This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+2 more
Summary
AI summaryUpdates New Features, anti-suspension, and Username across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds Safe Mode toggle for sequential downloads with jitter and Retry-After handling. Adds Safe Mode toggle for sequential downloads with jitter and Retry-After handling. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
Adds "Copy artist ID" to inline viewer and gallery card context menus. Adds "Copy artist ID" to inline viewer and gallery card context menus. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
Adds Linux sign‑in via Playwright Chromium, removing WPE WebKit dependency. Adds Linux sign‑in via Playwright Chromium, removing WPE WebKit dependency. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Feature | Low |
Pins Playwright Chromium cache to prevent silent re‑downloads on upgrades. Pins Playwright Chromium cache to prevent silent re‑downloads on upgrades. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Fixes Linux Chromium permission denied by chmod +x the embedded binary before launch. Fixes Linux Chromium permission denied by chmod +x the embedded binary before launch. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Fixes Linux Chromium UI threading error causing InvalidOperationException. Fixes Linux Chromium UI threading error causing InvalidOperationException. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Fixes incomplete followed‑artists list by adding required URL params and fallback pagination. Fixes incomplete followed‑artists list by adding required URL params and fallback pagination. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Fixes Hoshi sidebar prompt bubble disappearing during AI response streaming. Fixes Hoshi sidebar prompt bubble disappearing during AI response streaming. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Fixes Hoshi sidebar "I don't have the ability to see the image" by preserving AI image bytes across card switches. Fixes Hoshi sidebar "I don't have the ability to see the image" by preserving AI image bytes across card switches. Source: llm_adapter@2026-05-29 Confidence: high |
— |
| Bugfix | Medium |
Fixes inline viewer chat bubble race by marshalling assistant streaming to UI thread. Fixes inline viewer chat bubble race by marshalling assistant streaming to UI thread. Source: llm_adapter@2026-05-29 Confidence: high |
— |
Full changelog
## Pikura 1.7.0
Safer downloads with a new Safe Mode toggle, reliable Linux sign-in via Playwright Chromium, Hoshi sidebar fixes, and a fix for incomplete followed-artists lists.
New Features
- Safe Mode (anti-suspension) — New toggle in Settings → Downloads → Download Behavior, default OFF. When enabled, downloads run sequentially with 2–4 s jittered gaps between artworks, 300–800 ms between pages of multi-page works, 2–4 s between targets in multi-target batch jobs, and honor
Retry-Afterheaders with exponential backoff on HTTP 429/503 — so Pikura no longer trips Pixiv's "unauthorized access attempts" suspensions on long batch jobs. - Copy artist ID anywhere — Added "Copy artist ID" to the inline viewer image context menu and to every gallery card context menu (grid + list, natural + fixed). The artist name in the inline viewer is now also a single-click copy target. Mirrors to both the OS clipboard and the in-app artist-ID queue.
- Linux sign-in via Playwright Chromium — Linux login no longer relies on WPE WebKit / libwebkit2gtk and no longer asks users to paste their PHPSESSID. A real Chromium window opens, the user signs in normally, and the session cookie is captured automatically. First-run downloads ~150 MB of bundled Chromium with a clear progress dialog; subsequent sign-ins are instant. Works on Ubuntu, Debian, Fedora, Arch, openSUSE, and other distros.
- Pinned Chromium cache — Playwright's Chromium is installed into a Pikura-owned cache directory so future upgrades don't silently re-download the browser when the existing install is still usable.
Improvements
- Inline viewer status feedback — Copy actions now show confirmation in the status bar (e.g. "Copied artist ID 12345 (Username)").
- Manual PHPSESSID dialog — Reworded as an emergency fallback with an explanation of why it's appearing; shown only if the Playwright Chromium install fails. Most users will never see it again.
- Windows — Control Panel — Pikura now shows its icon in Programs and Features (previously a generic placeholder). The version is also displayed without the leading "v". Upgrading from an old "Pixora" install? The new installer detects and offers to remove the old entry automatically.
- Windows installer — old Pixora cleanup — The installer scans the registry for any existing "Pixora" uninstall entry and offers to silently remove it before installing Pikura, so users don't end up with two entries in Programs and Features.
Fixes
- Linux — Chromium permission denied on launch — Fixed: .NET's single-file extractor unpacks embedded binaries without the executable bit set on Linux. Pikura now runs
chmod +xon its embedded Playwrightnodebinary before every login attempt, preventing theEACCES (13)error that caused the Chromium window to never open and fall back to the manual cookie dialog. - Linux — Chromium login dialog threading — Fixed: the Chromium install progress dialog and fallback manual-cookie dialog were being constructed on a background thread, causing a cross-thread
InvalidOperationException. All Avalonia window creation is now correctly marshalled to the UI thread. - Followed artists — incomplete list (#18) — Fixed: only 48 of N followed artists loaded. Root causes: (a) required Pixiv URL params (
tag=,acceptingRequests=0,lang=) were missing, causing Pixiv to ignoreoffsetand return the first page repeatedly; (b) the loader stopped paginating whentotalcame back as 0 — sequential discovery is now used as a fallback; (c) the deduplicationseenset was seeded without holdingseenLock, creating a race condition where parallel page tasks could insert duplicate artists; (d)GalleryViewModelwas never receiving a realILogger— it inheritedNullLogger.InstancefromViewModelBase, silently swallowing all[FollowedArtists]log lines; fixed by injectingILogger<GalleryViewModel>via DI. Verbose[FollowedArtists]diagnostic lines are now confirmed working. - Hoshi sidebar — prompt bubble disappearing mid-response — Fixed: clicking Describe/Tags/R-18 showed the prompt briefly, then it vanished as the AI streamed its answer. The
SessionsChangedevent used by the account-switch handler was being raised by routine session create/delete/duplicate operations and wiping the active chat. It now fires only on actual account swaps. - Hoshi sidebar — "I don't have the ability to see the image" — Fixed: Pikura wiped the AI's image bytes on every card switch and only repopulated them after the full-resolution image finished downloading. The quick-action buttons now have an instant thumbnail-byte seed plus a belt-and-suspenders fallback that re-fetches from the cache before sending a vision query.
- Inline viewer — chat bubble race — Assistant streaming chunks now marshal cleanly to the UI thread via
Dispatcher.InvokeAsyncinstead of racing with the user prompt add from a background thread.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About pikura-app/pikura
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]