nano-rs v0.0.17

nano-rs 0.0.17

Verification

All release binaries are verified with GitHub artifact attestation:

# Windows
gh attestation verify nano-amd64.exe --owner faratech
gh attestation verify nano-arm64.exe --owner faratech

# Linux
gh attestation verify nano-linux-amd64 --owner faratech
gh attestation verify nano-linux-arm64 --owner faratech

nano-rs v0.0.16

Signing update - 2026-09-09

Windows executables were re-signed without rebuilding: Fara Technologies LLC
is the primary signer and Mike Fara is the second signer. Both signatures
use SHA256 and RFC3161 timestamps. EXEs inside ZIP/MSIX downloads use this order;
MSIX container publisher identities are unchanged. Existing checksum files
were refreshed. Linux/macOS assets and Store-unsigned submissions are unchanged.

Fresh GitHub verification attestations cover the current replacement Windows
downloads and updated checksum files. The verification workflow
checked their SHA256 hashes against the reviewed manifest and validated the Windows
signatures, including EXEs inside archives. No signing credentials were used.

Verify a downloaded asset (replace FILE with its filename):

gh attestation verify FILE --repo faratech/nano-rs --predicate-type https://faratech.dev/attestations/windows-release-verification/v1 --signer-workflow faratech/nano-rs/.github/workflows/attest-existing-release.yml

These attestations cover hash and signature verification, not compilation or
source-to-binary provenance. The original build attestations still describe the
original hashes. Use the explicit predicate type above; the default command expects
build provenance. Checksum files are hash-checked only. You can also check embedded
signatures with signtool verify /pa /all <file.exe> (extract ZIPs first).

---

nano-rs 0.0.16

Updater improvements: value-aware NANO_UPDATE_CHECK / NANO_NO_UPDATE_
CHECK with the background check now default-on on every platform; the
24-hour throttle arms only after a completed HTTP round-trip so being
offline never silences checks; --force counts only before the first
FILE argument; new "nano --check" probe; rollback backups keep the
previous binary as .old on every install/update; updates apply to
every applicable location (running exe and managed install path); the
interactive titlebar is branded GNU nano-rs and shows "[vX ready]"
while a validated update awaits restart.

Verification

Verify Windows Authenticode signatures and unchanged non-Windows build attestations with:

# Windows
signtool verify /pa /all nano-amd64.exe
signtool verify /pa /all nano-arm64.exe

# Linux
gh attestation verify nano-linux-amd64 --owner faratech
gh attestation verify nano-linux-arm64 --owner faratech