1.18.4

This is a new minor release of xdg-desktop-portal 1.18 series. Users and distributions are strongly encouraged to update to this version. These are the changes included in this release:

• Don't allow commandline arrays when the first commandline item starts with whitespace or hyphen. (CVE-2024-32462)
• Do not store device access permission if it returned an error.
• Fix crash with config files without a default backend set.

---

$ sha256sum xdg-desktop-portal-1.18.4.tar.xz
b858aa1e74e80c862790dbb912906e6eab8b1e4db9339cd759473af62b461e65  xdg-desktop-portal-1.18.4.tar.xz

1.16.1

This is a new minor release of xdg-desktop-portal 1.16 series. Users and distributions are strongly encouraged to update to this version. These are the changes included in this release:

• Don't allow commandline arrays when the first commandline item starts with whitespace or hyphen. (CVE-2024-32462)
• Set writable flag of files correctly in the FileChooser portal
• Handle bad requests more gracefully in the File Transfer portal
• Various fixes to documentation
• Various smaller bugfixes
• Translation updates

---

$ sha256sum xdg-desktop-portal-1.16.1.tar.xz
9b3ea112f19fcd953b629194a5ff377571036162d81575d11c0c8d3d6ba88d9c  xdg-desktop-portal-1.16.1.tar.xz

1.18.3

This is a new minor release of xdg-desktop-portal 1.18 series. Users and distributions are strongly encouraged to update to this version. These are the changes included in this release:

• Don't try to read D-Bus object properties of Request objects on construction.
• Fix various memory and file descriptor leaks.
• Minuscule optimization to the ScreenCast portal so that it stores restoration data with a single D-Bus call, instead of two.
• Fix a crash in the OpenURI file when trying to open a non-existing file.
• Fix a bug in PipeWire that prevented cameras from being reported reliably.
• Various smaller bug fixes.

---

$ sha256sum xdg-desktop-portal-1.18.3.tar.xz
d23c1efb66ac325396cd0ac4a063fc24a9bd9d5e9829467050ae5417d1a7b3ad  xdg-desktop-portal-1.18.3.tar.xz

1.18.2

This is a new minor release of xdg-desktop-portal 1.18 series. Users and distributions are strongly encouraged to update to this version. These are the changes included in this release:

• Pass the token to the OpenURI portal and, when missing, an empty string.
• Fix various memory and file descriptor leaks in the Document portal.
• Make files and folders openend with the Document portal close properly. This should fix cases where the Document portal prevented external devices from unmounting, due to files inside them not getting closed after applications stop using them.
• Implement FUSE getlk and setlk callbacks.This should enable using sqlite3 through the Document portal.
• Properly resolve fd symlinks before opening them with O_NOFOLLOW.
• Fix cases where the portal id is assumed to match the .desktop file name.
• Allow sending directories in the file transfer portal. This should make it possible to, among other things, drag and drop folders and files simultaneously from and to sandboxed applications.
• Fallback to a hardcoded check to xdg-desktop-portal-gtk in the absence of any other portal or configuration file, as a last resort mechanism.
• Various smaller fixes to the build system.

---

$ sha256sum xdg-desktop-portal-1.18.2.tar.xz
dfac239c5476aafd117a9a10131a2f0b142f72106c52fc03859938e00545f440  xdg-desktop-portal-1.18.2.tar.xz

1.18.1

This is a new minor release of xdg-desktop-portal 1.18 series. Users and distributions are strongly encouraged to update to this version. These are the changes included in this release:

• Communicate better when the Background portal kills an app
• Properly quote Flatpak command in the Background portal
• Improve documentation of the "cursor_mode" propery of the ScreenCast backend D-Bus interface
• Fix ScreenCast portal removing transient restore permissions too early. This fixes screen sharing dialogs on Chromium asking for the screen multiple times.
• Only send the Closed session signal to the sender
• Add Meson options to disable building with Bubblewrap, and without the Flatpak portal documentation. Disabling Bubblewrap is highly discouraged, and only meant to be used on platforms that do not currently support it. By disabling Bubblewrap, bitmap validation happens without a sandbox, which is highly insecure since image parsing is a common source of exploits. Really, just do not disable Bubblewrap please.
• Improve the manpage of portals.conf
• Various spelling fixes to the Document portal
• Add a new website! We don't have a fancy domain yet, but the website can be accessed at https://flatpak.github.io/xdg-desktop-portal/
• Improve pid mapping for host system apps. This should get rid of some rare, unnecessary warnings.
• Adjust documentation of Global Shortcuts portal's timestamps to millisecond granularity
• Bump minimum Meson version to 0.58

---

$ sha256sum xdg-desktop-portal-1.18.1.tar.xz
4560478e78b1e246c53e4b0540e63748187143942d6f202a4dcd4864318bfd10  xdg-desktop-portal-1.18.1.tar.xz

1.18.0

This is the first stable release of the 1.18 series. Users and distributions are strongly encouraged to update to this version. These are the highlights of this release:

Highlights

• A new config-based portal matching mechanism that gives more precise control over which portal backends are picked for each portal.
• New portals: Clipboard and Input Capture
• The settings portal now documents an 'accent-color' key

Other changes

New portal APIs:

• Introduce a new Clipboard portal. This portal extends the Remote Desktop portal by adding support for sharing clipboard between remote machines.
• Introduce a new Input Capture portal. This portal adds mechanisms for taking control of input devices. The primary usage model is centered around the InputLeap and Synergy use cases, where local devices are used to control remote displays.
• Add an "accept-label" option the the Print portal. This lets apps suggest a proper label to the print operation.
• Document a new 'accent-color' key in the Settings portal. This key represents an arbitrary color in sRGB colorspace. How implementations of the portal provide this key is entirely dependent on their internal policies and design.
• Support restoring remote desktop sessions
• Introduce the ReadOne() method in the Settings portal. This method is now preferred over the Read() method, as Read() mistakenly returned a variant inside a variant. The Read() method will continue to exist for compatibility with existing apps, but its usage is deprecated. We recommend apps to port to the ReadOne() method. Apps can decide whether to use ReadOne() or Read() by looking at the version of the Settings portal.

Changes that might be relevant for distributors:

• Rework how portal implementations are loaded. This new, more robust system allows selecting specific backends for specific portals, and layering them when necessary. Platforms that provide portals implementation are encouraged to provide a suitable configuration file.
• Drop the Autotools build. Meson is now the only supported build system.
• The PipeWire dependency is now mandatory
• Bump GLib dependency to 2.66

Misc changes:

• Improve robustness of the OpenURI portal by validating more URIs
• Various small visual tweaks to the generated documentation
• Various fixes to the Global Shortcuts portal
• Stop using the deprecated GTimeVal struct
• Document xdg-desktop-portal versioning scheme
• Fix various issues in the OpenURI portal
• Bump interface version of the Printer portal to 2
• Validate addresses following the HTML specs in the Email portal
• Document minimum version of the new ReadOne() method of the Settings portal
• Add a mapping id property to the ScreenCast portal
• Add activation token parameter to the Email portal
• Test tarball generation in CI
• Translation updates

---

$ sha256sum xdg-desktop-portal-1.18.0.tar.xz
5ea35a6420a98b598c83355fc19feaea8ba999149641bf84079b0c572b00f5bd  xdg-desktop-portal-1.18.0.tar.xz

1.17.2

This is very likely to be the last unstable release before 1.18.0

• Document minimum version of the new ReadOne() method of the Settings portal
• Add a mapping id property to the ScreenCast portal
• Add activation token parameter to the Email portal
• Test tarball generation in CI

$ sha256sum xdg-desktop-portal-1.17.2.tar.xz
1e861eb991e60e56b06c64dc03284c02f9913f9a426d8955f8d529ff8f3f6d96  xdg-desktop-portal-1.17.2.tar.xz

1.17.1

• Document xdg-desktop-portal versioning scheme
• Fix various issues in the OpenURI portal
• Introduce the ReadOne() method in the Settings portal. This method is now preferred over the Read() method, as Read() mistakenly returned a variant inside a variant. The Read() method will continue to exist for compatibility with existing apps, but its usage is deprecated. We recommend apps to port to the ReadOne() method. Apps can decide whether to use ReadOne() or Read() by looking at the version of the Settings portal.
• Improvements to the new config-based portal matching mechanism. Config files are now searched in standard paths, in a way that is compatible to other system components (e.g. MIME types).
• Various small visual tweaks to the generated documentation
• Document a new 'accent-color' key in the Settings portal. This key represents an arbitrary color in sRGB colorspace. How implementations of the portal provide this key is entirely dependent on their internal policies and design.
• Translation updates

$ sha256sum xdg-desktop-portal-1.17.1.tar.xz
bd240649bf03818d4a0df5b05242518da95aeda9a0fe37ac9b4a1c3fd7ecabcd  xdg-desktop-portal-1.17.1.tar.xz

1.17.0

• Drop the Autotools build. Meson is now the only supported build system.
• Rework how portal implementations are loaded. This new, more robust system allows selecting specific backends for specific portals, and layering them when necessary. Platforms that provide portals implementation are encouraged to provide a suitable configuration file.
• Introduce a new Clipboard portal. This portal extends the Remote Desktop portal by adding support for sharing clipboard between remote machines.
• Introduce a new Input Capture portal. This portal adds mechanisms for taking control of input devices. The primary usage model is centered around the InputLeap and Synergy use cases, where local devices are used to control remote displays.
• Stop using the deprecated GTimeVal struct
• Bump GLib dependency to 2.66
• Add an "accept-label" option the the Print portal. This lets apps suggest a proper label to the print operation.
• Various fixes to the Global Shortcuts portal
• Support restoring remote desktop sessions
• Improve robustness of the OpenURI portal by validating more URIs
• The PipeWire dependency is now mandatory
• Various improvements for the test suite
• Translation updates

$ sha256sum xdg-desktop-portal-1.17.0.tar.xz
cafa7c4289decf203d21829abbbefc3e968c9975664685e151db2c701b532a8b  xdg-desktop-portal-1.17.0.tar.xz

1.16.0

• Introduce a new background monitoring service. This allows desktop environments to list applications that are running in background, that is, sandboxed applications running without a visible window. Desktop environments can display these background running applications in their interfaces, and allow users to control their execution.
• Introduce the Global Shortcuts portal. This portal allows applications to register and receive keyboard shortcuts even when they're not focused. This was a highly requested feature, especially on Wayland desktops. There are improvements to come, but portal backends can now implement this new portal.
• Various CI improvements
• Translation updates

$ sha256sum xdg-desktop-portal-1.16.0.tar.xz
5b41a5915c11851493d8c33b9783f147a0a6f419db80ad760e84cd3420fd8c19  _build/meson-dist/xdg-desktop-portal-1.16.0.tar.xz