v4.10.5

Release Notes

Fixed

• Flatpak CDN: the release purge now reaches the Bunny API under the CI egress allowlist, and an unreachable purge no longer fails the whole release.
• CI: the Flatpak OSTree publish is best effort in the release pipeline. A CDN failure no longer fails the release run, since the GitHub, PyPI, and rngit assets are already complete.

Notes

• v4.10.4 is skipped due to a CI/CD issue with the Flatpak CDN purge and tags are immutable.

Changelog

No previous tag found; changelog omitted.

SHA256 Checksums

Asset	SHA256
meshchatx-frontend.zip	ee31dee01fd5cb58b0fa54cba3c0d9dcfc4c69c7a1dce0fb0f89e4e304fc2820
MeshChatX-v4.10.5.torrent	dd9eb5c15b82dd4d4d65070d4b5c082b7082b52bf052076160094f12b3c25f7e
ReticulumMeshChatX-v4.10.5-linux-amd64.deb	42f720c4b011a91311068d7a10daf4dc41c7c4c5e3db5595a30732032857c370
meshchatx-linux-v4.10.5.intoto.jsonl	3b8277a60392cb4d444cc32a95a65762aa5088ac23a5088cc0c850d1c326b690
ReticulumMeshChatX-v4.10.5-win-installer.exe.blockmap.cosign.bundle	52da3e7d5d3b9b96e4cd730ac475d33767ad52f8ea2db8cb29d90cadb75ee5e6
meshchatx-desktop-v4.10.5.intoto.jsonl	4044beeb476f16d51de363c415274239a7d9ef9a47f881f32a64c3bb1c92b9aa
ReticulumMeshChatX-v4.10.5-mac-x64.dmg	40ccdc0ab9efb71411895ca4de139af358edfbe6be2a689480898bc25bf3dcd6
ReticulumMeshChatX-v4.10.5-mac-x64.dmg.cosign.bundle	37e3219e06e81c2ad8f5e84a50c3d1e03018f1b77b1b77bec2eb5ae03710b087
reticulum_meshchatx-4.10.5-py3-none-any.whl	768788c86cdb6d6bc787d0d0d444e4993a6cbf9582115921cb546d5d6b96d3f5
ReticulumMeshChatX-v4.10.5-mac-arm64.dmg	055245f4070928efb8d216c236da5d571285a92664755f470acc48f3c8457330
ReticulumMeshChatX-v4.10.5-linux-x86_64.AppImage	2725becc691db6213e3704ad0e955a004062ecb6b1f1195981e5d3a0566c219d
MeshChatX-v4.10.5.json	af25deb676ff938265709bc5b552f57db08091a913c7eb69448562ffa0c2a38c
latest.yml.cosign.bundle	050d5d5d85058a28f3c70b80858950819b067ff8edb18e47ad981b13dcdd9f6e
ReticulumMeshChatX-v4.10.5-win-installer.exe	470a06566838c0c13aa966c7ac3e50c9227e93ad221fa70016e9ff0372b171a1
ReticulumMeshChatX-v4.10.5-win-portable.exe	7dcc7da6a85469408f590b4423058780857516c8334fa2a3d3b244567f16d86e
ReticulumMeshChatX-v4.10.5-linux-arm64.deb	e1001bfe8a3eae1cf0e426d6f52c25ab51bc7b1b1c39a617a2a1c9d9af81bdbe
ReticulumMeshChatX-v4.10.5-linux-arm64.AppImage	3eb2c5d03a73dc77d729b0d7850aa2de55277b89d90a06d85fecd4cc09a3a026
ReticulumMeshChatX-v4.10.5-win-installer.exe.cosign.bundle	866b6d3d34529ee552103cb6da81325b19ca583289563f11c7c5c2357f50cb30
ReticulumMeshChatX-v4.10.5-mac-arm64.dmg.cosign.bundle	ce40464ec6776a573f8d923cdf089a98304e1c9ddeba64dcbca906d88028fcec
latest.yml	e0dc6d12ddd10d17955ab49dde94b7caf0cf2be073145decf5ece6e51222c764
ReticulumMeshChatX-v4.10.5-win-installer.exe.blockmap	284be421d29d8f5b7c38e7a41ad7dd70737b51afd0cc568d89e1bd471a4d60cd
meshchatx-android-flatpak-v4.10.5.intoto.jsonl	344f8240cbe1f1c371ee641cdf035185479018f31cc8211327345fe1cac299fc
meshchatx-py314-linux-x64.pyz	2903e8994a3812ba2ebc181c007a5f6ced06faadef6a2c424ef87d36fe94f473
ReticulumMeshChatX-v4.10.5-android-universal.apk	07249cdd5ef7a3cc1a024131673527c24a9259eb640741077c485f594be2c8ec
meshchatx-py311-linux-arm64.pyz	90fe01c7e1fd536a6001dd7bfdfa992bf274735d3c0d44c7d324cef410498409
ReticulumMeshChatX-v4.10.5-win-portable.exe.cosign.bundle	dc82a5d64a49d67ece2d95a37ae9f2838b48dcfcd99e7fe4e8e1d4d3e07cf260
openvex.json	d6aa027853ecbc974f8c52f64c4fa5c874724ad412bd33c77483cf167853077d
meshchatx-py314-linux-arm64.pyz	0c88e25969f3a52761216ab4e2aefc21e7ab65098bc032f11f72e8e0368adaa7
sbom.cyclonedx.json	52ab685315a12cc45fab1c6f8fcd7f762887c75b39d549311849f39b30e90a88
meshchatx-py311-linux-x64.pyz	073a51c00637a0023fab53feac6c0aa435713eaf3eabb80af37bf617ac87fca1
ReticulumMeshChatX-v4.10.5-linux-x86_64.flatpak	c5ce24fd6bb6b6b75d1807e44cee45a16000699f7ba9a83ad382abcb0ad6149d

Verification

• Cosign bundles (.cosign.bundle) are attached for keyless sigstore verification.
• SLSA provenance (.intoto.jsonl) is available for supply-chain attestation.
• Or verify manually using the SHA256 table above.