Lataa GpgFrontend 2.2.3

v2.2.3 is recommended for all users. It is a drop-in upgrade from 2.2.2：your profiles, keys and settings carry over unchanged.

### What's new

• **Email module reworked.** Send signed and encrypted mail over SMTP and read your mailboxes over IMAP, with a smoother workflow from writing to sending and a clearer view of which parts of each message are signed or encrypted.
• **OpenPGP Structure Inspector** shows what is inside any message, key or signature.
• **Profile packages are truly cross-platform.** Export on one operating system and open on any other, with your key databases working. Machine-specific settings stay behind.
• **Key database changes apply right away,** with no restart.
• **Temporary profiles** that are deleted completely when you close their window.
• **Right-to-left text** is detected automatically. (#268)
• **Simpler toolbar.** Encrypt and Decrypt variants share one button each.
• **Redesigned key group management.**
• **New languages:** Polish (thanks to Ralts) and Turkish (thanks to @cerob, #273).

### Security and structural improvements

• **Module system rewritten.** Modules are signed packages, checked before they load, and can only use the features they declare. Third-party modules run only after you approve them. Modules can now add their own menus, tabs, views and settings pages, and the module manager shows which modules were refused and why.
• **Profile packages rebuilt.** Exported profiles always need a passphrase, damaged or tampered packages are detected, and opening one leaves no unencrypted copy on disk.
• **Secrets handled more carefully.** Passphrases are wiped from memory after use, and cached passphrases are kept separate for each key database.
• **No partial or unverified output.** Decrypted files and archives are written only after the integrity check passes, so you never get a half-written or tampered result. A failed or cancelled operation leaves nothing behind.
• **Harder to encrypt to the wrong people.** An optional single-recipient mode stops old checkmarks from adding extra recipients, and you can choose to confirm before encrypting to more than one person. When encryption is not possible, you are told which key is the problem and why.
• **Up-to-date OpenPGP.** Post-quantum encryption now follows the final standard (RFC 9980), and you are warned before mixing post-quantum and classical recipients. Keys and signatures are checked more strictly, and signatures made by keys that are not allowed to sign are shown as such.

### Fixes

• Unsaved text is no longer lost when you quit.
• Content signed by someone whose public key you don't have now decrypts, with a warning that the signature couldn't be checked. (#271)
• The system keychain asks to be unlocked after a reboot instead of showing an error. (#267)
• Windows：importing post-quantum private subkeys works again (bundled GnuPG 2.5.21). (#266)
• The rPGP engine now decrypts files of any size using little memory. (#272)
• Fixed several crashes when closing windows and quitting.

> [!IMPORTANT]
> **Module developers:** modules built for 2.2.2 or earlier will not load. Rebuild against the new SDK, then package and sign with the module packager.
>
> **Qt5 is no longer supported in 2.2.x.** Starting with 2.2.3, GpgFrontend requires Qt 6.5 or newer. If you need Qt5, stay on the 2.1.x series, which still supports it.

**Full Changelog**：https://github.com/saturneric/GpgFrontend/compare/v2.2.2...v2.2.3