4.5.28.3779

[jsmorley]

Small change in plans guys...

We realized that the machine in the middle attack scenario was a very serious security risk for our users. and so decided to get out a very quick release to address pretty much just that.

We went ahead and released version v4.5.19.3753 which most users should get through auto-update, or can manually get at https://www.rainmeter.net/.

Since this was also addressed in this v4.5.28.3779 pre-release version you guys are currently testing, you guys won't need to do anything just now, other than carry on testing as you can, and again, let us know of any issues. The 4.5.19.3753 release was done to ensure the wider base of users got that fix as soon as possible.

We have a few more tweaks to do, and then we will do a full release in the next couple of days.

[jsmorley]

Here is that list of changes for the pre-release, which I needed to remove for the quick fix release.

Rainmeter Build: Change Rainmeter updater URL to use HTTPS, to prevent possible "Man in the Middle" attack.
Ping Plugin: Fixed timing issue with FinishAction.
Command Handler: Fixed issue with the !ToggleConfig bang.
AudioLevel Plugin: Fix first FFT band.
Logging: Fix issue with log messages above 1024 characters.
ConfigParser: Fixed issue with @Include insertion position during recursive loading of ini files.
Skin: Fixed issue with FadeDuration.
Rainmeter Build: Changed build process and digital signing.
System: Added extra monitor debug information to the log.
Lua: Prevent crash when calling a CRT function with an invalid parameter.
Logging: Provide some generic debug information for invalid parameters in some cases.
Application: Prevent renaming of Rainmeter.exe.
ConfigParser: Log potential self-references with nested variable parsing.
Bangs: Improve logging in some cases.
Rainmeter Build: Changed and automated deployment to WinGet.

[Israeli]

I think you should release this new version.
I used it now already many days and works totally stable, never had any problems at all.