nightly-c2b536d

Rolling nightly build from main, rebuilt every day.

Commit: c2b536d — feat(progress): show feedback while waiting on the remote (#206)
Built: 2026-08-22 03:52:05 UTC

These binaries track main and may be unstable. For stable builds see https://github.com/pkgforge/soar/releases/latest.

Soar v0.13.2

⛰️ Features

• (cli) Install packages from soar:// links (#197) - (e447e7c)
• (cli) Expose soar to frontends with JSON output and a plugin manifest (#194) - (6846b89)
• Serve soarpkgs on riscv64 and refresh the readme (#198) - (2224691)

🐛 Bug Fixes

• (desktop) Leave no space after a command with no arguments - (87ae748)
• (plugin-manifest) Let update name the package it means - (fe0397d)
• (registry) Read the date the metadata actually publishes (#196) - (2772841)
• (search) Match a package whose family the metadata has dropped (#201) - (e6057fb)
• (update) Let the artifact decide where the version cannot - (c656564)

📚 Documentation

• Refresh README and CONTRIBUTING (#199) - (6479cec)

Contributors

• @QaidVoid

Soar v0.13.1

⛰️ Features

• (cli) Add --ipv4 and --ipv6 flags - (2ee8e22)

🐛 Bug Fixes

• (cli) Print info entries in package query format - (2291b37)
• (core) Create system-mode database when writable - (6b5d35e)
• (dl) Surface underlying download errors - (d06823a)
• (dl) Tolerate filesystems without xattr support - (f7080c3)
• (http) Honor proxy env vars and bound connect time - (3a43c0f)

Soar v0.13.0

Breaking changes

• A package id is no longer required. Repositories publishing the declarative format have none. Use family/name to pick between identically-named packages, as in soar install busybox/cat. The old name#pkg_id form still parses and warns.
• packages.toml gained family, and deprecates pkg_id and install_patterns. Both still work.
• soar remove '<name>#all' is gone. It selected every variant and then removed only the one you chose, which is what a bare name already does. Use soar remove --all <name>.
• The metadata schema changed, but there is nothing for a repository to do. A JSON index is imported to the current schema, and a published SQLite database built by an older soar is brought up to date when it is fetched.

Highlights

• Packages installed from a URL now update. An AppImage advertising a zsync feed is updated by fetching only the blocks that changed, seeded from the copy already on disk. Otherwise, where the URL points at a GitHub or GitLab release, the newest release of that project decides.
• soar update <url> and soar remove <url> accept the URL a package was installed from, and keep working after the package has been updated.
• Manual pages and shell completions are linked where your system already looks for them, alongside the commands.

Full release notes: https://soar.qaidvoid.dev/releases/v0.13

⛰️ Features

• (install) Record where a URL install came from - (d6c83ad)
• (package) Add onelf support - (0059732)
• (remove) Accept the URL a package was installed from - (cb95df8)
• (update) Follow a release source when no feed is declared - (178b87a)
• (update) Update URL-installed AppImages over zsync - (509df1f)
• (update) Accept the URL a package was installed from - (5434005)
• [breaking] Consume the declarative index, drop the pkg_id requirement (#186) - (3a35ad7)

🐛 Bug Fixes

• (remove) Drop '#all', which duplicated a bare name - (28fc0fc)
• (update) Keep matching when a repo stops publishing families - (a04c9a7)
• (update) Say why a source check failed - (64e115e)
• (update) Trust the checksum, not the version label - (e05092d)
• (url) Take the version from the release tag, not the arch - (21de292)

📚 Documentation

• Cover forge tokens and rate limits - (ccdd34a)
• Refresh the readme and contributing guidelines - (5ecd397)

Contributors

• @QaidVoid

Soar v0.12.7

⛰️ Features

• (metadata) Support local metadata source (#181) - (487850d)

🐛 Bug Fixes

• (install) Resolve main binary from provides for checksum - (51da135)
• (security) Validate repository names to block path traversal (#183) - (c4b34f9)
• (security) Validate pkg_name and pkg_id as path components (#184) - (97a0f57)
• (security) Validate provides names to block path traversal (#182) - (034b085)
• (self) Update atomacially to avoid bricking on failure (#180) - (c4afeb3)

Contributors

• @QaidVoid

Soar v0.12.6

🐛 Bug Fixes

• (install) Resolve package URLs on declarative installs - (50c200f)

Soar v0.12.5

⛰️ Features

• (metadata) Add metadata signature verification - (ebd1b2f)

🐛 Bug Fixes

• (cli) Fix exclude help and fmt - (5ce4514)

Soar v0.12.4

⛰️ Features

• (install) Install packages from a local file path - (20ce381)

Soar v0.12.3

⛰️ Features

• (install) Implicit-trust model for user-declared sources + checksum pinning (#171) - (d395448)

Contributors

• @QaidVoid

Soar v0.12.2

⛰️ Features

• (cli) Add shell completions command - (401fb04)
• (sandbox) Add enabled flag and global defaults - (a3a4431)

🐛 Bug Fixes

• (dl) Verify download integrity (#168) - (336f2dd)
• (progress) Emit build/hook events to clear spinner during build - (306f001)

Contributors

• @QaidVoid