ClamUI

Safer host configuration, more reliable scan and tray behavior, and Flatpak packaging improvements

• Keep secure host configuration and selected update settings, and improve Flatpak host helper installation
• Avoid false scan failures when bounded verbose output is truncated
• Wait for tray registration, honor VirusTotal setup state, and clarify configuration actions
• Improve Ubuntu 22.04 compatibility, add Hungarian translation, and refresh Python and Flatpak dependencies

Configuration safety, scan reliability, GTK baseline compatibility, and privileged-write hardening

• Make preference saves safer; restore GTK 4.6 / libadwaita 1.1 compatibility; support Python 3.10 helper builds and Python 3.14 glob conversion
• Ship a trusted Flatpak host configuration helper, retain standalone Flatpak scanner settings without one, and give Debian, Fedora, and Arch families appropriate install advice while omitting unknown-distro commands
• Improve concurrent multi-target scan results, partial output and nonfatal-warning handling, all-failed error reporting, and staged forced database updates
• Confirm quarantine restores and permanent deletions, close dialogs with Escape, and reject short quarantine writes
• Fail closed for noncanonical privileged configuration writes, build scheduled commands from tokens, and sanitize AppImage environments for every host helper
• Refresh French and Simplified Chinese translations, translatable strings, and Python, Flatpak, CI, and runtime dependencies including cryptography 50.0.0

Privileged configuration helper, Flatpak host-config fixes, CLI scan reliability, and security hardening

• Add the `clamui install-privileged-helper` CLI path and skip unnecessary elevation prompts when ClamUI already runs as root
• Persist Flatpak ClamAV configuration preferences through the host helper and fix elevation decisions, audit database date handling, and benign size-limit scan warnings
• Fix CLI and scheduled scans so saved backend/exclusion settings are honored and every CLI-provided path is scanned
• Harden terminal output, profile import handling, scheduler quoting, sanitizer coverage, quarantine cleanup, and audit verdicts against malformed or misleading inputs
• Improve VirusTotal retries, large-upload handling, engine-result counting, tray resynchronization, and AppImage environment cleanup
• Refresh Python, Flatpak, website, and translation assets, and add a real-GTK construction smoke test for release validation

Portmaster privacy-filter audit, quarantine restore hardening, and scanner reliability fixes

• Add an optional Portmaster privacy-filter check to the security audit that reports running, installed, or not-installed status and per-module health without affecting summary counts when Portmaster is absent
• Harden quarantine restore handling against unsafe path and metadata manipulation (GHSA-xhhj-qvvr-vhwq)
• Fix full scans hanging mid-run by draining ClamAV stderr concurrently with stdout so the scanner no longer deadlocks on a full pipe buffer
• Improve system-tray compatibility under Flatpak and stricter StatusNotifierItem hosts (Plasma 6, Ayatana, xapp-sn-watcher) with ARGB icon fallbacks and attention-icon handling
• Document installation via AppMan / AM in the install guide
• Refresh Python and Flatpak runtime dependencies, including cryptography, urllib3, certifi, packaging, and PyGObject