Skip to content

Release v0.16.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Jun 18:40
v0.16.0
This tag was signed with the committer’s verified signature.
grunch Francisco Calderón
GPG key ID: 3852B843679AD6F0
Verified
Learn about vigilant mode.
5b07eb7
This commit was signed with the committer’s verified signature.
grunch Francisco Calderón
GPG key ID: 3852B843679AD6F0
Verified
Learn about vigilant mode.

Verifying the Release

In order to verify the release, you'll need to have gpg or gpg2 installed on your system. Once you've obtained a copy (and hopefully verified that as well), you'll first need to import the keys that have signed this release if you haven't done so already:

curl https://raw.githubusercontent.com/MostroP2P/mostro/main/keys/negrunch.asc | gpg --import
curl https://raw.githubusercontent.com/MostroP2P/mostro/main/keys/arkanoider.asc | gpg --import

Once you have the required PGP keys, you can verify the release (assuming manifest.txt.sig.negrunch, manifest.txt.sig.arkanoider and manifest.txt are in the current directory) with:

gpg --verify manifest.txt.sig.negrunch manifest.txt
gpg --verify manifest.txt.sig.arkanoider manifest.txt

gpg: Signature made fri 10 oct 2025 11:28:03 -03
gpg:                using RSA key 1E41631D137BA2ADE55344F73852B843679AD6F0
gpg: Good signature from "Francisco Calderón <fjcalderon@gmail.com>" [ultimate]

gpg: Signature made fri 10 oct 2025 11:28:03 -03
gpg:                using RSA key 2E986CA1C5E7EA1635CD059C4989CC7415A43AEC
gpg: Good signature from "Arkanoider <github.913zc@simplelogin.com>" [ultimate]

That will verify the signature of the manifest file, which ensures integrity and authenticity of the archive you've downloaded locally containing the binaries. Next, depending on your operating system, you should then re-compute the sha256 hash of the archive with shasum -a 256 <filename>, compare it with the corresponding one in the manifest file, and ensure they match exactly.

What's Changed in v0.16.0

🚀 Features

  • Phase 3 — transport auto-detection + get-dm v2 + docs by @grunch
  • Phase 2 — protocol-v2 (NIP-44 direct) selection by @grunch

🐛 Bug Fixes

  • address PR review feedback by @grunch
  • harden permissions for local mnemonic database by @grunch
  • treat empty TRANSPORT as unset in resolve_transport by @grunch
  • wait for relay connection before first request by @grunch
  • make DM-listing/follow-up fetches transport-aware (Codex review) by @grunch
  • add specific error message for NotFound CantDoReason by @AndreaDiazCorreia
  • wait for Mostro reply before showing success in admin cancel/settle by @AndreaDiazCorreia
  • filter wait_for_dm notifications so PoW detection actually fires by @grunch
  • run PoW probe concurrently with the DM wait by @grunch
  • bound the post-timeout PoW probe to avoid doubling latency by @grunch
  • surface explicit PoW rejection instead of generic timeout by @grunch

💼 Other

  • Update CHANGELOG for version 0.16.0 by @grunch
  • feat(transport): Phase 3 — auto-detection + get-dm v2 + docs by @grunch in #178
  • feat(transport): Phase 2 — protocol-v2 (NIP-44 direct) selection by @grunch in #177
  • chore(deps): adopt mostro-core 0.13.0 (transport-v2 foundation) by @grunch in #176
  • fix(admin-disputes): confirm Mostro reply before reporting settle/cancel success by @grunch in #171
  • fix(pow): filter wait_for_dm notifications so PoW detection actually fires by @grunch in #174
  • fix(pow): surface explicit PoW rejection instead of generic timeout by @grunch in #173

🚜 Refactor

  • rename info tag protocol_versions -> protocol_version by @grunch

📚 Documentation

  • clarify v2-aware DM comment + test create_filter author pin by @grunch
  • clarify v2 API name, kind-not-version gating, and compat guard by @grunch

⚙️ Miscellaneous Tasks

  • Release mostro-cli version 0.16.0 by @grunch

🛡️ Security

  • fix(security): harden permissions for local mnemonic database by @grunch in #180

Contributors

Full Changelog: v0.15.3...v0.16.0

Assets 10
Loading