Major​

  • The trusted certificate authorities are Mozilla's list of 2026-11-05, as curl.se publishes it, and the list now keeps itself up to date: once a day at most, a login checks curl.se in the background and puts a newer list in use only after its checksum matches and every certificate in it can be read. curl, wget, git and Python use it without any setting.

Minor​

  • Each check writes one line to /usr/app/TurboShell/var/log/cacert.log.

Major​

  • New programs: git, rsync, curl, wget, OpenSSH with sftp and ssh-copy-id, sshpass, autossh, sshfs, lftp, socat, whois, jq, make, patch, man, lsblk, lscpu, findmnt, column, flock, script, ripgrep, fd, fzf, micro, restic, par2, dos2unix, rename, parallel, dialog, ddrescue, TestDisk and inxi.
  • In a shell you type into, rsync, bash, tar, jq, python3, vim, less, grep, find, sort, dd and diff now start this package's copy. Scripts keep QTS's commands.

Minor​

  • For rsync from another machine, name the program: rsync --rsync-path=/usr/app/TurboShell/bin/rsync.