From 382a9389ad3394ae622f6193ffdb1964f48fae5c Mon Sep 17 00:00:00 2001
From: Jure <44338+hoornet@users.noreply.github.com>
Date: Sat, 18 Jul 2026 14:43:50 +0200
Subject: [PATCH] =?UTF-8?q?Release=20v0.14.2=20=E2=80=94=20Secret=20Servic?=
 =?UTF-8?q?e=20keychain=20on=20Linux=20(Flatpak-ready,=20survives=20reboot?=
 =?UTF-8?q?s)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Linux key storage moves from the kernel keyring (linux-keyutils) to the
system secret service (gnome-keyring/KWallet, via dbus-secret-service). The
kernel keyring does not persist across Flatpak launches or reliably across
reboots; the secret service persists to disk and works in the sandbox via
--talk-name=org.freedesktop.secrets. Verified in the Flatpak build: log in,
full quit, relaunch, still signed in. Linux users re-enter their key once
(entry moves backends). macOS/Windows unchanged.

Also pins the Flathub manifest git-source to the v0.14.2 tag.
---
 CHANGELOG.md                    | 9 +++++++++
 PKGBUILD                        | 2 +-
 flatpak/com.veganostr.Vega.yaml | 4 ++--
 package.json                    | 2 +-
 src-tauri/Cargo.lock            | 2 +-
 src-tauri/Cargo.toml            | 2 +-
 src-tauri/tauri.conf.json       | 2 +-
 7 files changed, 16 insertions(+), 7 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 80768b9..57e17de 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,15 @@
 
 > Note: entries for v0.12.10 through v0.13.1 live in the [GitHub Releases](https://github.com/hoornet/vega/releases) notes; this file resumes at v0.13.2.
 
+## v0.14.2 — Reliable key storage on Linux (2026-07-18)
+
+### Changed
+- **Linux key storage now uses the system secret service** (gnome-keyring / KWallet) instead of the kernel keyring. Your secret key now survives reboots reliably, and — importantly — persists inside sandboxed installs (Flatpak), which the kernel keyring could not. macOS and Windows are unchanged.
+
+### Migration
+- **Linux users re-enter their key once** after this update. The previous kernel-keyring entry isn't readable by the new backend, so on first launch you'll sign in again; after that it persists as normal.
+- Requires a running secret-service provider (gnome-keyring or KWallet — standard on GNOME/KDE and most desktops).
+
 ## v0.14.1 — Fix Support view crash, add proxy/Tor support (2026-07-15)
 
 ### Fixed
diff --git a/PKGBUILD b/PKGBUILD
index 343ed38..b64756c 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,6 +1,6 @@
 # Maintainer: hoornet <hoornet@users.noreply.github.com>
 pkgname=vega-nostr
-pkgver=0.14.1
+pkgver=0.14.2
 pkgrel=1
 pkgdesc="Cross-platform Nostr desktop client with Lightning integration"
 arch=('x86_64')
diff --git a/flatpak/com.veganostr.Vega.yaml b/flatpak/com.veganostr.Vega.yaml
index 8ea4979..2c42ba8 100644
--- a/flatpak/com.veganostr.Vega.yaml
+++ b/flatpak/com.veganostr.Vega.yaml
@@ -38,8 +38,8 @@ modules:
     sources:
       - type: git
         url: https://github.com/hoornet/vega.git
-        tag: v0.14.1
-        commit: e0a7c2e1a4368e22b6ca6982d02857ed65d8ef51
+        tag: v0.14.2
+        # commit: <filled in the flathub repo with the v0.14.2 tag's SHA>
 
       # flatpak-node-generator npm -o node-sources.json package-lock.json
       - node-sources.json
diff --git a/package.json b/package.json
index 19e3832..5269ace 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "vega",
   "private": true,
-  "version": "0.14.1",
+  "version": "0.14.2",
   "type": "module",
   "scripts": {
     "dev": "vite",
diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
index 4e51813..f00f3b5 100644
--- a/src-tauri/Cargo.lock
+++ b/src-tauri/Cargo.lock
@@ -5607,7 +5607,7 @@ checksum = "accd4ea62f7bb7a82fe23066fb0957d48ef677f6eeb8215f372f52e48bb32426"
 
 [[package]]
 name = "vega"
-version = "0.14.1"
+version = "0.14.2"
 dependencies = [
  "dirs",
  "futures-util",
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index 70cdf99..492f6da 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "vega"
-version = "0.14.1"
+version = "0.14.2"
 description = "Cross-platform Nostr desktop client with Lightning integration"
 authors = ["hoornet"]
 edition = "2021"
diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json
index 2d82e4e..8bc809c 100644
--- a/src-tauri/tauri.conf.json
+++ b/src-tauri/tauri.conf.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Vega",
-  "version": "0.14.1",
+  "version": "0.14.2",
   "identifier": "com.veganostr.Vega",
   "build": {
     "beforeDevCommand": "npm run dev",