v1.4.1

Changelog (v1.4.0...v1.4.1)

New Features (3)

• feat: track Python RNS 1.5.7 (1ca9b2b)
• feat(ci): add NetBSD CI support and refactor BSD self-check scripts (92a6656)
• feat(protect): stronger DoS gates, replay dedup, live flood tests (e0aac5b)

Bug Fixes (9)

• fix(ci): feed cat-file requests from a file in tree manifest (8bc8a4d)
• fix(transport): dedup announces across transport-id rewrites (9b5764a)
• fix(cp): stream file sends and keep receive window across splits (d619f85)
• fix(transport): wrap rebroadcast announces with local transport id (e51e18d)
• fix(ci): create /usr/local before unpacking Go on NetBSD (538b6d9)
• fix: answer Python RPC timeout keys and skip local-client mesh rebroadcast (168f05e)
• fix: retry rgosh stream output on a full channel window (2dce728)
• fix: copy shared-instance announces when transport is off (293f375)
• fix: ordered link packet dispatch, local client data forwarding (688b21d)

Documentation (6)

• docs: date v1.4.1 release (26018d9)
• docs: clarify AI-assisted commit trailers with an example (edc6559)
• docs: multi-model trailer example (7f9c7d5)
• docs: fix quad4-arch link after rename to arch (6ef3cd9)
• docs: document Local method and AI-free commits (aaa7cb2)
• docs: open v1.4.1 changelog section (292f9ee)

CI/CD (9)

• ci: bound govulncheck install and scan with timeout (325af59)
• ci: run Android self-check on x86_64 emulator (d6bb729)
• ci: skip pre-gate identity history on merge (1104daf)
• ci: reject placeholder author names as well as emails (0414df4)
• ci: add portable Forgejo and Gitea PR gate (8a7c47e)
• ci: remove Dependabot Action update PRs (c1dccb9)
• ci: collapsible sections in release notes (40b7ad7)
• ci: goreleaser-style grouped release notes (246cccf)
• ci: SLSA Build L3 provenance and Rekor anchoring for releases (5d7695a)

Other Changes (2)

• chore: cleanup .gitignore (cec50b8)
• docs, ci: AI provenance trailers and notes (996b15b)

SHA256 digests (backup only)

Prefer verification with cosign: each release file has a matching *.cosign.bundle signed for this repo; use cosign.pub and scripts/ci/verify-release-attestation.sh (or cosign verify-blob-attestation). Bundles are anchored in the Rekor transparency log.

GitHub OIDC provenance attestation (SLSA Build L3) is available per asset:

gh attestation verify <file> --repo Quad4-Software/Reticulum-Go

6d0f4499d5d42af320796593b7c5fd1276ed8ea656abb7fdacd3fbb12af867f2  merged/reticulum-go-aix-ppc64
03af093d3fd86241243639ae09ecd00e64e8bf086771fffe374653af24b6eed5  merged/reticulum-go-android-arm64
8d3aebb85864c0706c4af1d8b2271fd23a080aefad8d47f8033dd7eda0ee8256  merged/reticulum-go-darwin-amd64
0a3728fca225a7c57bc0114e5cf4445877fc537986669c1e08369905cae97c05  merged/reticulum-go-darwin-arm64
43d2c0e1ac36b6639ec120f27388d126c18c64c3c06415fd6b5c551e3e772b94  merged/reticulum-go-dragonfly-amd64
ebdd5c4a96aa7321f6af1e2385c941ec06135b2cbe71d1f42081e52d85f16cbc  merged/reticulum-go-example-pageserver-linux-386
54040b69cfc393479064bc178fc7bcfccc43945c330a30d929273a165486b994  merged/reticulum-go-example-pageserver-linux-amd64
fec4cba1cb5f476fdb9bfa144742aca6278bb4dd2022409f9e2b4b0b4beef8b9  merged/reticulum-go-example-pageserver-linux-arm
4757687b318efe5987ba8e6790e01c5cecac8a202228be4bd4835a6f78ed8b02  merged/reticulum-go-example-pageserver-linux-arm64
38c0e03735b9d986d89e002707d7be980a9a9ec5a000345f97bbb63492300072  merged/reticulum-go-example-pageserver-linux-riscv64
eea772cec8f2593357f7987b69570299d9bcead0726c92a46f76e179f057eccd  merged/reticulum-go-example-wasm.wasm
41c0f815872b40d6c3b25be883ea3e81a7d4777ae34f5fd5f5cae2e7816b0c96  merged/reticulum-go-freebsd-386
20ef1993e5b77e689b87d76b4bf95a794f7a41587a528037661869e4d53b0650  merged/reticulum-go-freebsd-amd64
efbc306f038cf105f8e1d3820c885257141f0905b18233294868f37a616e9347  merged/reticulum-go-freebsd-arm
7c01977100276c4f117f46ecd4bff6dd2a2d40dda5d4ff8dd6082b57e44cada3  merged/reticulum-go-freebsd-arm64
456246a9ad7769f1589d1cc6c0f03db44e2bf40f55afee42149bfcb6623773a9  merged/reticulum-go-freebsd-riscv64
ea7bab9851bd800323959ed5a9863a890fa3e0b2544100cec08d1fd7157da405  merged/reticulum-go-illumos-amd64
8555e7184c6ec263e78e0c221cdaef879f77ea31f329a8e20016df3a41a1d222  merged/reticulum-go-js-wasm.wasm
c36ec450c57fc1af0c49f062ba711147683100bb28a9f63b6a0290b92a1f6e11  merged/reticulum-go-linux-386
fd559a9eb5390a97212cc9a8c689a5d5d33a97210dceed5562bb9c7d9c5950d7  merged/reticulum-go-linux-amd64
fd559a9eb5390a97212cc9a8c689a5d5d33a97210dceed5562bb9c7d9c5950d7  merged/reticulum-go-linux-amd64-v1
dd0409db0a9498fd69354be0ab6015931b0d205c31f06e57d9d536454e1c714c  merged/reticulum-go-linux-amd64-v3
681a05e6e31aa1bb5a19c3ecc74e8ab8c7e2bf42540e81c506b4b1b2dbe28836  merged/reticulum-go-linux-arm
ed136ca6c60dae28c0b683220f21584c081d48e261c296a712d8adbc6b11a7f5  merged/reticulum-go-linux-arm64
c36ec450c57fc1af0c49f062ba711147683100bb28a9f63b6a0290b92a1f6e11  merged/reticulum-go-linux-i686
06fb3836a5b351b546aed2d938d2cfc886ac57dce4b088cedb8591a736e408ad  merged/reticulum-go-linux-mips
ad61bea98a622fcc911ed03f6ecc84c617d6ca09cf57d29f7cc2fcd6e0259b11  merged/reticulum-go-linux-mips64
6606682786ed37f06270f2d7d4ae1f82151408f0732123bfebb8985a1405594b  merged/reticulum-go-linux-mips64le
257c02447d5a460619dea0124f0bbbeb44ed537d81883bfbbd08613251ec6190  merged/reticulum-go-linux-mipsle
fc25a2c9e8ded1cc7d41ecb4c270a8fc88289796b8202828002dee3eb5a5087f  merged/reticulum-go-linux-ppc64
2c25ed24f72b96d62327c8207ed187bfb19cf5393c471fb761018e3446d9ec55  merged/reticulum-go-linux-ppc64le
1c7d8966f7b2316a009f8ca262590f379008b1fcf238e2545b22b318e2623579  merged/reticulum-go-linux-riscv64
822092aef8f0fff08a72b6e169a5649354c642828cac71205cf1a7cbab7c5fbe  merged/reticulum-go-linux-s390x
1142d702878208092547f7cee43e8811cfbbaa6641057fa3eccdd5ba19031b6a  merged/reticulum-go-netbsd-386
1f609aee08518b5ff9ed6685542745c5ea09ae5740c5085945c4d9fb2fdfadcc  merged/reticulum-go-netbsd-amd64
ac786e81b0602c93a201419c407f610e8b1a232aa6193de0c625c1cced77ea63  merged/reticulum-go-netbsd-arm
374b28cc40a27880e8f9237849844ac5142e5e11f71dba245515bf27cfd32fb1  merged/reticulum-go-netbsd-arm64
303ac95cfeae32da0e9897e04d796fb47a6b27df059dbdf63e4fcedddc7491ef  merged/reticulum-go-openbsd-386
1d0068d882e71c3a07446caa7ac8f0a35f73c250f6091c7e6bf98d9090d42fea  merged/reticulum-go-openbsd-amd64
0a51d60e95264f860053b836ffb99894893a78ed841ecfbc8acd48c03ff80d70  merged/reticulum-go-openbsd-arm
5116217195bc4a3c6fe15d20ff35e46e1a85e24a4bcde591604a5cc6b4b51078  merged/reticulum-go-openbsd-arm64
317cc8ab794ea8734255880891dd2ccfedd4a93b7f20378c10873c782d8d6938  merged/reticulum-go-openbsd-ppc64
183d222dbc6d4cf0f22560df13ce17b885032195b12104ab95d44f094e6b1157  merged/reticulum-go-openbsd-riscv64
61b2661de192f76590c967eb42240c85a54b9fecffd48e328e01a392406039a8  merged/reticulum-go-sbom.cyclonedx.json
16acdc0a5c4602d3a8169a6607ef8dd6a5061ccafc67469487b2ced756de1021  merged/reticulum-go-sbom.spdx.json
8864eb512b4ed3459d1e6c090e5b38062aadcccbe658b3e864ca9173212a9772  merged/reticulum-go-solaris-amd64
adb54b7fb3742a8b1bc1c8e4ffc09c011a4ed0440d0f07c578edf23e44cdce85  merged/reticulum-go-windows-386-winxp.exe
f78aa1862fc6cecdce4104ddefb803feff03eba108f4d0614fa934672eefec93  merged/reticulum-go-windows-386.exe
7f87315bb6679004a5f8174ccfda63ca32d0f15fadf941549ced13316cf74fe4  merged/reticulum-go-windows-amd64-win7.exe
15804dba49b9246dcabfd83056f1ac2930cb10d6ec77e8d5c4bf643703deb01c  merged/reticulum-go-windows-amd64-winxp.exe
9abced83163848f5796aec72321a1b2498490f27fa52605e1aa3bc750d602c81  merged/reticulum-go-windows-amd64.exe
26a2a789a14f08a38dc9f06cdbdc36c13c981f652f42d49cdf8cd2a781fa9fe7  merged/reticulum-go-windows-arm64-win7.exe
7fd4940b1f7c959f59216a6e254b2e75d45b4d203a29415f3759b631255182c6  merged/reticulum-go-windows-arm64.exe