# Created with komac v2.16.0 # yaml-language-server: $schema=https://aka.ms/winget-manifest.defaultLocale.1.12.0.schema.json PackageIdentifier: AdamGell.CMTraceOpen PackageVersion: 1.4.0 PackageLocale: en-US Publisher: Adam Gell PublisherUrl: https://github.com/adamgell PublisherSupportUrl: https://github.com/adamgell/cmtraceopen/issues PackageName: CMTrace Open PackageUrl: https://github.com/adamgell/cmtraceopen License: MIT LicenseUrl: https://github.com/adamgell/cmtraceopen/blob/HEAD/LICENSE ShortDescription: An open-source log viewer inspired by Microsoft's CMTrace.exe. Tags: - cmtrace - intune ReleaseNotes: |- CMTrace Open v1.4.0 A modern, open-source, cross-platform replacement for Microsoft's CMTrace.exe — a log viewer for Windows troubleshooting with built-in Intune (IME) diagnostics, DSRegCmd analysis, and real-time log tailing. Highlights - CCM/PSADT type="0" now renders as a first-class Success (green tick) instead of being flattened into Info — matching OneTrace. Wired through the severity filter, row rendering, Quick Stats, and status bar, with Success palettes across all 8 themes. (#248, closes #211) - Error navigation — jump straight to the next or previous error/warning without scrolling. (#192) - Teams (MSIX) client log collection — the collector and known-sources list now cover the new Microsoft Teams log locations. (#205, #242) - Log Text column auto-fits to its widest message the first time you open a file. - Now built on Tauri 2.11 and TypeScript 7, with signed builds for Windows (x64/arm64), macOS (Apple Silicon), and Linux — in both Full and Lite editions. Downloads ─────────────────────┬─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── Platform │Files ─────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── Windows x64 / arm64 │CMTrace-Open_1.4.0_-setup.exe (NSIS installer), CMTrace-Open_1.4.0_.msi, CMTrace-Open_1.4.0_.exe (Full standalone), CMTrace-Open-Lite_1.4.0_.exe (Lite │standalone) ─────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── macOS (Apple Silicon)│CMTrace.Open_1.4.0_aarch64.dmg (signed + notarized) ─────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── Linux x64 │CMTrace.Open_1.4.0_amd64.deb, CMTrace.Open_1.4.0_amd64.AppImage, or CMTrace.Open-1.4.0-1.x86_64.rpm ─────────────────────┴─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── Windows builds are signed with Azure Trusted Signing (a re-issued certificate — SmartScreen reputation is rebuilding, so fresh installs may briefly show an "unknown publisher" prompt; More info → Run anyway is safe). CycloneDX SBOMs (sbom-rust.cdx.json, sbom-npm.cdx.json) and build-provenance attestations are attached. Added - Log Text column auto-fit on load: The Log Text (message) column now expands automatically to fit its widest visible content the first time a file is opened, so long messages are readable without a manual resize. Auto-fit runs once per source, measures against an actually rendered row so the resolved font matches the double-click Fit action exactly, and only ever grows the column past its baseline width — never shrinks it. A manual drag-resize or explicit Fit is treated as a user-owned override that auto-fit will not overwrite. - CCM type="0" Success severity (#248, closes #211): CCM/PSADT log lines with type="0" — a completed operation that OneTrace renders with a green tick — now map to a new first-class Success severity instead of being flattened into Info. Severity gains a Success variant end-to-end (Rust and TypeScript) and is wired through the severity filter, row rendering, the Quick Stats cards, and the status bar, with per-theme Success palette entries added across all 8 themes. A sanitized real-world PSADT install log is bundled as a regression fixture with an integration test. - Log error navigation (#192): Toolbar controls to jump straight to the previous or next error/warning entry in the log view, so you can step through problems without scrolling. - Teams (MSIX) client log collection (#205, #242): The log collector and known-sources list now cover the new Microsoft Teams (MSIX) client log locations. Fixed - CCM empty/absent type coercion (#248): Fixed a latent bug where a missing, empty, or unparseable CCM type field was coerced to 0. Now that type="0" maps to Success, those lines preserve a None type and correctly fall back to text-based severity detection. Known numeric types map directly (0→Success, 1→Info, 2→Warning, 3→Error) and unknown numeric types fall back to Info. - Session filter restore and persistent error logging (#193, #244): Opening a saved session now restores the filter that was active when it was saved, and the app writes persistent error logs (via tauri-plugin-log) to make troubleshooting easier. - Tail view reset on truncation or rotation (#234, #243): When a tailed file is truncated or rotated, the view now resets and re-reads from the start instead of showing stale or duplicated lines. - Log marker key source hygiene (#250): Replaced a raw NUL control byte in the row-marker key delimiter with the \x00 escape sequence — byte-identical at runtime, but the source file is now plain text. No behavior change. Changed - Tauri 2.11 runtime (#240): Upgraded the app to the Tauri 2.11 stack (runtime/webview) to match the frontend, and repaired the Cargo workspace and a stale lockfile so CI, nightly, and release builds pass again. - TypeScript 7 (#247): Upgraded the frontend compiler from TypeScript 6 to the native (Go) TypeScript 7.0.2 (GA). No source changes were required, and type-checking is ~5.5× faster (tsc --noEmit ~3.8s → ~0.7s), speeding up both CI and local builds. - Clippy --all-targets enforcement (#245): CI now runs cargo clippy --all-targets -D warnings (full and Lite), catching lints in test and benchmark targets that previously slipped through; the two latent lints this surfaced were fixed. - Re-issued code-signing certificate: Windows builds are now signed with a re-issued Azure Trusted Signing certificate (still a valid Microsoft Public Trust certificate; macOS builds remain signed and notarized). Because the signing identity was renewed, Windows SmartScreen reputation is rebuilding — fresh installs may briefly show an "unrecognized app" prompt. The installers are validly signed; More info → Run anyway is safe. Documentation - Full vs Lite editions in README (#227, #241): New "Editions: Full vs Lite" section describing what each download includes — Full (default) bundles every specialized workspace and tool; Lite (--no-default-features) is the core log viewer plus the Timeline and DNS/DHCP workspaces, with a smaller binary. Security - Patch tar and rkyv advisories (#249): Bumped tar 0.4.45 → 0.4.46 (GHSA-3pv8-6f4r-ffg2, PAX header desynchronization) and rkyv 0.8.15 → 0.8.16 (GHSA-vfvv-c25p-m7mm, panic-safety bugs enabling arbitrary code execution), resolving the two fixable Dependabot alerts. The remaining glib 0.18 unsoundness (RUSTSEC-2024-0429) is fixed in glib 0.20 but blocked upstream — gtk 0.18, pinned transitively by Tauri 2.11 on Linux, requires glib ^0.18 — so it is documented as an accepted, warn-level advisory until Tauri adopts gtk-rs 0.20. - Ignore quick-xml RUSTSEC-2026-0194/0195 (#239): Two newly published quick-xml advisories (transitive-only on Linux via the Tauri clipboard stack, not bumpable without an upstream update) are ignored alongside the other Tauri Linux transitive advisories, matching existing policy. - Microsoft Security DevOps workflow: Added a GitHub Actions workflow that runs Microsoft Security DevOps (MSDO) static analysis over the repository. Build & CI - Signed nightly build channel: Stood up a signed nightly release channel with its own updater feed and a published "nightly builds" page. - Nightly failure alerting (#236): A notify-failure job opens/updates a tracking issue when a scheduled nightly run fails, and a notify-recovery job auto-closes it once a nightly fully succeeds again. Dependencies - Rust: evtx 0.11 → 0.12 (#217); added tauri-plugin-log (#244); tar 0.4.45 → 0.4.46 and rkyv 0.8.15 → 0.8.16 (security patches, #249). - Frontend (production): react/react-dom 19.2.5 → 19.2.7, zustand 5.0.12 → 5.0.14, @fluentui/react-components 9.73.8 → 9.74.3, @fluentui/react-charts 9.3.18 → 9.3.21, @fluentui/react-icons 2.0.325 → 2.0.331, @tanstack/react-virtual 3.13.24 → 3.14.4, and the @tauri-apps/* plugins (#209, #233). - Frontend (dev): typescript 6.0.3 → 7.0.2, vite 8.0.9 → 8.1.3, @tauri-apps/cli 2.11.0 → 2.11.4, @playwright/test 1.59.1 → 1.61.1, and others (#222, #235). - GitHub Actions: azure/trusted-signing-action → 2.0.0, actions/checkout → 7.0.0, tauri-apps/tauri-action → 1.0.0, and others (#188, #197–#232). Full changelog: v1.3.2...v1.4.0 ReleaseNotesUrl: https://github.com/adamgell/cmtraceopen/releases/tag/v1.4.0 Documentations: - DocumentLabel: Wiki DocumentUrl: https://github.com/adamgell/cmtraceopen/wiki ManifestType: defaultLocale ManifestVersion: 1.12.0