Pakua SysManager 1.130.0

[1.130.0] - 2026-10-13
The Dashboard's check for app updates when SysManager starts can now be switched off in About, like the version
check (#2613).
Added
- A switch for the app-update check at startup. Each time SysManager started, the Dashboard asked winget which
of your apps have updates, and winget asks Microsoft's package sources, with no way to turn it off. About now has
a box for it, "Check winget for app updates when SysManager starts", under the one for the version check, and it
is on, as the check always was. Off, the Dashboard's app-updates line reads "App updates not checked at startup"
in grey, with a link to App Updates, and Scan system, Update All Apps and the App Updates tab still ask
winget when you press them. The choice is kept beside the version check's, so Profile Export / Import carries
both, and a setting that cannot be read keeps both checks from running.
Changed
- The README and SECURITY.md, which said there was no switch, now name both boxes by the words on them, and the
Welcome screen and About's privacy text say either check can be switched off.
Verify the download
Get-FileHash .\SysManager-v1.130.0.exe -Algorithm SHA256
Expected SHA256: C23B0689BBBA5C52BCC399F1B63CCF3D7F197CE466B027DD333555ECA1A63BF5
This build is not code-signed, so Windows will warn on first launch. That is
expected for a small independent app: see what the warning says and what to
click.
Code signing is planned through the SignPath Foundation,
which provides free certificates to open-source projects, with signing performed by
SignPath.io. Until then, the SHA256 above and the build
attestation below are what establish that a download is the genuine build.
Code signing policy
This release is not code-signed. The team roles, release-approval process and
privacy policy required by the SignPath Foundation programme
are documented in advance under Code signing
policy. That
documentation is a prerequisite for applying, not evidence of a certificate. The
attribution line naming SignPath as the signing provider will appear here once a
certificate is actually issued.
This program will not transfer any information to other networked systems unless
specifically requested by the user or the person installing or operating it. Full
privacy policy.
Verify where this binary came from
This exe was built by GitHub Actions from this public source, and the build is
recorded in the Sigstore public transparency log. With the
GitHub CLI:
gh attestation verify .\SysManager-v1.130.0.exe --repo laurentiu021/SystemManager
That proves which commit and workflow produced this exact binary, something the
SHA256 file cannot show, since it is published alongside the exe it describes.
Each release also ships SysManager-v1.130.0.sbom.json, a CycloneDX inventory of
every dependency resolved for this build.