v1.0.1
stableHighlights
- Automatic updates are now enabled — Maho checks update.mahobrowser.com for signed updates on the stable channel
- New chrome://maho-changelog surface that opens once after an update is installed
- Signed, length-pinned update envelopes with explicit signature-mismatch failure states
New Features
- Automatic update pipeline with offline-verifiable signed envelopes; rollout starts with a small canary percentage and widens gradually
- Built-in chrome://maho-changelog WebUI that opens once after an update is installed so you can see what changed
- Update feed hardening: appcast responses are signed and length-pinned, and mismatched signatures map to an explicit failure state