All checks were successful
release / build-and-release (push) Successful in 32s
BackInfo paints a centered bitmap; when it is smaller than the screen the area around it shows HKCU\Control Panel\Colors\Background, which was black in profiles step 04 had not touched. Set the solid background (#223B47) in HKU\.DEFAULT and in every existing user profile (loading each hive as needed), on top of the Default hive and current user, so the border around the bitmap blends into the background. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
5 KiB
5 KiB
Changelog
All notable changes to xetup. Format based on Keep a Changelog. No diacritics anywhere (project rule).
Builds are continuous: every push to main produces a signed xetup.exe published as the
latest release. Version tags (e.g. v0.7) mark notable milestones.
[Unreleased]
Fixed
- BackInfo background color: use the COLORREF value
4668194for #223B47. BackInfo uses a COLORREF (0x00BBGGRR/ BGR), so the 0.7 value2243399(0x223B47) was read with red/blue swapped and rendered olive-brown (#473B22). Reverts the 0.7 change. - BackInfo black border in some profiles (04): BackInfo paints a centered bitmap; when it is
smaller than the screen, the surrounding desktop showed black in profiles whose
Control Panel\Colors\Backgroundwas not set. The solid desktop background color (#223B47) is now written to HKU.DEFAULT and to every existing user profile (loading each hive as needed), in addition to the Default hive and current user, so the area around the bitmap blends in.
[0.7] - 2026-06-02
Added
- Code signing in CI: the release workflow signs
xetup.exeon every push (and viaworkflow_dispatch) using Azure Trusted Signing (certificate "X9.cz s.r.o.") through jsign, plus an RFC3161 timestamp (timestamp.acs.microsoft.com). jsign is pinned by version + sha256. Trusted Signing certs are short-lived (~3 days); the timestamp keeps the signature valid past expiry. OnlyAZURE_CLIENT_SECRETis a Forgejo Actions secret. (853908b) workflow_dispatchtrigger for manual release runs. (cdad15a)- Keyboard layout: CZ primary + US secondary, applied to all profiles via
Set-WinUserLanguageList(current user) and thePreloadkey in the Default hive andHKU\.DEFAULT. (94b7786)
Fixed
- winget (02, 11): pass
--source wingetto every install. Fresh Win11 ISOs ship an App Installer with a stale pinned cert, so the msstore source fails with0x8a15005eand aborts the install; forcing the winget source bypasses it. (94b7786) - Network Discovery (10): enable by resource-string group
-Group "@FirewallAPI.dll,-32752"instead of-DisplayGroup "Network Discovery", which is localized and failed on Czech Windows. (94b7786) - Atera detection (02): verify via the
AteraAgentservice (Get-Service) with a path-check fallback incl.C:\ProgramData, since Atera no longer installs to a fixed location. (94b7786) - Windows Update log (12): format installed updates via
$_.Result/$_.Titleinstead of logging the raw objects (which printed "System.__ComObject"). (94b7786) - UCPD (02): the UCPD stop failure on Win11 24H2 (protected service) is logged WARN, not
ERROR; the system-wide HKCR write succeeds regardless. (
94b7786) - Atera under SYSTEM (02): install the MSI via a one-shot scheduled task running as
NT AUTHORITY\SYSTEM(msiexec /qn). Under SYSTEM the agent registers silently with no interactive MFA window. (451b9e2) - Taskbar File Explorer pin (04): pin Explorer via its AppUserModelID
(
DesktopApplicationID="Microsoft.Windows.Explorer") instead of a hand-made.lnk. The custom shortcut launched a second Explorer that did not group with the running window and could not be unpinned. (451b9e2) - Accent color in all profiles (04): write
AccentPalette(REG_BINARY, 8 shades from #223B47) alongsideAccentColor. Without it Win11 drops the custom accent on Start/taskbar and falls back to the default. The full theme (Custom mode: dark system + light apps; accent on Start/taskbar and title bars/borders) is written to the Default hive, the current user (HKCU) andHKU\.DEFAULTso all profiles match. (4d08d0c) - BackInfo background color: changed
BackgroundColorto 2243399 (later found wrong - BackInfo uses COLORREF/BGR; corrected in [Unreleased]). (4d08d0c)
CI / Infra
- deploy.json update step made non-fatal (cosmetic, runs after the release is published). (
8a7fc10) - Forgejo runner: bind-mount the docker socket into job containers so the deploy.json step's
docker execworks. (c8c8523,beceeb4) - docker-compose: mount
web/dataread-write so CI can refreshdeploy.json(rest of the web docroot stays read-only). (7becac7)
Docs
- Web (spec, descriptions.json, navod, landing) updated for all of the above.
SPEC.md+CLAUDE.mdsynced. Added thisCHANGELOG.md.
[0.6] - 2026-04-28
Added
- Step 03: disable hibernation and Smart App Control; reworked Edge configuration
(mandatory policies + initial_preferences). (
0cfe751)
Fixed
- Reliability and robustness pass: watchdog kills a stalled script after 30 min of silence;
reboot-loop protection caps each step at 5 restarts; atomic
state.jsonwrites (tmp+rename); email report retried 3x with a local HTML fallback; Default-hive unload retried; resume mode fixed to actually run pending steps. (d30767e)
Earlier history (pre-0.6): see the git log - initial Go launcher, embedded PowerShell steps, reboot-resume cycle, Forgejo CI build, and the static site at xetup.x9.cz.