v1 Beta16 October 2026Latest
The first beta, for Mac and iPhone
Fourteen AI services from one list, a managed Ollama, a full data-safety layer, and the first downloadable builds for macOS and iPhone.
Downloads
- macOS 12 or later: FreshNews-v1-beta-macos.zip
- iPhone, iOS 17 or later: FreshNews-v1-ios.ipa, sideloaded
- Windows and Linux: no build in this beta yet. Build from source.
The builds are not notarised: see Installation for the one-time first-launch step.
Added
- Provider catalog: OpenAI, Anthropic, Google Gemini, OpenRouter, DeepSeek, Mistral, Groq, Together AI, Fireworks, xAI, Cerebras, LM Studio, Ollama and any OpenAI-compatible address, chosen from one Service list that fills in the endpoint and a suggested model.
- Keys are required for hosted services. The key field appears when the service is chosen, the form will not save without it, and the backend refuses too. Providers that lost their key are flagged with an Add the key action.
- Ollama is managed: found on this computer, started when needed, and stopped on quit if Fresh News started it. If it is not installed you are offered the download or another provider.
- Data safety: integrity check at every start, daily backups, a backup before every upgrade and restore, restore from the app, recovery from a damaged database, retention for feed items, and deletion of stories, investigations or feed items.
- Local crash reports and a privacy-safe diagnostics summary. No telemetry.
- Scrollbars are a 4 px mint gradient with no track or arrows.
- Automated accessibility audit of every page and dialog.
- Licence: MIT OR Apache-2.0.
Fixed
- Explore: after writing a story, the row could go back to No summary yet until you switched tabs. The button is now Generate & Open, opens the story as soon as it is written, and explains when nothing could be written.
- Hosted OpenAI-compatible services were sent a parameter meant for local thinking models, which some of them reject. It is now sent to local servers only.
Security
- Provider endpoints that only looked local (for example
http://10.example.com) could receive an API key over plain HTTP. Fixed. - Nine advisories in the TLS stack fixed.
- Provider errors scrub the exact key that was sent; the prompt-injection scan handles invisible and full-width characters; sync files from other devices are validated; stricter content security policy.