OMUS v1.0.2 — Every mouse. One system.

OMUS v1.0.2 — Secure updater redirect correction

OMUS v1.0.2 corrects the RPM, DEB, and AppImage updater's handling of GitHub
Release downloads. Canonical release URLs may redirect over HTTPS to GitHub's
exact release-asset infrastructure; OMUS now validates every hop, enforces a
bounded chain, strips sensitive headers across origins, and rejects downgrade,
external, deceptive, malformed, credential-bearing, and excessive redirects.

Artifact integrity remains independent of transport security. OMUS still
requires the canonical repository, exact release/version filename, complete
trusted SHA256SUMS manifest, and matching SHA-256 digest before installation.
The exact versioned SLSA provenance bundle remains intentionally outside the
checksum manifest, as required to avoid a checksum/provenance cycle; no other
release asset receives that exemption.
For repository-managed RPM installations, DNF is tried once first; if no newer
repository package exists, OMUS intentionally downloads the verified canonical
release RPM and asks DNF to install it.

Primary candidate artifacts are omus-1.0.2-1.fc44.noarch.rpm,
omus_1.0.2_all.deb, OMUS-1.0.2-x86_64.AppImage,
omus-1.0.2-py3-none-any.whl, and omus-1.0.2.tar.gz.

VirusTotal analysis

VirusTotal scanned the five primary distributable artifacts. Results are a point-in-time signal, not a certification of safety.

Artifact	SHA-256	Result at scan time	Analysis
OMUS-1.0.2-x86_64.AppImage	1f5d4346f5c5a241549cc247374833675075a80ed757dbeb1f6eeb8566ef7d0f	0 detections at scan time	VirusTotal analysis
omus-1.0.2-1.fc44.noarch.rpm	a1f5946826bbce5a2e6d0e98a7e4fee64d9ad4cf93e0348e54ac7bbb7340a090	0 detections at scan time	VirusTotal analysis
omus-1.0.2-py3-none-any.whl	75773fb5a6fe1adeaf0346ccee1cf794e525c7ddec64787e735d140e11302525	0 detections at scan time	VirusTotal analysis
omus-1.0.2.tar.gz	b005bfcf3c5e214a76b5c292b1f9ecd9a32f949274f031c01d672649225ef5cb	0 detections at scan time	VirusTotal analysis
omus_1.0.2_all.deb	7a81bc506dae31eb959243396248816819c8160002b1018f1f6715d506865dc6	0 detections at scan time	VirusTotal analysis