Skip to content

v1.0.4

Latest

Choose a tag to compare

@github-actions github-actions released this 02 Sep 19:32
e0a31e3

Verify before you install

Every artifact here is signed with GitHub build provenance — a Sigstore attestation binding the
file's digest to this repository, this workflow, and the commit that built it. There is no
maintainer key to fetch and no trust-on-first-use step.

gh attestation verify BTCPayServer.Plugins.Flint.btcpay --repo sethforprivacy/flint

Offline, against the attestation.jsonl bundle attached below rather than GitHub's API:

gh attestation verify BTCPayServer.Plugins.Flint.btcpay \
  --bundle attestation.jsonl --repo sethforprivacy/flint

SHA256SUMS is attested too, so it can be trusted once verified. One quirk: BTCPay's PluginPacker
writes it with a single space between hash and filename. GNU sha256sum -c accepts that; macOS's
shasum -a 256 -c rejects the whole file, so on macOS compare shasum -a 256 <file> by eye.

Installing

Server settings → Plugins, find Flint in the plugin store (official listing), and install it. BTCPay restarts itself to finish.

Alternatively, Server settings → Plugins → Upload plugin, and select BTCPayServer.Plugins.Flint.btcpay. BTCPay restarts itself to finish. Both routes require BTCPay Server 2.4.1 or newer, on a non-Alpine host.

Read the CHANGELOG for what is in this release and how far it has actually been proven, and the trust model, before you put money through it.

What's Changed

  • chore: gitignore *.local.md; withhold regtest SDK log on preimage/session-token by @sethforprivacy in #55
  • Resolve the setup-tab store from the request authorisation, not the form model by @sethforprivacy in #56
  • Release the storage lock when the Spark SDK connect throws by @sethforprivacy in #57
  • Low-risk hardening batch: scrubbed SDK errors, path-free lock reason, packaging and test hygiene by @sethforprivacy in #63
  • Gate forwarded.log and fingerprint withheld material in the funded-regtest audit artifacts by @sethforprivacy in #58
  • Pin the dependency graph: lock files, exact Spark SDK pin, locked-mode CI restores by @sethforprivacy in #59
  • Order the settleable-invoice walk by expiry over its own partial covering index by @sethforprivacy in #61
  • Gate payment-hash prompt recording on Flint presence; 14-day retention by @sethforprivacy in #62
  • Classify the cross-store Lightning sweep from loaded stores; run it at startup plus 30 minutes by @sethforprivacy in #60
  • Release 1.0.4 by @sethforprivacy in #64

Full Changelog: v1.0.3...v1.0.4