Mobile Remote Access — fixed
On every 1.0.7 install, the mobile PWA at /m?token=… was returning 404 over the Cloudflare tunnel, making QR-code and link-based phone pairing completely unusable. Root cause: the PyInstaller spec silently dropped missing data paths, so the Next.js static export never made it into the bundled backend and FastAPI's /m route was therefore never registered. The desktop UI kept working because Tauri reads the frontend from its own app resources, which hid the break entirely from local testing. The spec now treats every data entry as required and aborts the build if any are missing.
Auto-Update Signature — fixed
Users trying to move off 1.0.6 / 1.0.7 on macOS were hitting "signature verification failed" on every update attempt. Root cause: the updater manifest pointed at an unversioned OpenYak.app.tar.gz, so uploading a new release overwrote the previous tarball while the old latest.json signature was still live — producing a byte/signature mismatch for anyone mid-upgrade. From 1.0.8 onward, macOS updater artifacts are published as OpenYak_${VERSION}_${ARCH}.app.tar.gz and each release has its own immutable, signature-bound download.
Build Pipeline Hardening
A new verify-bundle gate runs after every PyInstaller build: it performs static checks on 16 required assets (backend binary, Alembic, agent prompts, bundled skills/plugins, frontend export, extracted Python packages) and then runs a real runtime smoke test — launches the bundled binary on a throwaway port, fetches /m, and requires HTTP 200 with HTML. This is the exact failure mode from 1.0.7 turned into a hard build-time gate so it cannot silently regress again. The release pipeline also fails loudly if any platform's signature or artifact filename is missing before publishing the update manifest.
Upgrading from 1.0.7
Users already on 1.0.7 will receive this update automatically through the in-app updater. If you are stuck on 1.0.7 with repeated "signature verification failed" errors, re-download the installer from the downloads page and reinstall once — from 1.0.8 onward auto-update will stay healthy.