Astra Deck v4.46.0
Astra Deck v4.46.0 catches the public release channel up to the current profile-split build line.
Release package:
- Store-safe and GitHub-full Chrome ZIP/CRX artifacts.
- Store-safe and GitHub-full Firefox ZIP/XPI artifacts.
- Userscript artifact.
- CycloneDX npm SBOM.
- SHA256SUMS and release-manifest.json for asset verification.
Signing and provenance:
- CRX artifacts were built locally with the maintained ytkit.pem key.
- CI tag builds produce validation artifacts and attestations only; ytkit.pem is not stored in CI.
- release-manifest.json records localSigningRequired: true and the source commit.
Validation before release:
- GitHub Validate run 26951303023 passed JS, Python dependency audit, and Python downloader jobs.
- Local npm test, npm run check, py -3.12 -m pytest astra_downloader, npm run build:userscript, SBOM generation, and release manifest generation passed.