xattr -dr com.apple.quarantine /Applications/StemDeck.app

rm -rf ~/Library/Application\ Support/StemDeck/runtime ~/Library/Application\ Support/StemDeck/runtime.old

What's new in 0.7.0 Alpha 14

Supporters

• Two new supporters. Joao Gaspar (Producer/Film Scorer, Touring/Session Musician) and Kris Luthier (Luthier and Musical Instrument Repair, Lisboa) join the Supporters dialog, each linking to their Instagram. (#200)
• Reworked tile layout. Tiles now show an optional role under the name and lay out as a staggered, gallery-wall style grid so taller cards no longer leave big gaps. (#200)

Fixes (macOS)

• More reliable first-run runtime download. The download URL baked into the app now points directly at the current repository instead of relying on a redirect from the old repository name. No action needed; existing installs are unaffected. (#199)

Installing

• macOS: drop the .app into Applications and launch (run the xattr command above first).
• Windows: unzip the downloaded .zip, then run StemDeck.exe from the extracted folder.

Artifact build

• macOS arm64 and x64 DMGs and runtime packs were built and inspected on a macOS Woodpecker agent before upload.

Artifact scan

• Windows portable packages were scanned with ClamAV in CI before upload.

xattr -dr com.apple.quarantine /Applications/StemDeck.app

rm -rf ~/Library/Application\ Support/StemDeck/runtime ~/Library/Application\ Support/StemDeck/runtime.old

What's new in 0.7.0 Alpha 13

Fixes

• More reliable first-run runtime download (macOS). The download URL baked into the app pointed at the project's old repository name and only kept working through a GitHub redirect we do not control. It now points directly at the current repository, so a future change to that redirect can no longer break the one-time runtime download. No action needed; existing installs are unaffected. (#199)

Installing

• macOS: drop the .app into Applications and launch (run the xattr command above first).
• Windows: unzip the downloaded .zip, then run StemDeck.exe from the extracted folder.

Artifact build

• macOS arm64 and x64 DMGs and runtime packs were built and inspected on a macOS Woodpecker agent before upload.

Artifact scan

• Windows portable packages were scanned with ClamAV in CI before upload.

xattr -dr com.apple.quarantine /Applications/StemDeck.app

What's new in 0.7.0 Alpha 9

Audio formats

• FLAC support, end to end. You can now import .flac files alongside MP3 and WAV, and export in FLAC as well: the export menu has a new WAV / MP3 / FLAC toggle that applies to the mix, the current loop region, and the All Stems .zip. FLAC is lossless like WAV but smaller on disk. (#194)

Installing

• macOS: drop the .app into Applications and launch (run the xattr command above first).
• Windows: unzip the downloaded .zip, then run StemDeck.exe from the extracted folder.

Artifact build

• macOS arm64 and x64 DMGs and runtime packs were built and inspected on a macOS Woodpecker agent before upload.

Artifact scan

• Windows portable packages were scanned with ClamAV in CI before upload.

xattr -dr com.apple.quarantine /Applications/StemDeck.app

What's new in 0.7.0 Alpha 8

Security

• macOS now verifies the FFmpeg download before running it. Setup downloads FFmpeg and ffprobe on macOS; previously they were extracted and executed with no integrity check, so a corrupt or tampered download could have been run during setup. The macOS path now checks a pinned SHA256 before the binaries are extracted or executed, and aborts with a clear error on a mismatch, matching the verification the Windows path already did. (#172)

Installing

• macOS: drop the .app into Applications and launch (run the xattr command above first).
• Windows: unzip the downloaded .zip, then run StemDeck.exe from the extracted folder.

Artifact build

• macOS arm64 and x64 DMGs and runtime packs were built and inspected on a macOS Woodpecker agent before upload.

Artifact scan

• Windows portable packages were scanned with ClamAV in CI before upload.

xattr -dr com.apple.quarantine /Applications/StemDeck.app

What's new in 0.7.0 Alpha 7

Studio

• Export Mix now reflects your mixer adjustments. Previously the exported file ignored the mixer and came out close to the original song. It now renders on demand from your current settings, so per-stem volume, mute, and solo are all applied and the export matches what you hear. Works for both WAV and MP3, and for the current loop region. The master volume slider is intentionally not baked in (it is a monitoring level, not part of the mix), so default exports stay at full loudness. "Export All Stems" is unchanged and still gives you the raw isolated stems for re-mixing elsewhere. (#183)

Installing

• macOS: drop the .app into Applications and launch (run the xattr command above first).
• Windows: unzip the downloaded .zip, then run StemDeck.exe from the extracted folder.

Artifact build

• macOS arm64 and x64 DMGs and runtime packs were built and inspected on a macOS Woodpecker agent before upload.

Artifact scan

• Windows portable packages were scanned with ClamAV in CI before upload.

xattr -dr com.apple.quarantine /Applications/StemDeck.app

What's new in 0.7.0 Alpha 6

Reliability

• Fixed the waveform being offset from the playhead and the audio. The stem lanes were drawn a fixed 48px to the right of the ruler, so t=0 in the audio landed before the waveform visually began. The gap was constant in pixels, so it read as a different number of seconds per track (longer songs showed a bigger gap) and stayed put when you moved the marker. The overview layer now starts exactly at the ruler's 0:00, so the playhead, what you hear, and the waveform line up. (#189)
• Restored the bar-style waveform. With the audio engine driving playback, the lanes had switched to a filled envelope shape. They now render as discrete bars again (matching the rest of the studio), with silent sections shown as a faint baseline. (#189)

Installing

• macOS: drop the .app into Applications and launch (run the xattr command above first).
• Windows: unzip the downloaded .zip, then run StemDeck.exe from the extracted folder.

Artifact build

• macOS arm64 and x64 DMGs and runtime packs were built and inspected on a macOS Woodpecker agent before upload.

Artifact scan

• Windows portable packages were scanned with ClamAV in CI before upload.

xattr -dr com.apple.quarantine /Applications/StemDeck.app

rm -rf ~/Library/Application\ Support/StemDeck/runtime ~/Library/Application\ Support/StemDeck/runtime.old

What's new in 0.7.0 Alpha 12

Library

• New "Supporters" view. A TV icon in the sidebar (between Settings and Help) opens a small window featuring the shops and makers who support StemDeck, each clickable to visit their site. First up: Dlima Guitars and Lisbon Guitar Works. It stays out of the way - nothing is added to your library list. (#197)

Installing

• macOS: drop the .app into Applications and launch (run the xattr command above first).
• Windows: unzip the downloaded .zip, then run StemDeck.exe from the extracted folder.

Artifact build

• macOS arm64 and x64 DMGs and runtime packs were built and inspected on a macOS Woodpecker agent before upload.

Artifact scan

• Windows portable packages were scanned with ClamAV in CI before upload.

xattr -dr com.apple.quarantine /Applications/StemDeck.app

rm -rf ~/Library/Application\ Support/StemDeck/runtime ~/Library/Application\ Support/StemDeck/runtime.old

What's new in 0.7.0 Alpha 11

Studio

• Fixed waveforms drifting off their lanes when you extract a subset of stems. If you separated only some stems (for example guitar only, or drums and bass), the waveforms stretched across neighboring tracks instead of staying inside their own lane. Each lane now keeps its own row, so the waveforms line up with the mixer rows. Extracting all stems was already fine. (#196)
• Only the stems you extracted show a waveform. Lanes you did not keep now stay empty instead of drawing a waveform. (#196)

Installing

• macOS: drop the .app into Applications and launch (run the xattr command above first).
• Windows: unzip the downloaded .zip, then run StemDeck.exe from the extracted folder.

Artifact build

• macOS arm64 and x64 DMGs and runtime packs were built and inspected on a macOS Woodpecker agent before upload.

Artifact scan

• Windows portable packages were scanned with ClamAV in CI before upload.

xattr -dr com.apple.quarantine /Applications/StemDeck.app

rm -rf ~/Library/Application\ Support/StemDeck/runtime ~/Library/Application\ Support/StemDeck/runtime.old

What's new in 0.7.0 Alpha 10

Reliability

• Installing a new version now actually updates the app. On macOS the app downloads a runtime pack that holds the backend and the main UI; on an upgrade it was kept from the previous install, so a freshly installed DMG could keep running old code (missing new features, reporting the old version). Setup now checks the installed runtime against the version the app expects and re-downloads it when they differ. (#195)
• Fixed the persistent "New release available" banner. The update check compared the app's internal version against the release tag in two different formats, so it flagged an update even when you were already current. Versions are now compared canonically. (#195)

Installing

• macOS: drop the .app into Applications and launch (run the xattr command above first).
• Windows: unzip the downloaded .zip, then run StemDeck.exe from the extracted folder.

Artifact build

• macOS arm64 and x64 DMGs and runtime packs were built and inspected on a macOS Woodpecker agent before upload.

Artifact scan

• Windows portable packages were scanned with ClamAV in CI before upload.

xattr -dr com.apple.quarantine /Applications/StemDeck.app

What's new in 0.7.0 Alpha 5

Reliability

• Fixed the Windows waveform/playback freeze and Safari audio choppiness. alpha.4's new Web Audio playback engine stalled the Windows/WebView2 client: the waveform would hang for up to 60s then show nothing, and audio wouldn't play, because the waveform renderer and the engine both loaded all stems at once and saturated the connection limit. The engine is now WebView-safe. It loads the audio once and the visuals reuse those decoded buffers. Playback is smooth on Safari/macOS, the Windows freeze is gone, and waveforms plus meters render on every platform. (#185)
• Fixed missing waveforms when the audio engine is active. With the WebView-safe engine driving playback, the waveform lanes were left blank because the fallback visual layer stayed hidden. The lanes now render from the precomputed peaks whenever the engine owns playback. Verified end-to-end in Safari/WebKit. (#185)
• Fixed studio audio not loading under the new CSP. The hardened CSP (see Security) was blocking the waveform library's internal data: fetch, leaving blank lanes, 0:00, and no playback. The policy now permits data:/blob:, which are inline/same-origin schemes only, so no new network access is opened and the script protections are untouched. (#186)
• Clicking a track while it's still processing no longer wipes the progress view with the previous extraction's stale audio. (#185)
• Fixed the lanes shaking when scrolling the waveform vertically. On a short window the stems overflow vertically; smooth scrolling combined with the mixer-and-lane scroll sync formed a feedback loop that made the lanes oscillate instead of settling. Vertical scrolling in the studio is now instant, so it settles immediately. (#182)

Security

• Content-Security-Policy added to the desktop webview. script-src 'self' with no unsafe-inline or eval. Injected markup can no longer run script or reach the Tauri API. Inline scripts and onclick handlers moved out of index.html into a proper module. (#177)
• Stored XSS via library folder names fixed. Folder names are now escaped on render, and input validation rejects markup/symbols at creation time (letters, numbers, spaces, and - _ ' & ( ) . , only; 100-char max). (#176)
• SoundCloud share shortener removed from URL allowlist. on.soundcloud.com redirects to arbitrary targets; dropped it and added a yt-dlp extractor allowlist so only YouTube and SoundCloud extractors can run. (#176)

Library

• Unsorted folder is now protected from deletion. It's the default landing folder for unorganized tracks, so the delete button is hidden and the operation is blocked. (#178)

Version

• Version now derived from the git tag. Source/Docker/self-hosted installs report the correct version via /api/health automatically. No more stale 0.6.0-alpha.2. (#176)

Installing

• macOS: drop the .app into Applications and launch (run the xattr command above first).
• Windows: unzip the downloaded .zip, then run StemDeck.exe from the extracted folder.

Artifact scan

• Windows portable packages were scanned with ClamAV in CI before upload.

Artifact build

• macOS arm64 and x64 DMGs and runtime packs were built and inspected on a macOS Woodpecker agent before upload.