feat(release): signed SHA256SUMS.txt for the Linux downloads (#36) #41

Merged

jared merged 1 commits from feat/linux-checksums into main

2026-10-19 00:37:44 -04:00

Author	SHA1	Message	Date
Lotus CIandClaude Opus 5.5	4b9f3c092d	feat(release): signed SHA256SUMS.txt for the Linux downloads (#36 ) The .deb and .pkg.tar.zst are not signed packages, and the in-app update prompt has users install them by hand, so nothing checked them. A new checksums job hashes the Linux downloads into SHA256SUMS.txt, signs it with the updater's minisign key (tauri signer) and uploads SHA256SUMS.txt + SHA256SUMS.txt.minisig. The README shows the verify-then-install command. Refs #36 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5	2026-10-19 00:35:30 -04:00

Author

SHA1

Message

Date

Lotus CIandClaude Opus 5.5

4b9f3c092d

feat(release): signed SHA256SUMS.txt for the Linux downloads (#36 )

The .deb and .pkg.tar.zst are not signed packages, and the in-app
update prompt has users install them by hand, so nothing checked them.
A new checksums job hashes the Linux downloads into SHA256SUMS.txt,
signs it with the updater's minisign key (tauri signer) and uploads
SHA256SUMS.txt + SHA256SUMS.txt.minisig. The README shows the
verify-then-install command.

Refs #36

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5

2026-10-19 00:35:30 -04:00