Linefeed 0.0.5

Signing update - 2026-09-09

Windows executables were re-signed without rebuilding: Fara Technologies LLC
is the primary signer and Mike Fara is the second signer. Both signatures
use SHA256 and RFC3161 timestamps. EXEs inside ZIP/MSIX downloads use this order;
MSIX container publisher identities are unchanged. Existing checksum files
were refreshed. Linux/macOS assets and Store-unsigned submissions are unchanged.

Fresh GitHub verification attestations cover the current replacement Windows
downloads and updated checksum files. The verification workflow
checked their SHA256 hashes against the reviewed manifest and validated the Windows
signatures, including EXEs inside archives. No signing credentials were used.

Verify a downloaded asset (replace FILE with its filename):

gh attestation verify FILE --repo faratech/linefeed --predicate-type https://faratech.dev/attestations/windows-release-verification/v1 --signer-workflow faratech/linefeed/.github/workflows/attest-existing-release.yml

These attestations cover hash and signature verification, not compilation or
source-to-binary provenance. The original build attestations still describe the
original hashes. Use the explicit predicate type above; the default command expects
build provenance. Checksum files are hash-checked only. You can also check embedded
signatures with signtool verify /pa /all <file.exe> (extract ZIPs first).

---

Linefeed 0.0.5

All Windows binaries (.exe) are signed with Azure Trusted Signing (Fara Technologies LLC first, Mike Fara second).

Downloads

• Windows x64: linefeed_x64.exe (Signed)
• Windows ARM64: linefeed_arm64.exe (Signed)
• Windows x86: linefeed_x86.exe (Signed)
• Linux: linefeed_linux_x64, linefeed_linux_arm64
• macOS: linefeed_macos (Universal)

Full Changelog: v0.0.4...v0.0.5

Verification

Verify Windows Authenticode signatures and unchanged non-Windows build attestations with:

# Windows
signtool verify /pa /all linefeed_x64.exe
signtool verify /pa /all linefeed_arm64.exe
signtool verify /pa /all linefeed_x86.exe

# Linux & macOS
gh attestation verify linefeed_linux_x64 --owner faratech
gh attestation verify linefeed_macos --owner faratech