Skip to content

Fractum v1.4.1

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Jul 16:56
v1.4.1
5d39ed4

🔐 Security Verification

GPG Signature: ✅ This release is cryptographically signed
Key ID: D009F6290DCFDAB6
Signed by: S.A.S.U. KATVIO (Fractum Release Signing)

Verify Release Authenticity

# Import KATVIO public key
curl -O https://fractum.katvio.com/fractum-signing-key.asc
gpg --import fractum-signing-key.asc

# Verify tag signature
git tag -v v1.4.1

# Verify package checksum
sha256sum -c checksums.txt

📋 Release Notes

GPG Signature: This release is cryptographically signed
Key ID: D009F6290DCFDAB6
Signed by: S.A.S.U. KATVIO (Fractum Release Signing)

curl -O https://fractum.katvio.com/fractum-signing-key.asc
gpg --import fractum-signing-key.asc

git tag -v v1.4.1

sha256sum -c checksums.txt

CONTENT OF RELEASE:

This release focuses on fixing some non-critical misbehaviours.

IMPORTANT: The previous version (v1.4.0) is considered secure, see the best practices.. See also the security bulletin.

Commits included in the release:

  • ee16a7a — feat: add --bundle-encrypted, tests, release process and docs edited
  • 82ed5cd — fix(cli): complete truncated except clause in collect_manual_shares
  • c681198 — fix: patch v1.4.1 blockers — offline build, arm64 wheel, version check (M5), zip bomb (L4), label messaging (#32)
  • 9120f90 — ci: trigger CodeQL workflow on WhiteStarSupreme/misc-sec-improvements-pt1 branch
  • 20438c9 — ci: point CodeQL workflow at dev/main instead of a feature branch
  • c4b8118 — Merge branch 'dev' into WhiteStarSupreme/misc-sec-improvements-pt1

For technical details see PR: https://github.com/katvio/fractum/pull/33/changes

  • Source Code: Use git clone or download ZIP
  • Verification: Always verify GPG signatures before use:
    -----BEGIN PGP SIGNATURE-----
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=Sa/r
-----END PGP SIGNATURE-----

📦 Download Options

  • Source Code: Use git clone or download ZIP
  • Verification: Always verify GPG signatures before use
Assets 4
Loading