v1.4.1

• No change to the application. Build and release process only: the pipeline that
  produces the downloads was hardened. The tool that assembles the Linux AppImage is now a
  fixed, checksum-verified release instead of whatever build was newest that day; only the
  final publishing step can write to the repository; and every build action is pinned to an
  exact version and moved off a runtime GitHub is retiring. The Windows and macOS downloads
  are the same as v1.4.0 apart from the version stamp. The AppImage is expected to behave
  identically, but it is now packed by that pinned tool.
  (#24,
  #39)

• RELEASING.md now says what SHA256SUMS.txt does and does not prove: it shows a
  download arrived intact, not who made it, and none of the builds is code-signed.

What's Changed

• Add CI, release, and license badges to README by @Valkerran in #45
• Harden the CI and release pipeline by @Valkerran in #46

Full Changelog: v1.4.0...v1.4.1

---

Packaging

Download sizes are effectively unchanged from v1.4.0 on every platform: the AppImage is
4 KB smaller (56.5 MB, now packed by appimagetool 1.9.1 rather than the latest nightly), and
the Windows and macOS zips differ by under 0.1 MB. No runtime dependency was added or
dropped, and the minimum OS is unchanged.

macOS

The macOS .zip contains an unsigned PCEdit.app. On first launch, right-click the
app and choose Open (or run xattr -dr com.apple.quarantine PCEdit.app).