…
1fb2dcb 
…nager-0.5.1

Bump window_manager from 0.3.9 to 0.5.1
@monta-gh
Add Japanese (ja) localization
357b5d3
@GleammerRay
Merge pull request #203 from monta-gh/feature/ja-localization
55183e1 
Add Japanese (ja) localization
@dependabot
Bump docker/setup-qemu-action from 4.0.0 to 4.1.0
4b8e2f3 
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@v4.0.0...v4.1.0)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@GleammerRay
Merge pull request #205 from GlitterWare/dependabot/github_actions/de…
50d3264 
…v/docker/setup-qemu-action-4.1.0

Bump docker/setup-qemu-action from 4.0.0 to 4.1.0
@dependabot
Bump actions/checkout from 6 to 7
682f039 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@GleammerRay
Merge pull request #209 from GlitterWare/dependabot/github_actions/de…
631bc55 
…v/actions/checkout-7

Bump actions/checkout from 6 to 7
@dependabot
Bump docker/setup-qemu-action from 4.1.0 to 4.2.0
052de1d 
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](docker/setup-qemu-action@v4.1.0...v4.2.0)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@GleammerRay
Merge pull request #211 from GlitterWare/dependabot/github_actions/de…
a2924ad 
…v/docker/setup-qemu-action-4.2.0

Bump docker/setup-qemu-action from 4.1.0 to 4.2.0
@GleammerRay
Flutter generated build files refreshed
ce83030
@GleammerRay
Address #210
3d48df7
@GleammerRay
Merge pull request #177 from GlitterWare/dependabot/pub/dev/credit_ca…
6f6675f 
…rd_type_detector-3.0.0

Bump credit_card_type_detector from 2.0.0 to 3.0.0
@GleammerRay
Address #206
e330ab3
@GleammerRay
Update build-all-ci.yml
b054091
@GleammerRay
Update build-all-ci.yml
d48abd4
@GleammerRay
Version changed: v1.10.2
e4e8fc8
@GleammerRay
GleammerRay merged commit 82fe9fa into main Aug 2, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@GleammerRay @monta-gh