jyvikoandClaude Opus 5.5 86ba1bda5c Release: sign SHA256SUMS.txt with the release key; docs/updates.md (#231) ...

The release job signs SHA256SUMS.txt into SHA256SUMS.txt.minisig with rsign2 when the
FIELDCRAFT_SIGNING_KEY secret exists, and checks the signature against the public key the app
is built with; without the secret the draft is unsigned, the run warns and the notes say the
app cannot install that release itself. docs/releasing.md says how the key is set up, kept
and rotated; docs/updates.md describes checking, verifying and installing, the web app's
Reload to update, and FIELDCRAFT_UPDATE_HOST for tests. privacy.md, control-protocol.md,
web.md and the roadmap say what changed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UhhZMBTviDQxZvwnyP89fo

2026-10-15 01:48:30 -04:00

..

arch-check.yml

ci: weekly build check for Linux arm64 and riscv64

2026-10-14 09:45:57 -04:00

ci.yml

ci: Dependabot pull requests regenerate THIRD-PARTY-LICENSES.txt; num-bigint moves with num-rational

2026-10-14 10:04:00 -04:00

dependabot-licences.yml

ci: the Dependabot licences commit skips CI (its tree was already tested)

2026-10-14 10:09:08 -04:00

packaging-lint.yml

ci: packaging lint for the workflows, packaging scripts and desktop metadata

2026-10-14 09:45:57 -04:00

pages.yml

web: the deployed browser build carries the PostHog key (#305)

2026-10-15 01:13:55 -04:00

release.yml

Release: sign SHA256SUMS.txt with the release key; docs/updates.md (#231)

2026-10-15 01:48:30 -04:00