v1.1.3February 18, 2026

Hardened filesystem sandboxing, browser-profile sign-in isolation, and stronger signed artifact integrity

Release hero image
Release walkthrough2:04

Power Platform ToolBox - Release v1.1.3

Watch the release highlights and walkthrough for this version.

Highlights

  • Hardened tool filesystem sandbox so tools can only access user-selected paths and system directories are blocked
  • Connection sign-in supports choosing Chrome or Edge plus a specific browser profile to better isolate sessions per connection
  • Signed Windows installers (EXE/MSI) via Azure Trusted Signing and repackaged portable ZIPs with signed binaries
  • Release metadata now records correct SHA256 and SHA512 hashes for stronger artifact integrity verification
  • macOS release pipeline notarizes and staples DMG, ZIP, and PKG artifacts with improved signing verification steps
  • Dataverse API adds metadata CRUD operations and a getCSDLDocument helper for retrieving the OData CSDL document
  • Save dialogs support optional file-type filters with extension-based default filter derivation
  • Loading overlay positioning is fixed and includes a manual dismiss button

Fixes

  • Connections: hardened auth/session isolation to reduce cross-connection token and browser profile leakage
  • macOS notarization and stapling no longer skips artifacts and handles unavailable submission logs more reliably
  • macOS code signing verification avoids premature spctl --assess failures before notarization/stapling completes
  • Release workflows regenerate Windows update metadata with correct SHA256 and SHA512 after signing
  • Tool filesystem reads/writes now enforce explicit user-consent access and reject unsafe/system paths
  • Connection and toolbox API handling is more robust for multi-connection scenarios and updated connection fields
  • Release workflow date formatting is consistent across jobs and platforms

Developer & Build

  • dataverseAPI types expand with metadata CRUD operations and getCSDLDocument
  • toolboxAPI.fileSystem.saveFile supports filters and derives defaults from filename extensions
  • Added BrowserManager for browser detection and profile enumeration used by interactive auth flows
  • Signing/notarization scripts and workflows improved for multi-artifact pipelines and better diagnostics

Install

  • Windows: Power-Platform-ToolBox-1.1.3-Setup.exe
  • macOS: Power-Platform-ToolBox-1.1.3.dmg (drag to Applications)
  • Linux: Power-Platform-ToolBox-1.1.3.AppImage (chmod +x, then run)

Notes

  • No manual migration needed; existing settings and connections continue to work.
  • Tool developers: filesystem reads/writes now require toolboxAPI.fileSystem.selectPath() or saveFile() to grant access.

Full Changelog

https://github.com/PowerPlatformToolBox/desktop-app/compare/v1.1.2...v1.1.3