This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Summary
AI summaryFirst‑run model setup now reliably completes with progress tracking and fallback to raw dictation if the writing model fails.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Developer ID signing and hardened runtime applied to app and DMG. Developer ID signing and hardened runtime applied to app and DMG. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Security | High |
Apple notarization stapled and verified before publication. Apple notarization stapled and verified before publication. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Low |
Locks Try It field during one-time model setup. Locks Try It field during one-time model setup. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Low |
Displays current setup phase and download percentage in onboarding. Displays current setup phase and download percentage in onboarding. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Low |
Gatekeeper accepts both DMG and bundled app as Notarized Developer ID. Gatekeeper accepts both DMG and bundled app as Notarized Developer ID. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Maintains setup progress across engine reconnects. Maintains setup progress across engine reconnects. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Prevents superseded pre‑ready connections from sending duplicate ready frames or blocking setup completion. Prevents superseded pre‑ready connections from sending duplicate ready frames or blocking setup completion. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Falls back to raw dictation if the optional writing model fails to load, avoiding onboarding traps. Falls back to raw dictation if the optional writing model fails to load, avoiding onboarding traps. Source: llm_adapter@2026-07-17 Confidence: high |
— |
Full changelog
Velora 0.4.4 gives first-run model setup an honest, reliable onboarding flow and installs normally through macOS Gatekeeper.
First-run setup
- The Try It field stays locked while the speech and writing models complete their one-time setup.
- Onboarding shows the current setup phase and download percentage.
- Setup progress remains correct across engine reconnects.
- Superseded pre-ready connections can no longer send duplicate ready frames or prevent setup completion.
- If the optional writing model cannot load, Velora falls back to raw dictation instead of trapping onboarding.
Distribution
- The app and DMG use Developer ID signing and hardened runtime.
- Apple notarization is stapled and verified before publication.
- Gatekeeper accepts both the disk image and bundled app as Notarized Developer ID.
Verified with 55 Swift self-checks and 199 Python tests.
SHA-256: ef5641094743bcdb1c10ed6e9af01f4ba73f56a273a3681a50d599dfb3632374
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Velora
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]