CMTrace Open v1.4.0
A modern, open-source, cross-platform replacement for Microsoft's CMTrace.exe — a log viewer for Windows troubleshooting with built-in Intune (IME) diagnostics, DSRegCmd analysis, and real-time log tailing.
Highlights
- CCM/PSADT type="0" now renders as a first-class Success (green tick) instead of being flattened into Info — matching OneTrace. Wired through the severity filter, row rendering, Quick Stats, and status bar, with Success palettes across all 8 themes. (#248, closes #211)
- Error navigation — jump straight to the next or previous error/warning without scrolling. (#192)
- Teams (MSIX) client log collection — the collector and known-sources list now cover the new Microsoft Teams log locations. (#205, #242)
- Log Text column auto-fits to its widest message the first time you open a file.
- Now built on Tauri 2.11 and TypeScript 7, with signed builds for Windows (x64/arm64), macOS (Apple Silicon), and Linux — in both Full and Lite editions.
Downloads
─────────────────────┬───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
Platform │Files
─────────────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
Windows x64 / arm64 │CMTrace-Open_1.4.0_-setup.exe (NSIS installer), CMTrace-Open_1.4.0_.msi, CMTrace-Open_1.4.0_.exe (Full standalone), CMTrace-Open-Lite_1.4.0_.exe (Lite
│standalone)
─────────────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
macOS (Apple Silicon)│CMTrace.Open_1.4.0_aarch64.dmg (signed + notarized)
─────────────────────┼───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
Linux x64 │CMTrace.Open_1.4.0_amd64.deb, CMTrace.Open_1.4.0_amd64.AppImage, or CMTrace.Open-1.4.0-1.x86_64.rpm
─────────────────────┴───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
Windows builds are signed with Azure Trusted Signing (a re-issued certificate — SmartScreen reputation is rebuilding, so fresh installs may briefly show an "unknown publisher" prompt; More info → Run anyway is safe). CycloneDX SBOMs (sbom-rust.cdx.json, sbom-npm.cdx.json) and build-provenance attestations are attached.
Added
- Log Text column auto-fit on load: The Log Text (message) column now expands automatically to fit its widest visible content the first time a file is opened, so long messages are readable without a manual resize. Auto-fit runs once per source, measures against an actually rendered row so the resolved font matches the double-click Fit action exactly, and only ever grows the column past its baseline width — never shrinks it. A manual drag-resize or explicit Fit is treated as a user-owned override that auto-fit will not overwrite.
- CCM type="0" Success severity (#248, closes #211): CCM/PSADT log lines with type="0" — a completed operation that OneTrace renders with a green tick — now map to a new first-class Success severity instead of being flattened into Info. Severity gains a Success variant end-to-end (Rust and TypeScript) and is wired through the severity filter, row rendering, the Quick Stats cards, and the status bar, with per-theme Success palette entries added across all 8 themes. A sanitized real-world PSADT install log is bundled as a regression fixture with an integration test.
- Log error navigation (#192): Toolbar controls to jump straight to the previous or next error/warning entry in the log view, so you can step through problems without scrolling.
- Teams (MSIX) client log collection (#205, #242): The log collector and known-sources list now cover the new Microsoft Teams (MSIX) client log locations.
Fixed
- CCM empty/absent type coercion (#248): Fixed a latent bug where a missing, empty, or unparseable CCM type field was coerced to 0. Now that type="0" maps to Success, those lines preserve a None type and correctly fall back to text-based severity detection. Known numeric types map directly (0→Success, 1→Info, 2→Warning, 3→Error) and unknown numeric types fall back to Info.
- Session filter restore and persistent error logging (#193, #244): Opening a saved session now restores the filter that was active when it was saved, and the app writes persistent error logs (via tauri-plugin-log) to make troubleshooting easier.
- Tail view reset on truncation or rotation (#234, #243): When a tailed file is truncated or rotated, the view now resets and re-reads from the start instead of showing stale or duplicated lines.
- Log marker key source hygiene (#250): Replaced a raw NUL control byte in the row-marker key delimiter with the \x00 escape sequence — byte-identical at runtime, but the source file is now plain text. No behavior change.
Changed
- Tauri 2.11 runtime (#240): Upgraded the app to the Tauri 2.11 stack (runtime/webview) to match the frontend, and repaired the Cargo workspace and a stale lockfile so CI, nightly, and release builds pass again.
- TypeScript 7 (#247): Upgraded the frontend compiler from TypeScript 6 to the native (Go) TypeScript 7.0.2 (GA). No source changes were required, and type-checking is ~5.5× faster (tsc --noEmit ~3.8s → ~0.7s), speeding up both CI and local builds.
- Clippy --all-targets enforcement (#245): CI now runs cargo clippy --all-targets -D warnings (full and Lite), catching lints in test and benchmark targets that previously slipped through; the two latent lints this surfaced were fixed.
- Re-issued code-signing certificate: Windows builds are now signed with a re-issued Azure Trusted Signing certificate (still a valid Microsoft Public Trust certificate; macOS builds remain signed and notarized). Because the signing identity was renewed, Windows SmartScreen reputation is rebuilding — fresh installs may briefly show an "unrecognized app" prompt. The installers are validly signed; More info → Run anyway is safe.
Documentation
- Full vs Lite editions in README (#227, #241): New "Editions: Full vs Lite" section describing what each download includes — Full (default) bundles every specialized workspace and tool; Lite (--no-default-features) is the core log viewer plus the Timeline and DNS/DHCP workspaces, with a smaller binary.
Security
- Patch tar and rkyv advisories (#249): Bumped tar 0.4.45 → 0.4.46 (GHSA-3pv8-6f4r-ffg2, PAX header desynchronization) and rkyv 0.8.15 → 0.8.16 (GHSA-vfvv-c25p-m7mm, panic-safety bugs enabling arbitrary code execution), resolving the two fixable Dependabot alerts. The remaining glib 0.18 unsoundness (RUSTSEC-2024-0429) is fixed in glib 0.20 but blocked upstream — gtk 0.18, pinned transitively by Tauri 2.11 on Linux, requires glib ^0.18 — so it is documented as an accepted, warn-level advisory until Tauri adopts gtk-rs 0.20.
- Ignore quick-xml RUSTSEC-2026-0194/0195 (#239): Two newly published quick-xml advisories (transitive-only on Linux via the Tauri clipboard stack, not bumpable without an upstream update) are ignored alongside the other Tauri Linux transitive advisories, matching existing policy.
- Microsoft Security DevOps workflow: Added a GitHub Actions workflow that runs Microsoft Security DevOps (MSDO) static analysis over the repository.
Build & CI
- Signed nightly build channel: Stood up a signed nightly release channel with its own updater feed and a published "nightly builds" page.
- Nightly failure alerting (#236): A notify-failure job opens/updates a tracking issue when a scheduled nightly run fails, and a notify-recovery job auto-closes it once a nightly fully succeeds again.
Dependencies
- Rust: evtx 0.11 → 0.12 (#217); added tauri-plugin-log (#244); tar 0.4.45 → 0.4.46 and rkyv 0.8.15 → 0.8.16 (security patches, #249).
- Frontend (production): react/react-dom 19.2.5 → 19.2.7, zustand 5.0.12 → 5.0.14, @fluentui/react-components 9.73.8 → 9.74.3, @fluentui/react-charts 9.3.18 → 9.3.21, @fluentui/react-icons 2.0.325 → 2.0.331, @tanstack/react-virtual 3.13.24 → 3.14.4, and the @tauri-apps/* plugins (#209, #233).
- Frontend (dev): typescript 6.0.3 → 7.0.2, vite 8.0.9 → 8.1.3, @tauri-apps/cli 2.11.0 → 2.11.4, @playwright/test 1.59.1 → 1.61.1, and others (#222, #235).
- GitHub Actions: azure/trusted-signing-action → 2.0.0, actions/checkout → 7.0.0, tauri-apps/tauri-action → 1.0.0, and others (#188, #197–#232).
Full changelog: v1.3.2...v1.4.0
