CoreTerm

← Back to downloads

Changelog

All notable changes to CoreTerm, newest first. Dates are the day the version was published.

The rule for numbers: patch for fixes and wording, minor for new features or changed behaviour. Anything handed to anyone gets a number of its own — a build shared twice under one number is a build nobody can identify from a bug report.

0.5.0 — 5 August 2026

Changed

• Session colours are named after the colour again. They used to be called Production, Staging, Development, Internal, Customer and Archive. That presumed a taxonomy: someone whose folders are one per customer has no "staging", and had to translate "I want the green one" into "so, Development". They are now Red, Yellow, Green, Cyan, Blue, Purple and Grey — what the dot actually looks like.

Added

• Say what a colour means to you. Settings → Connection → Session colours takes an optional label per colour, shown after the colour name: "Green — Development". Left empty, only the colour appears. It travels in the vault, so it is the same on every machine — a red dot meaning "production" on one and nothing on another would be worse than not having it.
• A seventh colour, a real blue. The palette had a teal called "blue" and no blue at all.

Note

Existing colours are untouched. The stored IDs did not change — only what is printed next to them — so nothing needs re-applying.

0.4.1 — 5 August 2026

Fixed

• Setting a colour on a whole folder did nothing. session.color holds an ID — red, amber — which everything that draws a colour resolves through one shared list. The bulk dialog shipped with a hand-written palette of hex values instead, so it wrote something no lookup could match. An unknown ID reads as "no colour" by design, which is why the setting appeared to be stored and then simply ignored. The list is now derived from the shared one, so the two cannot disagree again, and the picker shows the actual colour next to its name.

If you already applied a colour this way, apply it again — the old value is still in the vault and still means nothing.

• The key picker in that dialog was squeezed into the margin. Its width lost to the w-full that the shared input style already carries: Tailwind resolves competing utilities by stylesheet order, not by the order they are written. The two selects are stacked now, which needs no width at all.

0.4.0 — 5 August 2026

Added

• Apply settings to a whole folder. Right-click a folder in the sessions tree and pick *Apply to All Sessions…*. Sets the authentication method and SSH key, the username, the port or the colour across every session in it, optionally including subfolders. Each row is opt-in: only what you tick is written, so nothing silently flattens whatever differed between sessions.
• Reconnect a dead session with R. When a session times out or drops, the terminal says so and R dials the same host again. The key is ignored while a session is alive, so it can never swallow a keystroke that was meant for the shell.
• Select files with the mouse. Drag a rectangle over empty space in the SFTP browser to select what it touches; hold Ctrl to add to the selection. Dragging *from* a file still drags it out to the desktop, unchanged.
• Ctrl+A selects every file in the SFTP browser, and Esc clears the selection. Both are scoped to the file list, so neither fires while you are typing in the terminal — where Ctrl+A means "start of line".
• This changelog, and a version history on the download page.

Changed

• Enter confirms a multi-line paste. The guard interrupts a paste you already asked for, so agreeing with yourself should not need the mouse. Shift+Enter takes the safe branch and pastes as one line; Esc cancels.

0.3.0 — 4 August 2026

Changed

• The client is now called CoreTerm. "Moba" is the distinctive part of MobaXterm, and carrying it in a directly competing SSH client is a trademark risk rather than merely derivative. "Open" promised open source, which this is not.
• New application icon.

Added

• Your data moves itself. The data directory is derived from the application identifier, which changed with the name, so the first start of the renamed app would otherwise have shown an empty vault. CoreTerm copies the vault, its backups and the sync settings across before anything reads them. It copies rather than moves: the old directory stays as a backup with a note in it saying where the data went and that it can be deleted.
• Package repositories for Arch/CachyOS/Manjaro (pacman), Debian/Ubuntu/ Mint (apt) and Fedora/Nobara/RHEL/openSUSE (dnf, zypper). Package-manager installs are exactly the ones the built-in updater must not touch, so they now update the normal way — pacman -Syu, apt upgrade, dnf upgrade — without the application having to be running.

Notes for people upgrading

• On Windows the old *OpenMobaSSH* entry stays in the programs list and has to be uninstalled by hand: the installer carries a new name and therefore knows nothing about the old entry.
• On .deb and .rpm the new package replaces the old one automatically.
• Installations from before the rename still find updates: they poll a different address, which is served alongside the new one for the time being.

0.2.1 — 4 August 2026

Fixed

• Powerline characters were too wide. The symbols-only font shipped in 0.2.0 removed the empty boxes but got the size wrong: at font size 14 a terminal cell is 8.20 pixels wide while that font advances a full em — 14.00 pixels. Every separator was 1.707× too wide and pushed the line apart.

That is not a defect in the font. A symbols-only font belongs to no text font and must pick some width; matching a particular one is precisely what it cannot do. Patched Nerd Fonts exist for this, with the icons redrawn onto the host font's cell. CoreTerm now ships CaskaydiaMono NFM — Cascadia Mono, patched — so the text looks the same as before and ten separators in a row occupy exactly ten cells.

A font you set yourself is left alone. For icons there too, use a patched Nerd Font build of it; the font setting says so and offers a way back.

• "Show" on the update banner now opens the update section directly. It used to open the settings on whatever section was last used, leaving you to find the update yourself — the one thing the button existed to spare you.

Added

• The download page carries every package with checksums. It previously had only the two that can update themselves, which broke the download link for exactly the .deb/.rpm/Arch installs that depend on it.

0.2.0 — 4 August 2026

The first version with a number and an update mechanism.

Added

• Updates. The app asks whether there is anything newer after every vault unlock, and therefore after every start. Settings → Updates shows the installed version and a button to look now. Switching it off means no request is made at all — not one whose result is merely hidden.

Every package is signed, and the public key is compiled into the application: a compromised update server cannot hand out a version of its own, only withhold updates or serve an old one.

The app installs updates only where it owns its own files — the Windows installer and the AppImage. A package from pacman, deb or rpm belongs to the package manager, which keeps checksums for it and expects to be the one that changes it.

• Remote port forwarding (-R), alongside local and dynamic.
• A help page for port forwarding, behind the question mark, with a worked example of each direction.
• Run one command on several hosts at once.
• Snippet library, and a command run automatically after login.
• Colour per session, shown in the tree, the tab and the terminal edge.
• Generate an SSH key and deploy it to a server, appending to authorized_keys without disturbing what is already there.
• A prompt when a host key has changed, instead of a refusal you cannot act on.
• SSH agent support, and the default key is now also tried for sessions configured for password authentication.
• Copy on selection can be switched off in the settings.

Fixed

• The terminal felt jerky. It was not the terminal but the number of messages: one per SSH packet crossing the process boundary, each with its own encoding and framing. A journalctl produces thousands per second. Output is now gathered for 8 ms or 64 KB, whichever comes first.
• Deleted folders came back after a restart.
• Right-click paste on Linux.
• Network rate is shown in Mbit/s, not MB/s.
• 13 security findings from an adversarial review of the whole codebase, including an algorithm-downgrade hole in host key checking and a path traversal in SFTP downloads.

0.1.0 — 3 August 2026

First release. SSH and SFTP in one window, sessions in an encrypted vault (AES-256-GCM, Argon2id), port forwarding, a file browser that follows the terminal's working directory, and synchronisation of the vault between machines.