Eine neue MuPiBox NG Alpha ist verfügbar: 0.2.0-alpha.19. Hier findest du die Änderungen und Fehlerbehebungen dieser Version.
Was ist neu?
Changes since 0.2.0-alpha.18
NEW – Curated app catalog with one-click installation
- Admin > Provider & Dienste > Community-Apps / Plugins now displays the official app catalog directly from the public MuPiBox-NG-Plugins GitHub repository.
- Tic Tac Toe (Go/WebAssembly) and Klang-Memory (HTML/JavaScript) are available immediately. No separate ZIP download/upload is required.
- Browse names, versions, descriptions and authors. Choose Install, confirm requested permissions, and the box fetches the package from the trusted official GitHub Release.
- Installed apps show their status. When a newer version is published in the catalog, an Update button appears. Updates require confirmation and preserve saved app data and parental app-disabled state.
- Existing installations remain usable without Internet; a temporary catalog network error does not hide or remove them.
- Manual .mupiapp upload remains available in a separate, collapsed developer/testing section.
SECURITY
- Public curated catalog: https://github.com/splitti/MuPiBox-NG-Plugins/blob/main/catalog/apps.json
- Package downloads are restricted to official github.com/splitti/MuPiBox-NG-Plugins release artifacts and narrowly permitted GitHub HTTPS asset redirects; arbitrary user/third-party URLs and local/private IPs are rejected.
- Official catalog metadata includes SHA-256 checksums. The host verifies checksum, ZIP safety, manifest ID/name/version and the *exact* requested permissions before installing, and refuses downgrades.
- Admin login is mandatory for catalog retrieval and installation. Packages may not install without a fresh confirmation, and catalog metadata changing during confirmation causes the installation to abort.
- Catalog inclusion requires maintainer review and official release publication. The catalog does not yet have independent package signatures or a full malware review guarantee.
UNCHANGED
- Existing alpha.18 improvements (manual upload, media upload/editor, donation message, Audio PipeWire recovery, Bluetooth headset battery, WebDAV and display fixes) all remain.
- MuPi und die verlorenen Noten stays in the NG core; all original QML apps remain installed.
- Plugin launch is still an isolated Admin browser preview; native Qt touchscreen integration, complete audio focus, publisher-signed store, automatic background updates, per-app child time budgets and RFID app launching are not yet implemented.
TEST STATUS
- New Go catalog tests cover wrong hashes, forged manifests, malicious download URLs, untrusted redirects, unauthorized access, missing permissions, manual-update rules and successful curated installs.
- The live GitHub integration test fetched the actual official catalog and verified/downloaded both published .mupiapp release assets.
- Admin UI tests cover catalog listing, install requests, local/offline apps, developer-upload availability and seven language files.
- Full Go, Python and UI regression suites, go vet and strict ARM64 packaging are run before publication.
Back up the box before updating. For issues supply diagnostic ZIP, alpha version, exact hardware and reproduction steps.