Start 1.5.3 and fix the release lab's CRL check

CHANGELOG.md

@@ -12,6 +12,8 @@ exhaustive.
 
 ## [Unreleased]
 
+Planned version: **1.5.3**.
+
 ## [1.5.2] - 2026-10-24
 
 ### Added

Directory.Build.props

@@ -16,7 +16,7 @@
     <ImplicitUsings>enable</ImplicitUsings>
     <Nullable>enable</Nullable>
     <LangVersion>latest</LangVersion>
-    <Version>1.5.2</Version>
+    <Version>1.5.3</Version>
   </PropertyGroup>
 
   <!--

README.md

@@ -1,5 +1,7 @@
 <div align="center">
 
+<img src="docs/images/logo.png" alt="NodePilot logo" width="180">
+
 # NodePilot
 
 **Open-source Windows and PowerShell workflow automation. Self-hosted, agentless execution over WinRM, with an import path for System Center Orchestrator runbooks.**

scripts/release-lab/README.md

@@ -53,8 +53,8 @@ ready within five minutes, and logs no error entry.
 
 **A** passes when `Start-Service` returns within 30 s while the database is down, the wait line
 names the connection error, and the service becomes ready on its own once the database is back,
-without an error entry. **B** passes when the setup refuses before installing anything and says the
-certificate's revocation status could not be checked.
+without an error entry. **B** passes when the setup refuses before installing anything and its abort message
+names the failed certificate revocation validation.
 
 **P1** sets the machine execution policy to `AllSigned` the way a GPO does, then runs
 `allsigned-workflow.json` instead of the smoke workflow: a script step in the default Windows

scripts/release-lab/server/Invoke-ServerMatrix.ps1

@@ -200,7 +200,7 @@ foreach ($s in $scenarios) {
             }
             if ($s.check -eq 'crlMissing') {
                 $inno = Invoke-Command -Session $session -ScriptBlock { Get-Content 'C:\NP-Test\B-inno.log' -Raw -ErrorAction SilentlyContinue }
-                $refused = $r.setupExit -ne 0 -and $inno -match 'certificate revocation could not be checked'
+                $refused = $r.setupExit -ne 0 -and $inno -match 'certificate revocation validation failed'
                 $r | Add-Member -NotePropertyName preflightRefused -NotePropertyValue $refused -Force
                 $r.verdict = if ($refused) { 'PASS' } else { 'FAIL' }
             }

src/nodepilot-desktop/package.json

@@ -1,7 +1,7 @@
 {
   "name": "nodepilot-desktop",
   "productName": "NodePilot",
-  "version": "1.5.2",
+  "version": "1.5.3",
   "description": "NodePilot desktop shell — a thin Electron viewer for the locally-hosted NodePilot backend.",
   "private": true,
   "license": "Apache-2.0",

src/nodepilot-docs-ui/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodepilot-docs-ui",
-  "version": "1.5.2",
+  "version": "1.5.3",
   "description": "NodePilot documentation website - React SPA.",
   "type": "module",
   "private": true,

src/nodepilot-ui/package.json

@@ -1,7 +1,7 @@
 {
   "name": "nodepilot-ui",
   "private": true,
-  "version": "1.5.2",
+  "version": "1.5.3",
   "type": "module",
   "engines": {
     "node": ">=22.22.0"