Release 0.4.11-b

[ZhuchkaTriplesix]

Summary

Patch release after 0.4.11. Tag 0.4.11-a was mistargeted (same commit as 0.4.11); 0.4.11-b is the first real patch binaries.

• Security (security(sandbox): handle OS sandbox unavailable on Windows and Linux (no bwrap) #395–security(sideload): optional SHA256 verification for local extension archive install #402) + Linux packaging (packaging(linux): distro packages (deb, rpm, Flatpak, optional AUR) #386) — rpm / Flatpak / AUR
• Perf (perf: bound peak memory & hot-path algorithms (post-0.4.11 audit) #414) — SQL caps, streaming export/zip, RPC/SDUI bounds, virtualization
• UI reliability (ui: stuck loaders, blank states & dialog Escape (post-0.4.11 audit) #445) — loaders, Escape, empty states, toolbars
• Correctness (code review: correctness follow-ups post #414/#445 (dev vs main) #463) — LIMIT in literals, export cleanup, PG tree, theme watcher, Redis banner

pubspec.yaml: 0.4.11-b

Changelog

[0.4.11-b] - 2026-07-27

Post-0.4.11 patch that ships security + Linux distro packaging (intended for 0.4.11-a), plus performance bounds (#414), UI reliability (#445), and code-review correctness (#463).

Note: GitHub tag 0.4.11-a was mistakenly placed on the same commit as 0.4.11, so those binaries did not include the 0.4.11-a changelog. Treat 0.4.11-b as the first patch after 0.4.11.

Added

• Linux distro packaging (packaging(linux): distro packages (deb, rpm, Flatpak, optional AUR) #386) — .rpm, Flatpak (.flatpak bundle + manifest), and AUR PKGBUILD; Release CI publishes rpm + Flatpak alongside existing .deb / AppImage — see packaging.md.

Security

• Theme remote install localhost (security(theme): fix allowLocalhostInDebug default allowing localhost/private IPs in release #399) — ThemeRemoteInstallService defaults allowLocalhostInDebug to kDebugMode.
• Archive path guard (security(archive): use p.isWithin() instead of startsWith for zip extraction path bounds #401) — zip extraction uses p.isWithin() bounds checks (archive_path_guard.dart).
• Marketplace SHA256 (security(marketplace): require SHA256 checksum before HttpMarketplace install #396) — HttpMarketplaceRepository requires manifest checksum before install.
• Marketplace download URLs (security(marketplace): restrict extension download URLs (HTTPS allowlist, SSRF protection) #397) — HTTPS allowlist / SSRF policy (MarketplaceDownloadPolicy).
• Safe zip extraction (security(archive): zip bomb limits and bounded decompression for extension/updater installs #398) — shared zip-bomb limits via SafeZipExtractor (extensions, updater, themes).
• Remote theme SHA256 (security(theme): require SHA256 checksum for remote theme install #400) — remote theme install requires checksum when provided by metadata.
• Sandbox OS consent (security(sandbox): handle OS sandbox unavailable on Windows and Linux (no bwrap) #395) — fail-closed unsandboxed driver launch without OS wrapper (bubblewrap / consent dialog).
• Sideload integrity UX (security(sideload): optional SHA256 verification for local extension archive install #402) — local .zip/.qext install dialog with security notice and optional SHA256.

Performance

• SQL result caps (perf(sqlite): inject LIMIT / stop unbounded rawQuery then take(cap) #415 / perf(postgres): stream or clamp LIMIT — avoid full Result buffer #416) — SQLite injects LIMIT before materializing rows; Postgres clamps oversized LIMIT / FETCH.
• Streaming I/O (perf(export): stream DataExportService to disk (stop giant String) #417 / perf(marketplace): stream SHA256 + zip extract (no dual full buffers) #418) — export writes stream to disk; marketplace SHA256 + zip extract avoid dual full-buffer copies.
• RPC / SDUI bounds (perf(extensions): bound and chunk RPC query result payloads #419 / perf(sdui): virtualize SduiTreeBuilder (no full Column of expanded nodes) #420) — NDJSON line size caps; virtualized SduiTreeBuilder.
• Hot-path yielding (perf(results): avoid double-copy compute for row→string conversion #421 / perf(mysql): offload table browse row→string conversion from UI isolate #422) — result cell string conversion and MySQL table browse yield to the UI isolate.
• Editor / Redis / sandbox / storage (perf(editor): honor kSyntaxHighlightIsolateThreshold #424–perf(storage): SQL history index + prune without nested OFFSET delete #428) — syntax-highlight threshold, Redis TYPE/TTL pipeline, bounded stderr, SQL history index/prune, incremental theme mtime scan.
• VirtualResultGrid (perf(ui): 2D virtualization for VirtualResultGrid (wide columns) #423) — 2D column virtualization for wide result sets.

Fixed

• UI reliability (ui: stuck loaders, blank states & dialog Escape (post-0.4.11 audit) #445 / ui(dialog): Escape / barrierDismissible for showAppDialog #446–ui(results): ResultsTab isLoading must not hide errorMessage #457) — Escape on showAppDialog; DDL overlay always pops; stats/table loading clears on early exit; tree error + Retry; empty table state; scrollable toolbars; SQL open/save toasts; title-bar scale; Redis/Mongo empty banners; mounted guards; ResultsTab invariants.
• Correctness follow-ups (code review: correctness follow-ups post #414/#445 (dev vs main) #463 / bug(sql): injectSqlLimit must not rewrite LIMIT inside string literals #464–bug(redis): clear keys-view error banner after successful TYPE/TTL batch #468) — injectSqlLimit skips string/dollar quotes; delete partial export files on failure; PG tree clears stale children on error; theme watcher queues in-flight refresh; Redis keys error banner clears on success.

After merge (tag yourself)

git checkout main && git pull
# confirm: grep '^version:' pubspec.yaml  →  0.4.11-b
git tag -a 0.4.11-b -m "Querya Desktop 0.4.11-b"
git push origin 0.4.11-b

Verify git rev-parse 0.4.11-b^{} ≠ 0.4.11^{} and Release artifacts are Querya-Desktop-0.4.11-b-* (incl. .rpm / .flatpak).