WebJam v0.28.1 — unsigned private test candidate.

Warning

This is an unsigned private test candidate, not a production-trusted release.
Windows packages are unsigned. macOS packages are ad-hoc signed and are not
notarized or reviewed by Apple. Physical audio, hardware, Gatekeeper,
SmartScreen, signing, and notarization gates remain NOT RUN unless the
release notes explicitly record otherwise.

Security remediation: this candidate upgrades cryptography to 50.0.0,
fixing CVE-2026-69247, CVE-2026-69248, and CVE-2026-69249. Windows,
Linux, and Apple-silicon macOS use upstream binary wheels. Because
upstream removed Intel macOS wheels, that package uses WebJam's documented,
hash-locked native x86_64 source-build path with static OpenSSL 3.5.7 LTS.

The macOS DMGs and ZIPs include a guided installer plus a separately labeled
advanced helper that removes quarantine from the installed WebJam app only.
They also include a self-contained Pocket Stage iPhone Setup Xcode project;
an Apple ID with a free Personal Team is sufficient for owner-device testing.
Jamulus managed updates require a separate signed, expiring component catalog
that exactly authorizes this WebJam version. If no compatible catalog exists,
WebJam rejects the catalog and keeps the reviewed embedded Jamulus 3.12.2
fallback. Platform approval is explicit, and updates never interrupt an active
Jamulus lifecycle. Verify the attached SHA-256 manifest before installing.

What's Changed

• docs: record published unsigned v0.28.0 as GitHub Latest by @rupret007 in #123
• docs: close post-#123 Latest honesty leftover in simple/demo/mobile by @rupret007 in #124
• fix: clarify Art host network recovery by @rupret007 in #125
• Name the button in the host room-ended recovery message by @rupret007 in #126
• Name Paste New Invite in used-invitation recovery copy by @rupret007 in #127
• Complete the Art source demo and macOS CI verification by @rupret007 in #128
• docs: refresh Mobile Art companion tip MATCH after #128 by @rupret007 in #129
• Name Reset Invite in used-up host invitation recovery copy by @rupret007 in #130
• Name Paste New Invite in guest used-invitation failure flashes by @rupret007 in #131
• Clarify Conversation watch-together vs Paint along (Webex share guidance) by @rupret007 in #132
• Name Open my copy… when Paint along needs a guest file by @rupret007 in #133
• Name Try Again in guest retry-safe failure flashes by @rupret007 in #134
• Name Start New Room after a confirmed Art room exit by @rupret007 in #135
• docs: refresh tip MATCH after #130–#135 recovery naming by @rupret007 in #136
• Name Copy New Invite after a Wi-Fi address change by @rupret007 in #137
• Name Try Again in guest retry-safe HUD recovery copy by @rupret007 in #138
• Name Choose Try Again when Music port inspection fails by @rupret007 in #139
• Name Choose Connect to Wi-Fi when Music host network is unavailable by @rupret007 in #140
• release: prepare unsigned v0.28.1 candidate by @rupret007 in #141

Full Changelog: v0.28.0...v0.28.1