Skip to content

v2.12.1

Choose a tag to compare

@github-actions github-actions released this 23 Oct 20:00

Bug Fixes

  • recover Bluetooth stalls and verify compressed video QR

Reproducible build: byte-identical output verified across two independent CI runners.

Artefact integrity

file:      canary-kit-2.12.1.tgz
size:      166295 bytes
sha256:    475564214a2f8abe99997502c3844b8c0205dda1290ae2e5a0ad6d1cb7d56b8f
sha512-zLyTh63Ga1MeCwAo7hVCk1vCFvMbQj25jcPF8zYrkHbQtu6ttVS++nKoIsd//tC3x6edd8H0xhtjRH5CyPfB4A==

Verify against the registry tarball:

curl -sLO https://registry.npmjs.org/canary-kit/-/canary-kit-2.12.1.tgz
shasum -a 256 canary-kit-2.12.1.tgz

Signet Vouch now retries stalled Bluetooth connection/discovery/reads and retains the final public reveal while the slower peer finishes. The live v13 website adds validated QR progress, front/back camera switching and a larger/slower display option. The existing Canary Kit/Spoken Token word engine, local vault and recipient encryption remain in use; WebRTC codecs are test tooling only, without a new production call service.

Validation includes 772 tests, JVM/Swift stalled-read checks, compiled Android/iOS packages and six real local VP8/H264 encoded-video transfers for pairing and encrypted copying in both directions. The delivery receipt records CI, package hashes and public readbacks.

Native apps remain development candidates, retained locally and not installed by this change or released to app stores. Bilateral physical Bluetooth, a camera through an actual trusted video call, device unlock and novice/panic usability await owner testing. Earlier NFC evidence belongs to its own binaries. See physical trial steps and the scoped UK assessment. No platform-account identity, live-relay resistance or blanket legal clearance is implied.