Skip to content

stemdeckapp/stemdeck

v0.7.0-alpha.16 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Affected surfaces

deps

Summary

AI summary

Updates GPU support, Artifact scan, and Installing across a mixed release.

Full changelog

[!IMPORTANT]
macOS first launch (no code signing yet). After dragging StemDeck to Applications, clear the Gatekeeper quarantine flag or macOS will say the app is damaged:

xattr -dr com.apple.quarantine /Applications/StemDeck.app

Upgrading from alpha.9 or earlier? If after installing you still see an old version or are missing recent features, clear the cached runtime once and relaunch:

rm -rf ~/Library/Application\ Support/StemDeck/runtime ~/Library/Application\ Support/StemDeck/runtime.old

What's new in 0.7.0 Alpha 16

GPU support

  • NVIDIA RTX 50-series (Blackwell) support. Cards with the sm_120 architecture (e.g. RTX 5060 Ti / 5070 / 5080 / 5090) now run stem extraction on the GPU. Previously they failed with CUDA error: no kernel image is available for execution on the device - StemDeck now installs a CUDA 12.8 / PyTorch 2.7 build on these cards while every other GPU keeps its existing setup. (#218, fixes #217)
  • Cleaner CPU fallback. If a GPU reports CUDA available but can't actually run kernels, StemDeck now detects it at setup and falls back to CPU instead of crashing mid-extraction. (#218)

Security

  • msgpack updated to 1.2.1 to clear a HIGH-severity advisory (GHSA-6v7p-g79w-8964). (#218)

Installing

  • macOS: drop the .app into Applications and launch (run the xattr command above first).
  • Windows: unzip the downloaded .zip, then run StemDeck.exe from the extracted folder.

Artifact build

  • macOS arm64 and x64 DMGs and runtime packs were built and inspected on a macOS GitHub Actions runner before upload.

Artifact scan

  • Windows portable packages were scanned with ClamAV in CI before upload.

Artifact scan

  • Windows portable packages were scanned with ClamAV in CI before upload.

Security Fixes

  • msgpack updated to 1.2.1 – resolves GHSA-6v7p-g79w-8964 (HIGH severity)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track stemdeckapp/stemdeck

Get notified when new releases ship.

Sign up free

About stemdeckapp/stemdeck

All releases →

Related context

Earlier breaking changes

  • v0.6.0-alpha.1 Moves library and stems storage from `~/Library/Application Support/` to `~/Documents/StemDeck/`.

Beta — feedback welcome: [email protected]