# Paneflow v0.6.10

- Released: 2026-06-27T20:18:34Z
- URL: https://paneflow.dev/releases/v0.6.10
- GitHub: https://github.com/ArthurDEV44/paneflow/releases/tag/v0.6.10
- Previous release: v0.6.9

## Release notes

Highlights

Windows in-app updates now use a detached relay that survives the main PaneFlow process exit and reopens the app after the MSI transaction finishes.
Release publishing is now blocked by every real release validation gate: all Linux distro smokes, the Windows MSI smoke, and the Linux auto-update E2E.
The release workflow now validates the Windows MSI installer end to end before publishing: signed MSI integrity, silent install/uninstall, installed paneflow --version, and the --msi-relay path.
The auto-update E2E no longer waits for an already-published GitHub Release. It signs the NEW tarball inside the E2E job, so the test remains a true pre-publish release gate.

What changed
Windows updater

Spawned the copied MSI relay as a detached non-elevated process so it keeps running after PaneFlow exits.
Moved UAC elevation to the relay's msiexec invocation for Program Files installs, then waits for the elevated installer process to finish and captures its exit code.
Relaunches PaneFlow after msiexec completes, including success, user-cancel, and installer-failure paths, so users are not left with a closed app and no feedback.
Always removes the staged MSI after the relay attempts installation.
Added relay diagnostics for spawn, argument-parse failures, msiexec launch/wait status, and relaunch attempts.
Made relay argument parsing resilient when host launchers inject flags before --msi-relay.
Added regression coverage for shifted relay args, relay parse logging, quoted MSI paths, and relaunch-after-exit behavior.

Release validation

Added smoke-test-windows-msi on windows-2022.
The Windows smoke downloads the signed Windows MSI artifact, verifies its .sha256 sidecar, verifies Authenticode status, installs the MSI silently, checks C:\Program Files\PaneFlow\paneflow.exe --version, exercises --msi-relay on a copied relay binary, verifies relay logs, confirms the staged MSI copy is removed, then uninstalls.
Added the Windows MSI smoke, Debian smoke, openSUSE smoke, Arch smoke, and auto-update-e2e to Publish GitHub Release needs, so any failed smoke now prevents publication.
Changed auto-update-e2e to sign its NEW tarball before publish using the release minisign key. This keeps the updater test as a pre-publish gate without waiting on release assets that do not exist yet.
Removed the previous publish-ordering deadlock where auto-update E2E waited for a signature from a release that was itself waiting on the E2E gate.

Release metadata

Bumped the workspace version from 0.6.9 to 0.6.10.
Updated Cargo.lock workspace package versions.
Added the Debian changelog stanza for 0.6.10-1.

Upgrade notes

Windows users who previously saw PaneFlow close during update without coming back should install 0.6.10 from the MSI once.
After 0.6.10, future in-app MSI updates should close PaneFlow, run the installer through the relay, and relaunch the installed app.
If Windows still shows UAC, accept the prompt for paneflow-app; the relay waits for msiexec to finish before trying to relaunch.
Release v0.6.10 intentionally includes release-pipeline hardening. This makes future releases fail earlier and more visibly instead of publishing with a red smoke test.

Downloads

Windows x64: paneflow-0.6.10-x86_64-pc-windows-msvc.msi
macOS Apple Silicon: paneflow-0.6.10-aarch64-apple-darwin.dmg
Linux x86_64: AppImage, .deb, .rpm, and tar.gz
Linux aarch64: AppImage, .deb, .rpm, and tar.gz
Checksums and Minisign signatures are attached for release assets.

Validation

Local: cargo check --workspace
Local: cargo fmt --check
Local targeted: cargo test -p paneflow-app relay -- --nocapture
Workflow syntax: git diff --check -- .github/workflows/release.yml
Workflow syntax: YAML parse via Prettier
Release workflow: https://github.com/ArthurDEV44/paneflow/actions/runs/28300166219
Release gates: 4/4 build matrix jobs green
Release gates: Ubuntu, Fedora, Debian, openSUSE, Arch smoke tests green
Release gates: Windows MSI install + relay smoke green
Release gates: Linux x86_64 auto-update E2E green
Published release assets: 32

Commits

70d9fff fix(update): harden Windows MSI relay restart
09d2a39 ci(release): harden release smoke gates
fce0976 chore(release): bump version to v0.6.10
a73a33c ci(release): sign auto-update smoke before publish

Full changelog: v0.6.9...v0.6.10