We’re pleased to announce that SecureDrop Workstation 1.5.0 has been released. This update will be applied automatically and there are no steps you need to take.

We have simplified and improved the installation process, thanks to the publication of a new securedrop-workstation-keyring package in the Qubes-Contrib repo. Now, after enabling this repository, users can install and configure SecureDrop Workstation without manually downloading packages, verifying their integrity, and moving them into dom0. More information on this can be found in our blog post.

After switching the Tor connectivity to no longer use sd-whonix in the previous release, we have now removed the remaining dependencies on Whonix, which will speed up updates for all users. Whonix will still be installed, but is no longer used by the SecureDrop Workstation.

A more detailed changelog can be found below:

User-facing features

• Remove sd-whonix and whonix-gateway FPF packages and repos (#1448)
• Configure dom0 rpm repo settings via bootstrap rpm package (#1210)
• Create bootstrap make target for keyring installation (#1405)
• Make grub2-xen-pvh a dependency of dom0 config rpm (#1211)
• Revert "internal" setting for sd-proxy (#1425)
• Update flow diagram and README to reflect removal of sd-whonix (#1415, #1425, #1434)

Internal and development

• Fix test_proxy_config (#1427)
• Add release template (#1418)
• Point to FPF's fork of OpenQA tests (#1435)
• Update nightlies GHA workflow to use more narrowly scoped GH app (#1439)
• Simplify and improve testing of apt sources (#1440)
• Add install-rpm target that installs dom0 config rpm and dependencies (#1416)

Acknowledgments

We’d like to thank the Qubes team, in particular Frédéric Pierret, for providing advice and guidance, as well as accepting our keyring package into the Qubes-contrib repository.

This release incorporates Freedom of the Press Foundation (FPF) contributions by Martin C; Nathan Dyer, communications manager; Micah Lee; Kunal Mehta; Cory Francis Myers; Vicki Niu; Kevin O’Gorman, deputy release manager; Francisco Rocha, release manager; John Skinner, deputy release manager; and Rowen S.

Questions and comments

If you have questions or comments regarding this release, please contact us:

• Via our Support Portal, if you are a member (membership is available to SecureDrop administrators on request)
• Via securedrop@freedom.press (PGP encrypted) for sensitive security issues (please use judiciously), or submit a report via Bugcrowd

We also encourage you to file nonsensitive issues via our GitHub repository.

Thank you for using SecureDrop!