## unslothai/unsloth — v0.1.524-beta…v0.1.525-beta

_72 commits._

### Features
- **Fail CI on new yes/no prompts in the installers (#8094)** (578cc07)
- **release-desktop: add a VirusTotal pre-flight scan of the release bundles (#8089)** (ee64eec)
- **release-desktop: cache trusted-signing-cli and add job timeouts (#8087)** (66f0ff3)
- **Studio: line up every sidebar row pill with New Chat (#8079)** (0ebc912)

### Fixes
- **[Bug] Unsloth Studio: let fenced HTML canvases honor the canvas network-access setting (#8098)** (2c8d5a6)
- **Desktop: Fix "Copy path" failing in the desktop app (#7959)** (602bf70)
- **Fix Swagger UI and ReDoc being blanked by the studio CSP (#8042)** (7fad453)
- **Desktop: Fix unresponsive model selector on Images/Video pages on macOS (#8048)** (85ceb46)
- **Fix the status runtime-fields contract test left stale by #8074 (#8088)** (e06d4be)
- **Studio: fix the Windows desktop setup log mojibake and double-printed steps (#8083)** (d8effae)
- **Fix the three Studio contract reds on main (#8072)** (bb21c0a)
- **Fix validate_dataset returning an infinite min_length for an empty dataset (#7872)** (3c5e5ca)
- **fix(studio): stop showing manifest-less cache entries as downloading (#7858) (#7864)** (8d7b5ca)
- **Studio: fix loading image and video GGUFs from a collapsed On Device row (#8053)** (c98bc3c)

### Backend
- **Improve desktop installer progress UX (#8102)** (e6d773a)
- **Studio: keep the upgrade intent when the pip fallback runs (#8112)** (310a4b5)
- **Update _utils.py** (5c4fabf)
- **Preflight the Codex GGUF check before loading the model (#7873)** (bece6d2)
- **Studio: keep the composer tool pills on one line (#8111)** (28ef8ad)
- **Studio: keep chat titles whole so a wider sidebar shows more of them (#8078)** (467e564)
- **Studio: find models already on the device before downloading, and make the first download cancellable (#7379)** (bea471a)
- **Setup: clear stale WebView caches on install and update, keep user settings and data (#7361)** (6f4cce6)
- **Keep up with transformers 5.x, TRL 0.22.x and peft (#7866)** (447d241)
- **Studio: say what a failed launcher move-aside costs (#8109)** (b741de5)
- **Studio: continue a response that stopped early (#8064)** (a4dc98b)
- **Uninstall: remove WebView runtime data so reinstalls don't serve a stale frontend (#7360)** (6712c75)
- **Studio: keep dictation status reads off the sidecar lock (#8017)** (5b73997)
- **Desktop: fit windows within the monitor work area (#8047)** (48ab41e)
- **Studio: preserve the Windows launcher during updates (#8092)** (e0a2bd8)
- **Desktop: prevent thin AppImage environment failures (#8055)** (302cf1b)
- **Guard Windows Studio installs against active runtimes (#7764)** (d495a09)
- **Bump the actions group across 1 directory with 11 updates (#8101)** (8a08bea)
- **Match the LM Studio GGUF suffix case insensitively (#8100)** (805d54a)
- **Studio: cap llama.cpp source build parallelism by RAM (#8061)** (89206b6)
- **Desktop: avoid WebKitGTK dmabuf crashes on Wayland (#8028)** (0eb2d13)
- **release-desktop: fail closed when trusted-signing-cli is missing or broken (#8106)** (5087555)
- **Security: pin the credential-send allowlist entry to the reviewed file (#8104)** (d24f0f1)
- **Studio: label the chat model bar by repo, not the HF cache path (#8090)** (7cc2691)
- **Security: baseline seven reviewed scan_packages findings (#8096)** (6afcf22)
- **Studio: stop the macOS launcher killing a warming backend, and the Mac tab blackout (#8076)** (8b34ace)
- **Desktop: start at login, hidden in the menu bar (#8033)** (ea67c53)
- **Compare the drafter path with forward slashes on Windows too (#8056)** (d4f75e9)
- **Scope the security suite's offline guard to the tests that want it (#8054)** (2b18ace)
- **Extend the version-compat matrices to the current PyPI releases (#8020)** (c6a12a9)
- **Stop referencing a TAURI signing password secret that does not exist (#8095)** (62b668f)
- **Studio: pin the /status chat template echo behaviour (#8080)** (c652e76)
- **Installer: keep status messages off the progress bar line (#8052)** (5659a9c)
- **Explain why the gated-deltanet fast kernels were disabled (#8073)** (437a75e)
- **Label an unlisted loaded model with its public id, not its raw path (#7966)** (e3c73b0)
- **Desktop: keep slide-in panels below the custom titlebar (#7954)** (bbbbaae)
- **Studio: drop the mlx-lm 0.31.3 exclusion so current mlx-vlm resolves (#7061)** (d6b1b7d)
- **Studio: bound Deep Research first output waits (#7998)** (5342a33)
- **Studio: call XInitThreads so the Linux desktop app stops exiting on startup (#8075)** (dced87f)
- **Make a fatal X11 error visible in the Linux desktop legs (#8063)** (87d7bb0)
- **Normalize the /api/health wait and extract it into one script (#8060)** (95d9f23)
- **Reuse the torch2.10 prebuilt accelerator wheels on torch 2.12 (#7495)** (5e6b4aa)
- **Studio: keep the stdio MCP session alive when a tool call is cancelled (#7625)** (2a8ed1a)
- **Studio: harden DSpark/MTP drafter detection and companion reclaim (#8037)** (c61e6e1)
- **Studio: stop /api/inference/status raising on every loaded GGUF (#8074)** (e99651b)
- **Studio: honor MLX KV cache quantization and chat template overrides (#8007)** (34a7092)
- **Desktop: stop the health watchdog bypassing the backend startup grace period (#7958)** (a60b102)
- **release-desktop: skip the Defender scan when Defender is unavailable (#8059)** (dbd5a9f)
- **Validate an explicit GGUF variant before unloading the resident model (#7862)** (e5c55e3)
- **Bump install.sh / install.ps1 pin to unsloth>=2026.8.7 (#8041)** (85823db)

### Tests
- **test: isolate the no-version gfx-override test from a real /opt/rocm (#7397)** (2d231f8)

### Chore
- **CI: move the capacity sweeper off the retiring ubuntu-22.04 image (#8105)** (650f223)
- **CI: stop main and nightly runs cancelling each other (#8070)** (db7a312)
- **CI: add an inert cross-repo capacity sweeper (do not merge yet) (#8071)** (33880a1)
- **CI: always run Studio export/load-orchestrator and the security audit (#8086)** (4c1ee96)
- **CI: stop running workflows on the pip branch, and mirror push path filters for the non-Studio workflows (#8085)** (2b1c439)
- **CI: share the Qwen3.5-2B tool-calling GGUF cache across Linux, macOS and Windows (#8069)** (3e4240f)
- **CI: share the gemma-3-270m-it model cache across Linux, macOS and Windows (#8068)** (292c479)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/unslothai/unsloth?utm_source=github-action)._