v0.6.8

Highlights

• Windows MSI self-update now uses a native Paneflow relay instead of a hidden PowerShell handoff.
• Machine-wide Windows installs under Program Files now request UAC before Paneflow exits, so canceling elevation leaves the app open instead of closing into a dead update.
• The installer handoff now leaves useful diagnostics in %TEMP%, making failed Windows updates debuggable instead of silent.

Important Windows Upgrade Note

If you are already on v0.6.6 or v0.6.7 and the in-app updater closes Paneflow without installing the new version, install v0.6.8 manually once:

1. Quit Paneflow.
2. Download paneflow-0.6.8-x86_64-pc-windows-msvc.msi from this release.
3. Run the MSI and accept UAC if Windows asks.
4. Reopen Paneflow.

That one manual install can be necessary because the broken update handoff lives in the old binary that tries to install this release. Once v0.6.8 is installed, future MSI updates use the new native relay.

What Changed

Windows Self-Update

• Replaced the hidden PowerShell MSI relay with a copied native helper staged as paneflow-msi-relay-<pid>.exe in %TEMP%.
• Added a hidden --msi-relay entrypoint that runs before GPUI, single-instance handling, and Job Object setup, so the helper behaves like an installer relay rather than a second desktop app instance.
• For machine-wide installs, Paneflow now launches the relay through runas while the app is still open. If UAC is canceled or elevation fails, the update stops cleanly and Paneflow stays open.
• The relay waits for the original Paneflow PID to exit, gives Windows a short lock-release window, runs msiexec, and relaunches Paneflow after a successful install.
• Relaunch prefers Explorer when possible so an elevated installer relay does not reopen the desktop app elevated.
• Relay breadcrumbs are written to %TEMP%\paneflow-msi-relay-<pid>.log; the verbose Windows Installer log remains %TEMP%\paneflow-msi-<pid>.log.

Installer Robustness

• msiexec.exe resolution now prefers %SystemRoot%\System32\msiexec.exe, with PATH fallback.
• Windows command-line quoting for the elevated relay path is covered by tests, including paths with spaces and embedded quotes.
• Program Files elevation detection is covered by tests.
• Per-user installs under LocalAppData continue to use the non-elevated breakaway relay path.

Packaging

• Bumped workspace and lockfile package versions to 0.6.8.
• Added the Debian changelog entry for 0.6.8-1.

Downloads

• Windows x64: paneflow-0.6.8-x86_64-pc-windows-msvc.msi
• macOS Apple Silicon: paneflow-0.6.8-aarch64-apple-darwin.dmg
• Linux x86_64: AppImage, .deb, .rpm, and tar.gz
• Linux aarch64: AppImage, .deb, .rpm, and tar.gz
• Checksums and minisign signatures are attached for release assets.

Validation

• Local: cargo check --workspace
• Local: cargo fmt --check
• Local: cargo clippy --workspace -- -D warnings
• Local: cargo test --workspace
• Release workflow: https://github.com/ArthurDEV44/paneflow/actions/runs/28290886587

Commits

• a27e056 fix(update): replace Windows MSI relay with native helper
• 7954b7b chore(release): bump version to v0.6.8

Full changelog: v0.6.7...v0.6.8