v0.16.0 — "Signals Along the Ridge"

🏔️ v0.16.0 — "Signals Along the Ridge"

With the rope team tied in, it's time to check the radios and keep everyone moving.
This release brings clearer push-notification testing, multi-profile publishing, and
surer footing around Apple sign-in, local secrets, and .NET SDK maintenance.

🆕 New Features

• APNs Keys in Secret Providers — Import, select, and sync Apple push-notification
  .p8 keys through your configured secret providers, with Key ID and Team ID metadata
  carried along for the next test. (#261)
• Batch Publish Profiles — Select multiple profiles and publish them together from
  a dedicated batch dialog, instead of making a separate trip for each one. (#257)
• Developer ID Installer Certificates — Discover installer signing identities from
  the macOS keychain alongside App Store Connect certificates, with clear local-only
  badges and filtering. (#258)

✨ Improvements

• A Clearer Push-Testing Station — Redesigned APNs and Firebase pages add live iOS
  and Android notification previews, a send-readiness checklist, JSON validation and
  formatting, APNs payload-size feedback, and easier-to-read send history. (#261)
• Friendlier Apple Sign-In — Six-digit verification entry supports paste, autofill,
  and automatic submission; clearer Apple errors, account-unlock guidance, and optional
  fastlane session import help when the authentication trail gets rough. (#269)
• Smoother Xcode Installs — Downloads and installation now use the shared hybrid
  progress dialog with cancellation, activity logs, and readable download sizes. (#247)
• Faster Profile Loading — Profiles arrive incrementally from providers in parallel,
  so a slow destination no longer holds up the entire list; refreshed caching and
  publisher initialization make subsequent publishing more reliable. (#257)
• Better Doctor Guidance — Missing-JDK findings link to Microsoft's OpenJDK downloads,
  Android setup actions are clearer, and workload fixes show progress while preventing
  duplicate launches. (#248, #270)

🐛 Bug Fixes

• Apple Login and Xcode Detection — Replaced Apple's retired service-key endpoint,
  kept restored account details visible, and matched installed Xcode previews by build
  number rather than marking every preview with the same version as installed. (#262)
• Safer SDK Removal — Uninstall and untrack operations use the tracked installation's
  own path, ambiguous preview/RC matches are rejected instead of guessed, and incomplete
  SDK folders no longer appear as installed. (#270)
• More Reliable Workload Checks — Limited concurrent workload queries to reduce
  timeouts and fixed process-dialog and JavaScript teardown races in Doctor and the
  background task center. (#248, #270)
• macOS Keystore Dialogs — Restored usable sizing and input handling for keystore
  creation, and native file selection for keystore imports. (#254)
• DevFlow Property Editing — Inspector mutations now claim the agent's control lease
  before making changes; conflicts show a useful error instead of an unhandled UI failure,
  while older agents remain supported. (#260)
• Locked-Vault Recovery — Apple and secrets screens can render while the Local Vault
  is unavailable, display actionable loading errors, and refresh when it is unlocked;
  long secret text and demo-mode presentation also get a tidier fit. (#259)

🔧 Infrastructure

• Refreshed Toolchain — Updated the .NET SDK to 10.0.401 and refreshed NuGet
  dependencies, including platform, diagnostics, and encrypted-storage components.
  (#236, #249, #263, #265)
• A Lighter Gear Manifest — Adopted the .slnx solution format and centralized NuGet
  versions in Directory.Packages.props to keep shared dependencies aligned. (#265)

Full changelog: v0.15.0...v0.16.0

---

The radios are checked, the gear is accounted for, and the next stretch is coming into view. 📡

v0.15.0 — "Roping Up the Team"

🏔️ v0.15.0 — "Roping Up the Team"

No serious ascent depends on a single anchor. This release ropes MAUI Sherpa's secret
providers together, letting every certificate, keystore, profile, and managed secret travel
with the cloud services that fit the route — while background tasks keep the whole team moving.

🆕 New Features

• Multi-Provider Secret Sync — Choose one or more destinations per item across Local Vault,
  Azure Key Vault, AWS Secrets Manager, Google Secret Manager, Infisical, 1Password,
  Vaultwarden, and Azure DevOps, with configurable defaults and conflict-aware reconciliation.
  (#239)
• Background Task Center — Follow sync progress by provider, retry failures, cancel work,
  and recover interrupted jobs after restart without storing secret payloads in task history.
  (#239)
• Broader Apple Publishing Workflows — Create every certificate type supported by App Store
  Connect, install and sync new identities automatically, and publish with multiple signing
  certificates and provisioning profiles. (#240)
• Multi-Certificate P12 Export — Select several local signing identities and export one
  protected P12 bundle to disk, Base64 clipboard, or both. (#242)

✨ Improvements

• Safer Provisioning Profile Maintenance — Regeneration now preflights App Group
  entitlements, downloads replace matching profiles atomically, and a new cleanup review finds
  expired, unreadable, superseded, and certificate-orphaned profiles before anything is
  removed. (#245)
• Faster Infisical Writes — Update-first upserts, shared authentication, native metadata,
  and batched inventory reads eliminate costly missing-secret retries while preserving
  transactional rollback. (#244)

🐛 Bug Fixes

• Windows Device Tools — Registered the missing deep-link validation service so opening
  device tools no longer crashes the Blazor UI on Windows. (#243)

🔧 Infrastructure

• Linux Release Packaging — Restored the Blazor mediator dependency used by the Linux head
  so x64 and ARM64 release packages build cleanly again.
• Updated MAUI DevFlow Kit — Advanced the DevFlow packages to preview 12 and refreshed the
  project's onboarding, debugging, and session-review guidance. (#246)

---

The rope team is tied in, the anchors are sound, and the next ridge is calling. 🧗

v0.14.0 — "Opening the Windows Route"

🏔️ v0.14.0 — "Opening the Windows Route"

This stage of the expedition clears a better trail for Windows climbers. MAUI Sherpa now
offers a more readable toolbar and proper self-contained installers, making the route from
download to Start menu much easier to follow.

🆕 New Features

• Windows Installers — Self-contained x64 and ARM64 installers now add MAUI Sherpa to the
  Start menu and provide standard per-user uninstall support, while ZIP downloads remain
  available for existing update flows. (#235)

✨ Improvements

• Clearer Windows Toolbar — Toolbar actions now pair centered Fluent icons with readable
  labels such as Release Notes, New Folder, and Open Project Folder, with correct mappings and
  enabled states throughout. (#235)

🔧 Infrastructure

• Smoother WinGet Handoff — WinGet manifests now target the new installers, and release
  automation provides maintainers with a prefilled browser submission link instead of relying
  on short-lived SSO authorization. (#235)

---

The Windows route is marked, packed, and ready for the next ascent. 🧭

v0.13.2

v0.13.2 — "Securing the Mac Route"

v0.13.1 — "Retightening the Download Rope"

🏔️ v0.13.1 — "Retightening the Download Rope"

We're staying at the same camp for a quick gear check after v0.13.0. This patch secures the
update route against temporary GitHub network failures and makes sure climbers always have a
clear way to retry or download the release manually.

🐛 Bug Fixes

• Resilient App Updates — Update downloads now retry transient GitHub failures with bounded
  connection timeouts, reject incomplete archives, and preserve the original failure in the logs
  for diagnosis.
• Recoverable Update Dialog — Failed updates now offer Retry and Open Release Page
  actions instead of stranding the user on a raw network error.
• Reliable Manual Downloads — The manual download action is labeled clearly and no longer
  silently closes the dialog when macOS cannot open the release page.

🔧 Infrastructure

• WinGet Publishing Authentication — Release automation now publishes manifests with a deploy
  key and handles accepted validation warnings consistently. (#231)

---

The rope is tight, the backup route is marked, and the team can keep moving. 🧗

v0.13.0 — "Repacking for the Next Ascent"

🏔️ v0.13.0 — "Repacking for the Next Ascent"

The route ahead is clearer, and this release reorganizes the expedition around the tools that
matter most on the climb. MAUI Sherpa now offers a stronger development environment dashboard,
a rebuilt profiling trail powered by the MAUI CLI, and steadier recovery when SDK or publishing
conditions change beneath your feet.

🆕 New Features

• Development Environment Dashboard — A new dashboard brings SDK health, tool status, release
  notes, and common actions into one basecamp view, with a streamlined toolbar for faster access.
  (#213, #227)
• MAUI CLI Profiling — App profiling has been rebuilt on the MAUI CLI with guided capture,
  artifact recovery, session history, prerequisites, and diagnostics gathered into a clearer
  end-to-end workflow. (#221)
• In-App Release Notes — A dedicated dialog now highlights what changed after an update, so
  climbers can check the latest trail markers without leaving the app. (#213)

✨ Improvements

• Smarter .NET Tooling — Doctor and SDK management now treat the dotnetup root as
  authoritative, support interactive prompts, understand preview SDKs, and recover gracefully
  when workload-set metadata is unavailable. (#218, #222, #226, #229)
• Expanded Copilot Models — Copilot model selection now recognizes the latest available models,
  while improved recovery and external navigation make interrupted routes easier to resume.
  (#211, #214, #227)
• Lean Windows Packaging — Windows releases now center deployment on a self-contained
  executable alongside the app's required web assets, simplifying the route from download to
  launch. (#210)

🐛 Bug Fixes

• Profiling Navigation — Opening profiling on Windows no longer crashes during navigation.
  (#228)
• SDK Uninstall Resolution — SDK removals now resolve the correct managed channel instead of
  losing the trail between installed versions. (#209)
• Publishing Credentials — Certificate secrets are resolved correctly during publish, keeping
  signing workflows moving when credentials come from synchronized stores. (#230)

🔧 Infrastructure

• Automated Distribution — Stable releases can now submit updated WinGet manifests
  automatically, while Homebrew setup guidance points macOS users to the correct dependencies.
  (#207, #208)
• Fresh Expedition Kit — The repository moved to .NET SDK 10.0.302 and refreshed its grouped
  NuGet dependencies for the next stretch of the climb. (#215, #216, #220, #225)

---

The pack is balanced, the route is marked, and the next ascent is ready to begin. 🧗

v0.12.0 — "Traversing the Toolchain Ridge"

🏔️ v0.12.0 — "Traversing the Toolchain Ridge"

The expedition is moving onto new terrain, and this release brings the gear to manage the
toolchain along the way. MAUI Sherpa can now guide both .NET and Android SDK maintenance,
from scouting available updates to installing the right components for the route ahead.

🆕 New Features

• .NET SDK Manager — Install, track, inspect, and update .NET SDK and runtime channels through
  dotnetup, with update previews, project-aware global.json guidance, and workload management
  built into the app. (#197)
• Android SDK Package Updates — A unified package view identifies newer stable releases and
  handles in-place and side-by-side updates, including optional cleanup of older tools without
  cutting loose versions that existing projects still need. (#195)

✨ Improvements

• A More Capable Doctor — Doctor now understands dotnetup-managed SDKs and workloads, giving
  both the app and CLI a clearer view of the development environment before the climb begins.
  (#197)
• Polished Camp Surfaces — Cards, dialogs, modal padding, scrollbars, and light/dark theme
  colors now form a flatter, more consistent interface across the expedition. (#196)

🐛 Bug Fixes

• Windows Copilot Stability — Release builds no longer hit a CSPRNG crash when starting the
  bundled Copilot CLI on Windows. (#190)

🔧 Infrastructure

• Fresh Expedition Kit — The .NET SDK moved to 10.0.301, core dependencies received a broad
  refresh, and grouped Dependabot updates keep future supply drops easier to review.
  (#191, #192, #193, #194)

---

The ridge is broader now, and every tool in the pack has a clearer path forward. 🧭

v0.11.3 — "Opening a Supply Line"

🏔️ v0.11.3 — "Opening a Supply Line"

Still camped at the same altitude, but we're laying down a fresh resupply route. This patch is all about how Sherpa gets into your pack in the first place — opening a new delivery channel for Windows climbers and keeping our own gear inventory current.

🔧 Infrastructure

• Winget manifest publishing — A new workflow generates and validates a Windows Package Manager manifest on every release, paving the way to winget install Sherpa straight onto your Windows rig. (#187)
• Dependabot for NuGet & the .NET SDK — Automated checks now keep our dependencies and toolchain fresh, so the kit never goes stale between climbs. (#176)

---

The trail hasn't changed, but there's a new way to get supplies up the mountain. 📦

v0.11.2 — "Tuning the Camp Radio"

🏔️ v0.11.2 — "Tuning the Camp Radio"

The team is still posted beside the summit cache, but this patch tightens the
signals and signposts before the next climb. Publish profiles now know how to
reuse the developer identities already packed in Settings, and Copilot is back
on the radio with the current SDK.

🆕 New Features

• Publish Profile Identity Mapping — Apple and Google developer identities
  from Settings can now be mapped directly into publish profiles, with picker
  modals that keep credential reuse on the marked trail. (#174)

✨ Improvements

• Identity-Aware Publish Profiles — Publish profiles now carry mapped
  identity fields through backup and secret resolution, and the list view shows
  Apple/Google identity counts so each route is easier to inspect before
  departure. (#174)

🐛 Bug Fixes

• Copilot SDK Integration — Sherpa now uses the current Copilot SDK APIs so
  responses deserialize correctly, sessions are started before sending, and the
  in-app assistant can answer from camp again. (#175)
• macOS Apple Tooling Privacy — The native macOS head now declares the
  Bluetooth usage string required by Apple development tooling, avoiding a TCC
  slip while devices are being observed. (#174)

🔧 Infrastructure

• Copilot SDK Update — Core and native macOS now reference
  GitHub.Copilot.SDK 1.0.2, keeping the integration clipped into the current
  CLI protocol. (#175)
• Publish Profile Mapping Coverage — New tests cover Apple and Google
  identity mapping through publish profile secret resolution, tightening this
  anchor before it carries real release gear. (#174)

---

The cache is still secure, the route cards are clearer, and the camp radio is
finally crackling back with useful guidance. 📻

v0.11.1 — "Checking the Vault Latch"

🏔️ v0.11.1 — "Checking the Vault Latch"

The team is still camped beside the new summit cache, but this patch release
tightens the latch before anyone trusts it with their most important gear.
Local secrets should now be easier to reach, safer to recover, and less likely
to send climbers wandering toward an unavailable vault key.

🐛 Bug Fixes

• Default Local Provider — Sherpa now consistently offers and activates the
  built-in Local provider for new secrets setups, even before the Local Vault
  introduction has been answered. (#173)
• Local Vault Fallbacks — If Local Vault access is denied or unavailable,
  Sherpa keeps the Local provider visible but can fall back to an existing
  remote provider instead of leaving the expedition roped to a locked cache.
  (#173)

✨ Improvements

• Vault Access Recovery — The Secrets and Settings pages now surface a clear
  Local Vault access notice with a grant-access action, giving users a marked
  trail back to local secrets when OS secure storage needs approval. (#173)

🔧 Infrastructure

• Provider Selection Coverage — New tests cover the Local provider default,
  declined-introduction behavior, unavailable vault access, and non-destructive
  local provider deletion so this anchor stays tight. (#173)

---

A quick gear check at camp keeps the cache useful, the trail clear, and the
next climb moving without spilled secrets in the snow. 🔐