Thorium: baixar versions anteriors

Thorium Desktop reader version 3.5.1 was published on 02 September 2026.

Here are links to the "technical" changelogs:
- https://github.com/edrlab/thorium-reader/blob/develop/changelogs/CHANGELOG-v3.5.1.md
- https://github.com/edrlab/thorium-reader/compare/v3.5.0...v3.5.1
User-friendly release notes and a blog post are published on the https://www.thoriumreader.com website.
Expand the 'Assets' section below to reveal the download links.
- Note that the terms x64 and amd64 in the filenames refer to the Intel computer architecture (also sometimes known as x86_64, which includes both Intel and AMD chipsets).
- The term arm64 refers to modern ARM hardware including Apple Silicon "M" computers.
If in doubt:
- Apple users should download the arm64 variant.
- Windows / Linux users should download the x64 / amd64 variants, respectively.
The application was built automatically on GitHub (Microsoft) servers. The build was recorded here:
https://github.com/edrlab/thorium-reader/actions/runs/33608586429

Summary
Version 3.4.0 was released on 08 April 2026.

This release includes the following (notable) new features, improvements and bug fixes:
- Upgraded to Electron v41, Chromium v146, NodeJS v24
- Updated translations
- Fixed accessibility issues with screen reader heading hierarchy and keyboard tab cycling order
- New feature: filtering and sorting directly in the publication "grid" mode of the library window (complements existing "table" view functionality)
- New feature: favorite OPDS feed sorting
- New feature: keyboard shortcut "export to HTML" function
- Updated feature: the LCP passphrase input text field can now show unmasked clear text
- Fixed OPDS "breadcrumb" user interface affordance
- Fixed MathML support, MathJax could not be activated
- Fixed a zoom issue with "fixed layout" / pre-paginated EPUBs
- Fix in TTS readaloud and EPUB Media Overlays, the temporary disabling of popup footnotes wasn't being restored properly, as well as the notes highlights (annotations and bookmarks)
- Fixed MacOS issue when bringing re-activating the application to bring the reader window into the foreground (over the library window)
- Fixed "customization profiles" (new feature which was broken on Windows in version 3.3.0). Reminder: this feature offers an alternative to forking the Thorium Desktop codebase, via a plugin mechanism that declaratively expresses modifications to "vanilla" Thorium Desktop reader (color themes, bundled publications and feeds, application logo, etc.)
- Fixed notification toasts which were sometimes incorrectly terminated
- Fix: LCP passphrase prompt was incorrectly displayed when imported protected publications (directly as EPUB or via LCPL) were added and non-already existing in the bookshelf (but with an existing cached valid passphrase based on provider mapping)
- Fix: network requests at application launch (i.e. telemetry ping and version check) could potentially delay the boot process and compromise the application "ready" state
- Fixed bookshelf table layour, translated column headers.
- Fix: in version 3.3.0 a more performant filesystem persistence of "notes" (i.e. annotations and bookmarks) was introduced, using a dedicated SQLite database separate from other scopes of application state. Backward compatibility with the JSON format of older versions of the application was preserved but this caused application shutdown to be very slow (sometimes even hanging and ultimately crashing). In version 3.4.0, the backward compatibility is removed and consequently users are advised to manually backup their notes when they wish to revert to an older version of Thorium Desktop reader
- Fix: under the hood, further changes to filesystem persistence (i.e. preservation of application state) were introduced in order to improve performance and hopefully address rare data loss issues experienced by some Windows users. The user interface indicates missing publications and additional logging is now available for remote troubleshooting (user-accessible text files created in Thorium Desktop's application data folder). This is groundwork for a planned future feature that will allow users to store publications inside an arbitrary folder (this might be useful to address filesystem storage limitations, notably on Windows where a large amount of ebooks / audiobooks could cause the operating system to interfere with application data and potentially corrupt Thorium Desktop's internal database)

Summary
Version 3.3.0 was released on 09 December 2025.

THIS RELEASE FIXES A CRITICAL SECURITY BUG. There is no known exploit in the wild, but the risk does exist and must be taken seriously. It is therefore extremely recommended to update Thorium Desktop reader and to stop using previous releases. The bugfix will not be "backported" to earlier versions.
This is a high-severity vulnerability in the sense that a successful attack would require no user interaction other than opening and reading an EPUB file containing malicious Javascript (for example by double-clicking on the EPUB from the file explorer, or by clicking on a web link associated with Thorium Desktop reader). If such hypothetical attack occured, it would likely be silent and hard to detect.
The security hole would allow malicious Javascript to escape the web browser sandbox and to run programs on the victim's computer. This type of attack is known as RCE "Remote Code Execution", which could potentially result in personal information being exfiltrated, backdoors being installed, files being deleted, etc.
The security hole was first discovered by Thorium Desktop developers, immediately followed by a wider audit of the potential attack surface across the application's software stack. This led to further security fixes listed in the itemized changelog below.
The vulnerability was also reported by security researchers who provided an example script to demonstrate the method. This will be documented and the reporters will be credited for their input. A detailed technical report will be published and kept up-to-date directly in the source code repository. Maintainers of Thorium Desktop forks will be strongly encouraged to integrate fixes in their own codebase.
Note that when EPUB publications are distributed by trusted publishers, it is unlikely that users might fall victims of such malicious EPUBs / Javascript. However, many e-books are distributed via alternative channels that could be targeted by ill-intentioned actors to exploit the vulnerabilities present in older Thorium Desktop releases. For this reason, it is strongly recommended to update the application.

This release includes the following (notable) new features, improvements and bug fixes:
- Upgraded to Electron v38
- Updated translations
- New feature: "customization profiles". This offers an alternative to forking the Thorium Desktop codebase, via a plugin mechanism that declaratively expresses modifications to "vanilla" Thorium Desktop reader (color themes, bundled publications and feeds, application logo, etc.).
- Fix: more performant filesystem persistence of "notes" (annotations and bookmarks) via a dedicated SQLite database, backward compatibility with the JSON format of older versions of the application (this currently causes a delay when the software closes, but this will be fixed in a near-future revision)
- Fix: improved integration of OPDS with the local bookshelf, ability to navigate to the downloaded publication.
- Fix: HTML tables that are constrained by the viewport height now take into account the zoom / font size.
- Fix: pages.xml pagemap support, handling of encrypted resources (does not crash XML parser anymore)
- Fix: page list GUI was crashing because of missing link title (page break name).
- Fix(internationalization): locale-dependent date display.
- Fix(OPDS): filter buy/borrow/subscribe links based on supported content type.
- Fix(OPDS): authentication NONCE and ID handled identically, i.e. both present triggers the match check, any missing means that the check is skipped.
- Fix(PDF): persistent user configuration for zoom level, layout, etc.
- Feature(PDF): 2-page spread with even/odd user-configurable option.
- Feature(TTS): faster speech rates are now available.
- Fix(LCP): persisted hashed passphrase was not resolved correctly when importing from OPDS feeds due to lack of license provider information. Also fixed asynchronous filesystem input/output which was causing race conditi

Summary
Version 3.2.2 was released on 19 August 2025

This release includes the following (notable) new features, improvements and bug fixes:
- Upgraded to the Electron v37 revision which fixes the screen reader detection regression introduced in Thorium v3.2.1
- Fixed accessibility issues related to previous/next backward/forward GUI buttons (labelling and semantic region containers for screen readers, and inert/disabled commands)
- Updated translations

Summary
Version 3.2.1 was released on 11 August 2025
NOTE: version 3.2.0 was published as a pre-release with only Linux and Windows installers (MacOS was missing at that point). This pre-release was removed when a fixed-layout zoom bug was discovered. This bug is now fixed and will be published in patched version 3.2.1. Apologies for the inconvenience, especially to the few Linux or Windows users who downloaded Thorium version 3.2.0. You will get the notification when 3.2.1 is available.

This release includes the following (notable) new features, improvements and bug fixes:
- Thorium is now based on Electron v37 (and its updated Chromium version). Version 37 introduced a regression bug with audio/video streaming (time seeking) but this was fixed in time for this Thorium release.
- Localisation: added and updated translations, fixed Chinese handling (was incorrectly triggering RTL)
- PDF: new print feature, updated PDF.js rendering library
- Annotations/bookmarks: exports raw data (JSON format, W3C standard) as well as HTML template. Export is possible outside of a reader window (from the library / local bookshelf)
- Annotation highlights: support for EPUB CFI in data import/export (Colibrio open-source lib)
- Annotations/bookmarks: added a warning message when a publication that contains bookmarks/annotations is about to be removed (suggestion to export the notes)
- Annotations/bookmarks: harmonized models, editor GUI for textual notes, tag, etc.,
- Annotations/bookmarks: support for emojis via GitHub-flavoured Markdown
- Annotations/bookmarks: rendering engine displays floating popup with text excerpt on mouse hover
- Annotation highlights: now with named colours as opposed to just arbitrary RGB triplets
- Bookmarks: new visual indicator in document margins
- Bookmarks: fine-grain "current reading location" detection (mouse click) for precise character-level bookmarking (still default to implicit leading text position in visible text)
- Annotations: when highlights are hidden (not even in margin), and the user selects text + creates annotation, nothing was displayed which was causing confusion and multiple user attempts to create (duplicates). This forces the display of annotations when the user creates.
- GUI: improved the horizontal publication strips in the library window, now scrolls natively and snaps to publication covers boundaries (panning works with mouse wheel, touch swipe, arrow keys etc.)
- TTS: new highlight styles configuration GUI
- TTS readaloud fixes: on last spine item natural play ending (publication finish), turn off TTS "play on click" behaviour, also: hide annotations while playing, restore after stop. Also fixed race condition during play, click, auto forward progression, switch document backwards/forwards, and natural document/publication end (handles annotations hide/restore, continues to ignore hyperlink clicks during active readaloud, until stopped by user or automatically by TTS engine)
- TTS: fixed potential crash in Linux when selecting synthetic speech voices
- TTS: horizontally-centered TTS utterance with minimal jittering in scrolling mode
- TTS: improved readaloud mouse tracking with paragraph spanning across page boundary
- TTS: fixed pause/stop event which was causing GUI flicker
- TTS: voice selection supports multiple per-language user preferences
- Keyboard shortcuts: list / editor now with search filtering by keyword, duplicate detection, and localized labels.
- Keyboard shortcuts: user overrides now persist correctly in json partial data structure on filesystem (was incorrecty serialising all shortcuts including defaults).
- Keyboard shortcuts: display correct characters for non-QWERTY keyboard
- Navigation: fixed hyperlinking into search results which wasn't inserting history events for go back/forward
- Navigation: fixed popup footnotes back/forward hyperlinking history
- OPDS: fixed the OAuth flow which needed to be restarted when a refresh token was revoked or invalid
- Accessibil

Summary
Version 3.1.0 was released on 17 February 2025.
LINUX USERS (Ubuntu in particular): you will need to run the shell command sudo chmod 4755 /opt/Thorium/chrome-sandbox in a terminal session after installing the Debian package. Unfortunately this is a known issue with Electron: #2519 (comment)
This release includes the following (notable) new features, improvements and bug fixes:
- Localization: updated translations, Weblate now recommended instead of GitLocalize
- Feature: annotations, import + export (various "selector" formats powered by Apache Annotator, tested with DOM Ranges spanning across XHTML, SVG, MathML, foreignObject, etc.) and updated graphical user interface (list filtering, etc.)
- Feature: TTS readaloud and EPUB3 Media Overlays, option to disable continuous playback (checkbox in playback settings panel)
- Feature: visual navigation indicators in HTML publication documents (temporary outline) can now be disabled
- Feature: additional information labels in the "settings" GUI to describe actions and choices
- Feature: URL query params 'lang' and 'version' to online documentation
- Feature: TTS readium-speech integration, organised and opinionated voice selector
- Feature: TTS and EPUB3 Media Overlays, popup foonotes are disabled so that they can be played inline as intended by content creators
- Feature: "preferred" settings for reader configuration, save/load/reset
- Feature: PDF.js latest library version
- Feature: latest Electron v34 (i.e. more recent Chromium web browser engine and NodeJS runtime)
- Fix: XML parsing in DAISY 2.02 NCC.html was choking on doctype with empty declaration [], also SMIL parser fix for skippables (system-required sidebar-on and note-on), and merge of contiguous SMIL SEQ/AUDIO inside PAR
- Fix: XML parser UTF8 BOM Byte Order Mark removal
- Fix: TTS readaloud SVG deep utterances (no aria-label / title), escapability
- Fix: TTS Japanese Ruby skipped (ignored) when visually hidden, played instead of base / non-Ruby when visually displayed (does not use skippability semantics of TTS / EPUB3 Media Overlays)
- Fix: accessibility labels in some user interface controls, improved GUI structure and semantics
- Fix: accessibility metadata, preliminary update (more to come in a future release) to match the latest presentation guide, support for printPageNumbers vs. pageBreakMarkers vs. pageNavigation
- Fix: download panel was reporting incorrect status (mismatched unique identification), URL was conflated with label, added support for unknown content-length (indeterminate progress bar), handling of content-disposition UTF8 percent-escaped filename, consume www-authenticate response error description, HTTP content-type was taking the precedence over content-disposition header
- Fix: LCP provider certificate expiration error messaging
- Fix: bookmarks were incorrectly synchronised when several reader windows were open
- Fix: OPDS and other publication download authentication flow across domains, also fixed OAuth 2.0 Implicit Grant flow (client ID etc.)
- Fix: added missing keyboard shortcuts in library view for first/last previous/next
- Fix: keyboard focus "inversion of control" (eliminated focus stealing), Thorium GUI now pushes requests to navigator / HTML document renderer, removed body-injected underscore / jump link, automatic vs. manual keyboard redirection from modal vs. docked navigation panels, added keyboard shortcut to force-focus deep into the webview (just in case the default method fails, depends on Chromium behaviour of out-of-process iframe inside shadow DOM / custom element)
- Fix: command line lifecycle / action flow
- Fix: various GUI issues
- Fix(dev): updated Continuous Integration / GitHub Actions scripts, added dependency analyser script, introduced support for Flox/Nix, improved Linux Docker builder, adde NPM scripts lifecycle checks (pre/post/install security)
- Fix: Thorium was only accepting lower case file extensions
- Fix: LCP edge-case,broken publications that 

Summary
Version 3.0.0 was released on 26 June 2024.
Total Downloads
This release includes the following (notable) new features, improvements and bug fixes:
- Major user interface refresh / redesign

- Support for dark/light modes (matches operating system, or can be overridden by user preference)
- Reader window supports additional colour themes
- Dockable panels (left/right) in reader window for navigation and display preferences
- NOTE: some keyboard tab-cycling and focus handling is currently occasionally buggy, will be fixed in v3.1 as we also improve screen reader support
- New feature: annotations (currently locally-stored database, a future revision will support import/export)
- Added a "mark as finished" action
- Support for PROXY servers via environment variables
- Simplified LCP/LSD network requests
- Updated locales / translations
Download checksum / hash verification
- Thorium-3.0.0.dmg is code-signed by an official EDRLab certificate, and it is notarised by Apple servers. The SHA512 is:

- HEX: 88274d1e5d16ce226c75a43623c1c7d3487726bb57bbf70a694fd6f28aefe4c8ffe3b35212050cf4882f2fed7d2d51deb942241594572faae7cbaa79101eb906
- BASE64: iCdNHl0WziJsdaQ2I8HH00h3JrtXu/cKaU/W8orv5Mj/47NSEgUM9IgvL+19LVHeuUIkFZRXL6rny6p5EB65Bg==
- Verification: create a file named Thorium-3.0.0.dmg.sha512 next to the downloaded file Thorium-3.0.0.dmg, edit the new file Thorium-3.0.0.dmg.sha512 and write this exact line of text inside it: HEX Thorium-3.0.0.dmg, then run the command line shasum -a 512 -c Thorium-3.0.0.dmg.sha512 (=> Thorium-3.0.0.dmg: OK)
- Thorium-3.0.0-arm64.dmg is code-signed by an official EDRLab certificate, and it is notarised by Apple servers. The SHA512 is:

- HEX: 122355e067bed06415abc22fbaf3f533bd7af4744adea3fd9a136e8b348db3c674e12c561e036b3005e27547bfbc286dbb9adc50f6ab94f07eb4bdca35b2fbc9
- BASE64: EiNV4Ge+0GQVq8IvuvP1M7169HRK3qP9mhNuizSNs8Z04SxWHgNrMAXidUe/vChtu5rcUParlPB+tL3KNbL7yQ==
- Command line: shasum -a 512 -c Thorium-3.0.0-arm64.dmg.sha512 (=> Thorium-3.0.0-arm64.dmg: OK)
- Thorium.Setup.3.0.0.exe is code-signed by an official EDRLab certificate (the version distributed via the Microsoft Store is also code-signed, albeit via EDRLab's Microsoft account). The SHA512 is:

- HEX: 64339cd872fbdbc3b2f192157c9f668beda4940f5fe790e29c153e102fbe0501401300ce8665f875998d513fa04367929a56dec8141eaaf8dd11ddcdaaca25e6
- BASE64: ZDOc2HL728Oy8ZIVfJ9mi+2klA9f55DinBU+EC++BQFAEwDOhmX4dZmNUT+gQ2eSmlbeyBQeqvjdEd3Nqsol5g==
- Command line: certutil -hashfile Thorium.Setup.3.0.0.exe SHA512
- Thorium-3.0.0.AppImage is not code-signed. The SHA512 is:

- HEX: 1fe7ad9cbe436d77c23ab20c805eb16635586e2c1af8fe4d1b126956e7c0c74ca00ffa32b344da48a047a2a895e1bdea0c704d119238d886201b0da2719f2588
- BASE64: H+etnL5DbXfCOrIMgF6xZjVYbiwa+P5NGxJpVufAx0ygD/oys0TaSKBHoqiV4b3qDHBNEZI42IYgGw2icZ8liA==
- Command line: sha512sum -c Thorium-3.0.0.AppImage.sha512
- EDRLab.ThoriumReader_3.0.0_amd64.deb is not code-signed. The SHA512 is:

- HEX: 88057a075f2e96cab50078d2278ac047b4aa7fce704ed67c5bc6287f2e856864aceca4a9faa948ac3c333182dd9d28c1d72895955f10e55b37e54388a389cc18
- BASE64: iAV6B18ulsq1AHjSJ4rAR7Sqf85wTtZ8W8Yofy6FaGSs7KSp+qlIrDwzMYLdnSjB1yiVlV8Q5Vs35UOIo4nMGA==
- Command line: sha512sum -c EDRLab.ThoriumReader_3.0.0_amd64.deb.sha512
- Thorium-3.0.0-arm64.AppImage is not code-signed. The SHA512 is:

- HEX: c64f718d18c0b4a2faa21ad5248ac48f3243ff27129aded0236102d44aeec8fad5c649b65174348a0f630803e2c1b9fb7b26fe274ebb41812d0ce5be10a5fe2a
- BASE64: xk9xjRjAtKL6ohrVJIrEjzJD/ycSmt7QI2EC1EruyPrVxkm2UXQ0ig9jCAPiwbn7eyb+J067QYEtDOW+EKX+Kg==
- Command line: sha512sum -c Thorium-3.0.0-arm64.AppImage.sha512
- EDRLab.ThoriumReader_3.0.0_arm64.deb is not code-signed. The SHA512 is:

- HEX: a950ef228dedc75e0c7e26001feece0905c853f759fa10dc4cd3544d3fbaf20e9fb218f7c1c069c3cd7a2b769bcfa58071bacac4b568e0dcba8f8c1403e18706
- BASE64: qVDvIo3tx14MfiYAH+7OCQXIU/dZ+hDcTNNUTT+68g6fshj3wcBpw816K3abz6WAcbrKxLVo4Ny6j4wUA+GHBg==
- Command line: sha512sum -c EDRLab.ThoriumReader_3.0.0_

Summary
Version 2.4.2 was released on 17 May 2024.Total DownloadsThis release includes the following (notable) new features, improvements and bug fixes:- HOTFIX: LCP2 publications with obfuscated fonts or non-encrypted HTML resources were causing the app to crash
Download checksum / hash verification
- Thorium-2.4.2.dmg is code-signed by an official EDRLab certificate, and it is notarised by Apple servers. The SHA512 is:
- HEX: 4c79bef47dedb64537801fa20b43af93460a85e7d51e2de1aa2623e365bcaa605c60899ddde4ea1f884a68cae8b549eb6fb113c19e5c6180057348aafeebe86c
- BASE64: THm+9H3ttkU3gB+iC0Ovk0YKhefVHi3hqiYj42W8qmBcYImd3eTqH4hKaMrotUnrb7ETwZ5cYYAFc0iq/uvobA==
- Verification: create a file named Thorium-2.4.2.dmg.sha512 next to the downloaded file Thorium-2.4.2.dmg, edit the new file Thorium-2.4.2.dmg.sha512 and write this exact line of text inside it: HEX Thorium-2.4.2.dmg, then run the command line shasum -a 512 -c Thorium-2.4.2.dmg.sha512 (=> Thorium-2.4.2.dmg: OK)
- Thorium-2.4.2-arm64.dmg is code-signed by an official EDRLab certificate, and it is notarised by Apple servers. The SHA512 is:
- HEX: 0060d607d6170e9a053cfecfa0b4952f1c65aa577381564645abe0aa01d0cd612b1de8a9cd79e350629e426f819ae8271430d7f9da612f26e954d6c51d41e51d
- BASE64: AGDWB9YXDpoFPP7PoLSVLxxlqldzgVZGRavgqgHQzWErHeipzXnjUGKeQm+BmugnFDDX+dphLybpVNbFHUHlHQ==
- Command line: shasum -a 512 -c Thorium-2.4.2-arm64.dmg.sha512 (=> Thorium-2.4.2-arm64.dmg: OK)
- Thorium.Setup.2.4.2.exe is code-signed by an official EDRLab certificate (the version distributed via the Microsoft Store is also code-signed, albeit via EDRLab's Microsoft account). The SHA512 is:
- HEX: d6270334e5c695c7b872b141794370225f0f741fab1cf057ed666e363edf3a9a2414f832525dac69a5ba0f097e2d7deec4aefcaf9781c97a6c36b1515365959b
- BASE64: 1icDNOXGlce4crFBeUNwIl8PdB+rHPBX7WZuNj7fOpokFPgyUl2saaW6Dwl+LX3uxK78r5eByXpsNrFRU2WVmw==
- Command line: certutil -hashfile Thorium.Setup.2.4.2.exe SHA512
- Thorium-2.4.2.AppImage is not code-signed. The SHA512 is:
- HEX: e6b94f84c85912a2b7cb835bd0d42aa85b1ac803af7284f684d7c76f4d8d1a229df42eb3db74825dc989105dfafde30e3771a9ab84b0d71ee90fdd4d20433069
- BASE64: 5rlPhMhZEqK3y4Nb0NQqqFsayAOvcoT2hNfHb02NGiKd9C6z23SCXcmJEF36/eMON3Gpq4Sw1x7pD91NIEMwaQ==
- Command line: sha512sum -c Thorium-2.4.2.AppImage.sha512
- EDRLab.ThoriumReader_2.4.2_amd64.deb is not code-signed. The SHA512 is:
- HEX: fa95ace3266038100288a8f2544a674af43aee3d6a40d0f03260f570112c4af3aa34067b257ea0c8cbbe5e6304b9cafb85a70d7b43ca84639074318abf4303ea
- BASE64: +pWs4yZgOBACiKjyVEpnSvQ67j1qQNDwMmD1cBEsSvOqNAZ7JX6gyMu+XmMEucr7hacNe0PKhGOQdDGKv0MD6g==
- Command line: sha512sum -c EDRLab.ThoriumReader_2.4.2_amd64.deb.sha512
- Thorium-2.4.2-arm64.AppImage is not code-signed. The SHA512 is:
- HEX: 685d883c423d5c64c686a8f22dd2978b105d0afaefffaee6fc3798c294aa4ab64a8f0175ffc033c2739d219d0730fce76defa7efb9de2924c16f62a88c7d60d1
- BASE64: aF2IPEI9XGTGhqjyLdKXixBdCvrv/67m/DeYwpSqSrZKjwF1/8AzwnOdIZ0HMPznbe+n77neKSTBb2KojH1g0Q==
- Command line: sha512sum -c Thorium-2.4.2-arm64.AppImage.sha512
- EDRLab.ThoriumReader_2.4.2_arm64.deb is not code-signed. The SHA512 is:
- HEX: 1f964e7e7b88045c98d5660289b9db2107646547d08c1ef0ad53799d1134da1324d659801d4f2719c56be56d9ac2bd83ccf089f7f3dc81c5f0a20a868bbf7cfb
- BASE64: H5ZOfnuIBFyY1WYCibnbIQdkZUfQjB7wrVN5nRE02hMk1lmAHU8nGcVr5W2awr2DzPCJ9/PcgcXwogqGi798+w==
- Command line: sha512sum -c EDRLab.ThoriumReader_2.4.2_arm64.deb.sha512
MacOS command line: node -e "const hash = require('crypto').createHash('sha512'); const stream = require('fs').createReadStream(process.argv[1]); stream.on('readable', () => { const data = stream.read(); if (data) { hash.update(data); } else { const hex = hash.digest('hex'); console.log(hex); console.log(Buffer.from(hex, 'hex').toString('base64')); } });" release/Thorium-2.4.2.dmg
(for Linux and Windows, replace the release/Thorium-2.4.2.dmg relative path with the respective executables / binaries - release/Thorium-2.4.2.AppImage, release/EDRLab.ThoriumReader_2.4.2_amd64.de

Summary
Version 2.4.1 was released on 22 March 2024.Total DownloadsThis release includes the following (notable) new features, improvements and bug fixes:- HOTFIX: Some users experienced a regression bug in Thorium v2.4.0 where the bookshelf would be empty at application launch, accompanied with an error message popup. This is due to publications that were previously imported with missing metadata titles (an edge case that should never occur as valid EPUB files guarantee the presence of title). This bug is non-fatal in the sense that upgrading to version 2.4.1 (or even downgrading to Thorium v2.3.0) allows publications to load in the bookshelf without any loss. However there is a possibility of corrupting the library database if Thorium 2.4.0 is not immediately closed after the error. Therefore we strongly recommend upgrading to 2.4.1.
Download checksum / hash verification
- Thorium-2.4.1.dmg is code-signed by an official EDRLab certificate, and it is notarised by Apple servers. The SHA512 is:
- HEX: b050e4bfc5c35ca3d5a42552f94d1a5159806458f5199137419e89bb3d9119d98217ae5fca8f3be2bae57cc895a0b70171c0cee898139fdcb22ae15a39f0765c
- BASE64: sFDkv8XDXKPVpCVS+U0aUVmAZFj1GZE3QZ6Juz2RGdmCF65fyo874rrlfMiVoLcBccDO6JgTn9yyKuFaOfB2XA==
- Verification: create a file named Thorium-2.4.1.dmg.sha512 next to the downloaded file Thorium-2.4.1.dmg, edit the new file Thorium-2.4.1.dmg.sha512 and write this exact line of text inside it: xxx Thorium-2.4.1.dmg, then run the command line shasum -a 512 -c Thorium-2.4.1.dmg.sha512 (=> Thorium-2.4.1.dmg: OK)
- Thorium-2.4.1-arm64.dmg is code-signed by an official EDRLab certificate, and it is notarised by Apple servers. The SHA512 is:
- HEX: fb308bf637505f75a704beb6892a8797cc6123f8d03b95d1d02f311a95fbc4e058cee5c4d42cda206b3496187d7709d3897724be95c463bd07821c94d71f81c3
- BASE64: +zCL9jdQX3WnBL62iSqHl8xhI/jQO5XR0C8xGpX7xOBYzuXE1CzaIGs0lhh9dwnTiXckvpXEY70HghyU1x+Bww==
- Verification: create a file named Thorium-2.4.1-arm64.dmg.sha512 next to the downloaded file Thorium-2.4.1-arm64.dmg, edit the new file Thorium-2.4.1-arm64.dmg.sha512 and write this exact line of text inside it: xxx Thorium-2.4.1-arm64.dmg, then run the command line shasum -a 512 -c Thorium-2.4.1-arm64.dmg.sha512 (=> Thorium-2.4.1-arm64.dmg: OK)
- Thorium.Setup.2.4.1.exe is code-signed by an official EDRLab certificate (the version distributed via the Microsoft Store is also code-signed, albeit via EDRLab's Microsoft account). The SHA512 is:
- HEX: 4c8ae7eaccd9ccc248b55ea4a93918ab4b044dfaa4aa01c7d2c4d6cd35ec3d3dd5fd417786f1f7d11d97f615a47a00e64a48b90eaa3665fc4eaf734813bf7a24
- BASE64: TIrn6szZzMJItV6kqTkYq0sETfqkqgHH0sTWzTXsPT3V/UF3hvH30R2X9hWkegDmSki5Dqo2ZfxOr3NIE796JA==
- Command line: certutil -hashfile Thorium.Setup.2.4.1.exe SHA512
- Thorium-2.4.1.AppImage is not code-signed. The SHA512 is:
- HEX: f1e282584f2df1f1ded0693721f737be240f87a6732580c3399ee954090a721ab9112e87700b2f1d894433e15b18483948387297c0caf1ef7ab46d2155715905
- BASE64: 8eKCWE8t8fHe0Gk3Ifc3viQPh6ZzJYDDOZ7pVAkKchq5ES6HcAsvHYlEM+FbGEg5SDhyl8DK8e96tG0hVXFZBQ==
- Command line: sha512sum -c Thorium-2.4.1.AppImage.sha512
- EDRLab.ThoriumReader_2.4.1_amd64.deb is not code-signed. The SHA512 is:
- HEX: ca94b94344ea56ba4d0255db05489df113b907c0f3c4d25bf846b37369766359aee32b636f81a3c797cd482bdb005b9d535391893a4a32d3813be5e9c9dce341
- BASE64: ypS5Q0TqVrpNAlXbBUid8RO5B8DzxNJb+Eazc2l2Y1mu4ytjb4Gjx5fNSCvbAFudU1ORiTpKMtOBO+XpydzjQQ==
- Command line: sha512sum -c EDRLab.ThoriumReader_2.4.1_amd64.deb.sha512
MacOS command line: node -e "const hash = require('crypto').createHash('sha512'); const stream = require('fs').createReadStream(process.argv[1]); stream.on('readable', () => { const data = stream.read(); if (data) { hash.update(data); } else { const hex = hash.digest('hex'); console.log(hex); console.log(Buffer.from(hex, 'hex').toString('base64')); } });" release/Thorium-2.4.1.dmg
(for Linux and Windows, replace the release/Thorium-2.4.1.dmg relative path with the respective executables

Summary
Version 2.4.0 was released on 20 March 2024.Total DownloadsThis release includes the following (notable) new features, improvements and bug fixes:- New user interface locales: Slovenian/Slovenščina, and Danish/Dansk (Thorium is now translated in 25 languages). Also updated the Portuguese (Portugal) and Swedish translations (many thanks to the contributors!). Also fixed a bug with the variants of Chinese (traditional vs. simplified) and Portuguese (Portugal vs. Brazil) related to the "about Thorium" XHTML files which failed to load due to lowercase filenames vs. mixed-case language code.
- Fixed RTL Right-To-Left (Arabic, Hebrew, Japanese in Vertical Writing Mode, etc.) support in the footer bar (interactive reading progression control) and history buttons.
- Support for Japanese vertical writing mode, right-to-left direction. New option to disable RTL inversion in the user interface (several clusters of previous/next controls, play/pause button, interactive reading progression bar). New option to visually hide Ruby superscript, which (by the way) is automatically ignored during text search in order to avoid breaking character sequences inside the baseline Ruby script. Special handling of WBR Word Break Opportunities, in order to implement word-level spacing (note that character-level is now also available, using ReadiumCSS). New font families / typeface options specifically for Japanese language, not shipped in Thorium but automatically prioritised if the fonts are available in the operating system (just as before, the user can select any system font by specifying its name, but this is a different feature which exposes known typefaces that are commonly used on the web as "sensible" defaults for Japanese script, in sans-serif and serif variants for vertical and horizontal writing modes). Compatibility with the TTS readaloud and EPUB Media Overlays features (synchronised text + audio), except "simplified / captions" mode which continues to display text in horizontal writing mode. Ruby superscript / ancilliary content is automatically skipped during TTS (a future version of Thorium will need to flexibly cater for different user experiences by differentiating skippability of page breaks, image descriptions, alternative text for MathML, Ruby superscript, etc.). Improved handling of Japanese publications and documents that do not declare vertical/horizontal writing direction or that incorrectly specify RTL/LTR in the usual expected places (e.g. HTML or BODY elements, package OPF XML). Also added more robust support for publications that declare top-level page-progresion-direction RTL/LTR in the package OPF XML but change direction in some spine item HTML documents (hybrid modes).
- Fixed a number of bugs in TTS readaloud and EPUB Media Overlays which were causing the playback position to jump back to the beginning of the document (for example, when clicking on images without audio).
- Added the possibility to use TTS readaloud with EPUB publications that have Media Overlays (pre-recorded audio), by clicking the play button while holding the SHIFT+ALT key modifiers which is a common keyboard combo already used for several "alt" functionality in Thorium.
- Implemented support for text paragraphs that span across page boundaries when displaying documents in paginated mode with single or two page spreads. Now, bookmarks and other reading locations that accurately select character ranges are restored correctly (before the fix, the containing paragraph HTML element would be designated, causing a confusing shift to the previous page).
- Added handling of diacritics (accented characters) in the "find text" / "search" feature. Essentially, characters like "e" "è" "é" "ë" "ê" etc. are considered equivalent in both the query string and the targeted document text. Also implemented basic transliteration of some common ligatures (for example "egg" in French: Œuf vs. œuf vs. oeuf). More improvements are expected as we gather feedback from 

- New and updated translations: Bulgarian, Greek, Croatian, Korean, Portuguese (Portugal).
- Reader / image zoom: major feature update from initial proof of concept, better user experience (finger touch, trackpad gestures, mouse wheel, keyboard), support for raster/bitmap images as well as SVG markup.
- Reader / MathML: native rendering in Chromium (Electron v25), Thorium 2.2.0 included a version of Chromium that did not support MathML natively (MathJax was the only way to display MathML).
- Reader / MathML: MathJax dynamic aria-label (speech text) is overridden by authored alt-text (if present), Thorium TTS readaloud speaks it, screen readers do too but have the option to dig further / deeper into the MathML structure (useful with screen reader specialised plugins).
- Reader / navigation history: hyperlink activation now correctly sets the landmark for previous/next navigation.
- Reader / text display: fixed left/right/justify text alignement ("start" can be left or right depending on document language), "automatic" is now "default" with changed SVG icon to avoid confusion.
- Reader / UX: finger swipe gesture can now be used to turn pages (requires touch screen).
- Reader text selection: double-click now works (bookmarks label for now, later in upcoming annotations feature).
- Reader / TTS: fixed aria-label support on img (alongside alt attribute), epub:type pagebreak (and role doc- prefix), title/label takes precedence over inner text, same with links.
NOTE: this will need future update to match W3C specifications for computation of accessible label and description.
- Reader / TTS: fixed voice selection based on user choice + language match (for example: fr-FR vs. fr-CA variants, en-US vs. en-UK, user wins over authored lang).
- Reader / TTS: fixed paused / stopped state in playback controls.
- Reader / TTS: fixed support for Japanese ruby, RT markup is now ignored.
- Reader / TTS: captions / simplified view, initial text without active word boundary was not escaped (ampersand character).
- Reader / Popup footnotes: fixed handling of SVG a@href links.
- Reader / HTML5 audio: fixed visible controls visibility.
- Reader / EPUB: navigator.epubReadingSystem object injection in iframes (including SVG).
- Reader / EPUB: FXL fixed-layout rendition-prefixed page-spread-left/center/right properties on spine item, was only parsing non-prefixed variant.
- Reader / Media Overlays: fixed click on non-synchronised HTML element which now preserves current playback location / timestamp (was reseting to begining of document).
- Reader / UX: mouse middle-click was causing opening in external Electron window.
- DAISY: fixed v2.02 and v3.0 import of ncc.html or *.opf, now works when loading from non-zipped publications.
- OPDS: feed entry fallback cascade was too permissive (publication info was incorrectly fetching borrow/buy links in some cases).
- OPDS: fixed "search" relative URLs in OPDS1(XML) and OPDS2(JSON), fixed URI Templates curly brace escaping in URL path.
- OPDS: fixed publication title which was not displayed.
- OPDS: added display of accessibility metadata.
- GUI: fixed dark/night and sepia modes in audiobook playback rate chooser and TTS + Media Overlays rate/voice choosers.
- GUI: fixed edge-case of auto-focus fail on default dialog button (e.g. invoking the delete action from the popup menu was failing to auto-focus the default ok button, whereas this worked when reaching the same modal dialog prompt via the publication info sheet).
- GUI / accessibility: improved keyboard shortcuts editor usability, for both screen reader and keyboard users
- GUI / UX: improved error message during file import, unsupported extension / document type.
- TTS: now enabled by default on Linux (Electron command line parameter "enable-speech-dispatcher").
Download checksum / hash verification
- Thorium-2.3.0.dmg is code-signed by an official EDRLab certificate, and it is notarised by Apple servers.
The SHA512 is:
- HEX: fc7b9ead
- BASE64: DX1Dsw7KHi

This release includes the following (notable) new features, improvements and bug fixes:
- Updated translations: English, Simplified Chinese, Traditional Chinese, Italian, Japanese, Lithuanian, Spanish, Swedish
- Now with Electron 21 (more recent Chromium web browser engine)
- Feature: show accessibility metadata in publication info dialog
- Fix: MathML support via MathJax, screen reader interaction (accessibility)
- Feature: navigation history, back / forward buttons with keyboard shortcuts
- Fix: TTS and Media Overlays playback options were reset to default values in GUI but not in backend
- Fix: EPUB FXL Fixed-Layout pre-paginated publications can now render with single centered pages (override from authored spread rules, when aspect ratio is portrait instead of landscape)
- Feature: EPUB FXL Fixed-Layout zoom now with keyboard shorcuts (increase, decrease and reset)
- Fix: EPUB FXL and reflowable, support for pagebreak and pagelist edge cases, improved "goto page" navigation
- Fix: support for self-closing body HTML tag in document parser
- Fix: keyboard focus returns to popup menu callsite after cancel-closing publication delete modal dialog (improves usability and accessibility with screen readers)
- Fix: improved popup modal dialog GUI, better default enter key behaviour and form submission behaviour
- Fix: improved CSS styling in reader menu, removed non-implemented annotation menu (future feature)
- Fix: OPDS HTTP basic authentication now handles 302 "found" redirection for GET requests
- Fix: OPDS indirect acquisitions can have child subtype, now display EPUB/PDF and LCP info in download buttons (after generic authenticated borrow action)
- Feature: OPDS edit feed title and url
- Fix: tag name with special characters now supported
- Fix: DAISY v2.02 HTML NCC metadata parsing, multimedia type full text audio is default
- Feature: OPDS HTTP digest authentication scheme, supports Calibre content server
- Fix: multilingual metadata parsing (title, author, etc.), RTL for Hebrew, Arabic, etc. now displayed correctly
- Fix: URL protocol/scheme handlers thorium:// and opds:// work on Mac Linux and Windows
- Fix: MacOS 'window' menu in top-level instead of submenu
- Fix: accessible screen reader label for secondary navigation landmark in bookshelf is just "menu" to avoid duplication of announcement
- Fix: added application keywords for Linux integration
- Fix: clearer error reporting when opening a file with unsupported extension (derived from HTTP content-type or obtained from filesystem)
- Fix: Mac and Linux application icons
- Fix: cancelling one download only now works
- Fix: publication info, list of authors now complete
- Fix: OPDS, support for DAISY application/zip mimetype

This release includes the following (notable) new features, improvements and bug fixes:
- Added support for Dilicom library connector (not OPDS, special API).
- Localisation: fixed French, Spanish, Portuguese (Portugal) and Swedish translations. Added the EDRLab.org documentation website link to all locales, in the "about Thorium" XHTML (the link currently redirects to a GitHub microsite that hosts Thorium's user guide).
- Added basic "telemetry" feature: anonymous system information sent to EDRLab server on application startup.
- Fixed reader window menus which were not closed automatically when switching to fullscreen.
- Fixed README documentation, updated supported languages.