Skip to content

ESTAMPIE 0.3.1

Choose a tag to compare

@github-actions github-actions released this 20 Oct 22:57
· 36 commits to main since this release

ESTAMPIE 0.3.1: the first release built and signed by GitHub, so you can check that it came from this source.

Install it from the browser at https://fm-1.drewr.dev/estampie/webapp/installer/ (Chrome or Edge), or install the .fwsc with FM1Kit or FM-SWITCH. Try it first in your browser at https://fm-1.drewr.dev/estampie/webapp/emu/.

What's new

  • Built from source, and signed: this release wasn't built on anyone's computer.
    • GitHub built it from the tagged commit, using the FM-1 Firmware Hub's shared workflow (zvenson/fm1-build), and ran the tests first.
    • GitHub then signed a build attestation for every file: the firmware, the app and the website.
    • The hub shows ESTAMPIE as Built from source, linking the exact commit and the public build log.
  • Check it yourself: gh attestation verify estampie-0.3.1.fwsc --repo ocean/estampie --signer-workflow zvenson/fm1-build/.github/workflows/build.yml. A signature tells you where a file came from, not that it's safe; the source is all here to read.
  • Reproducible: building the same tag on your own computer (tools/release.sh 0.3.1) gives the same files, byte for byte, and tools/verify_release.sh 0.3.1 compares them. The website zip is now reproducible too.
  • Everything from 0.3.0: the screen reader for the FM-1 and the browser version, ESTAMPIE's own words for it, and the new preview picture. The firmware itself is unchanged apart from its version number.

Thanks

Thank you to zvenson and the FM-1 Firmware Hub, and to keremimo and Ignis32, for the shared build workflow and the idea behind it: a firmware anyone can trace back to its source. Thanks as ever to Charles Vestal for fm1-reader, to Jason Persinger's GHOULBOX and Leo Kuroshita's Felucca (Hügelton Instruments), and to everyone in the README and CREDITS.md.

This is early work. Make a backup before you install.

Full changelog: v0.3.0...v0.3.1

Site zip SHA-256: fb2c1e06a96061eea38e2a13cb842d003609ce3a84ec3a1bb8540d4d9701b8bd