Bump version to 0.12.1

.ci/windows/build.bat

@@ -4,7 +4,7 @@
 if defined CI_COMMIT_TAG (
 	set VERSION=%CI_COMMIT_TAG%
 ) else (
-	set VERSION=v0.12.0
+	set VERSION=v0.12.1
 )
 set INSTVERSION=%VERSION:~1%
 set WINVERSION=%VERSION:~1%.%CI_JOB_ID%

.gitlab-ci.yml

@@ -99,8 +99,8 @@ pages:
     #- export LATEST_WINDOWS=$(curl "https://nheko.im/api/v4/projects/2/packages?package_name=windows&order_by=version&sort=desc" | jq -r '.[0].version')
     # hardcoded to avoid fuzzy matching
     - export LATEST_WINDOWS='0.12.0.35798'
-    - sed "s/0.12.0.0/${LATEST_WINDOWS_NIGHTLY}/g" -i resources/NhekoNightly.appinstaller
+    - sed "s/0.12.1.0/${LATEST_WINDOWS_NIGHTLY}/g" -i resources/NhekoNightly.appinstaller
-    - sed "s/0.12.0.0/${LATEST_WINDOWS}/g" -i resources/Nheko.appinstaller
+    - sed "s/0.12.1.0/${LATEST_WINDOWS}/g" -i resources/Nheko.appinstaller
     - mkdir public
     - mv resources/NhekoNightly.appinstaller public
     - mv resources/Nheko.appinstaller public

CHANGELOG.md

@@ -1,6 +1,15 @@
 # Changelog
 
-## [0.12.1] -- unreleased
+## [0.12.1] -- 2025-08-10
+
+### Security
+
+- Fix html escaping in several locations.
+  - Thank you, HarHarLinks, for the report.
+- Encode urls in tooltips to prevent confusion.
+  - Thank you, Emma, for the report.
+- Mark downloads with a "mark of the web" on Windows to warn before executing them.
+  - Thank you, DarkKirb, for the report.
 
 ### Features
 

CMakeLists.txt

@@ -115,7 +115,7 @@ include(GNUInstallDirs)
 
 set(CPACK_PACKAGE_VERSION_MAJOR "0")
 set(CPACK_PACKAGE_VERSION_MINOR "12")
-set(CPACK_PACKAGE_VERSION_PATCH "0")
+set(CPACK_PACKAGE_VERSION_PATCH "1")
 set(PROJECT_VERSION_MAJOR ${CPACK_PACKAGE_VERSION_MAJOR})
 set(PROJECT_VERSION_MINOR ${CPACK_PACKAGE_VERSION_MINOR})
 set(PROJECT_VERSION_PATCH ${CPACK_PACKAGE_VERSION_PATCH})

resources/AppxManifest.xml

@@ -4,7 +4,7 @@
   xmlns:uap="http://schemas.microsoft.com/appx/manifest/uap/windows10"
   xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
   xmlns:rescap="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities">
-  <Identity Name="im.nheko.Nheko" Version="0.12.0.0" Publisher="CN=Nicolas Werner, O=Nicolas Werner, L=Munich, S=Bavaria, C=DE" ProcessorArchitecture="x64"/>
+  <Identity Name="im.nheko.Nheko" Version="0.12.1.0" Publisher="CN=Nicolas Werner, O=Nicolas Werner, L=Munich, S=Bavaria, C=DE" ProcessorArchitecture="x64"/>
   <Properties>
     <DisplayName>Nheko</DisplayName>
     <PublisherDisplayName>Nheko-Reborn</PublisherDisplayName>

resources/Nheko.appinstaller

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <AppInstaller Uri="https://nheko-reborn.pages.nheko.im/nheko/Nheko.appinstaller" Version="0.0.0.1" xmlns="http://schemas.microsoft.com/appx/appinstaller/2018">
-  <MainPackage Name="im.nheko.Nheko" Version="0.12.0.0" Publisher="CN=Nicolas Werner, O=Nicolas Werner, L=Munich, S=Bavaria, C=DE" Uri="https://nheko.im/api/v4/projects/2/packages/generic/windows/0.12.0.0/nheko.msix" ProcessorArchitecture="x64" />
+  <MainPackage Name="im.nheko.Nheko" Version="0.12.1.0" Publisher="CN=Nicolas Werner, O=Nicolas Werner, L=Munich, S=Bavaria, C=DE" Uri="https://nheko.im/api/v4/projects/2/packages/generic/windows/0.12.1.0/nheko.msix" ProcessorArchitecture="x64" />
   <UpdateSettings>
     <!-- We can't set this to check only once a month, so just check once a week. If the user doesn't want that ping, they should install the msix directly. -->
     <OnLaunch HoursBetweenUpdateChecks="168" ShowPrompt="true" />

resources/NhekoNightly.appinstaller

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <AppInstaller Uri="https://nheko-reborn.pages.nheko.im/nheko/NhekoNightly.appinstaller" Version="0.0.0.1" xmlns="http://schemas.microsoft.com/appx/appinstaller/2018">
-  <MainPackage Name="im.nheko.Nheko" Version="0.12.0.0" Publisher="CN=Nicolas Werner, O=Nicolas Werner, L=Munich, S=Bavaria, C=DE" Uri="https://nheko.im/api/v4/projects/2/packages/generic/windows-nightly/0.12.0.0/nheko.msix" ProcessorArchitecture="x64" />
+  <MainPackage Name="im.nheko.Nheko" Version="0.12.1.0" Publisher="CN=Nicolas Werner, O=Nicolas Werner, L=Munich, S=Bavaria, C=DE" Uri="https://nheko.im/api/v4/projects/2/packages/generic/windows-nightly/0.12.1.0/nheko.msix" ProcessorArchitecture="x64" />
   <UpdateSettings>
     <!-- We can't set this to check only once a month, so just check once a week. If the user doesn't want that ping, they should install the msix directly. -->
     <OnLaunch HoursBetweenUpdateChecks="168" ShowPrompt="true" />

resources/nheko.appdata.xml.in

@@ -62,6 +62,13 @@
   <url type="homepage">https://github.com/Nheko-Reborn/nheko</url>
   <update_contact>https://github.com/Nheko-Reborn</update_contact>
   <releases>
+    <release date="2025-08-10" version="0.12.1">
+      <description>
+        <p>This release fixes a few security issues around rendering rich text messages. Otherwise it also includes a lot of minor improvements.</p>
+      </description>
+
+      <url>https://github.com/Nheko-Reborn/nheko/releases/tag/v0.12.1</url>
+    </release>
     <release date="2024-06-12" version="0.12.0">
       <description>
         <p>This release features a complete port to Qt6, intentional mentions, expiring messages, ignoring users, better sticker and emoji handling and much, much more!</p>