Skip to content

JSON Analyzer v0.1.9 - The Quiet Path Opens

Choose a tag to compare

View all tags
@github-actions github-actions released this 08 Jun 12:47
· 12 commits to main since this release
v0.1.9
1803e6b

JSON Analyzer v0.1.9 - The Quiet Path Opens

The Quest

The repository gate was sound, but its footpath was too narrow. The installer verified the setup package correctly and enabled the APT source, yet APT could not let its _apt sandbox step through the private temporary directory that held the local setup package. The install completed, but the road ended with a warning that looked sharper than it was.

What Awoke

  • The APT repository installer now keeps signature, checksum, keyring, and GnuPG work inside the private verification directory.
  • The local repository setup .deb is now placed in a separate /tmp install directory that APT's _apt sandbox can traverse.
  • The setup package remains world-readable only for the short install window, and cleanup removes both temporary directories on exit.
  • The README latest/download/install-apt-repo.sh path will pick up this quieter installer once the release assets are published.

Runes of Assurance

  • sh -n scripts/install-apt-repo.sh passed.
  • git diff --check passed.
  • A simulated release substitution with the live APT signing fingerprint kept the pinned fingerprint intact.
  • Temporary directory permissions were sanity checked so verification files stay private while the local .deb path is _apt-readable.

Known Boundaries

  • The exact _apt notice could not be reproduced on the local macOS workstation; hosted Linux release validation remains the final build proof.
  • This release changes installer behavior only; application UI, parsing, PDF export, auto-update metadata, and Windows signing remain unchanged.
  • The APT repository currently publishes Linux amd64 packages only.
Assets 11
Loading