Arf v1.9.1
Added
- Signed release manifests. Every release now ships a
SHA256SUMS.txtcovering all assets, with a detached GPG signature made by the Arf release key (RELEASE_SIGNING_KEY.ascin the repository). Verification steps are in SECURITY.md.
Changed
- The macOS first-launch instruction in the release notes now matches macOS 15 and later (System Settings → Privacy & Security → Open Anyway).
Installing — these builds are unsigned (no paid certificate yet):
- Windows — SmartScreen may warn: More info → Run anyway.
- macOS — open the app once, dismiss the warning, then allow it under System Settings → Privacy & Security → Open Anyway.
- Linux — the
.AppImageis portable:chmod +xand run. - Verify (optional) — every asset is listed in
SHA256SUMS.txt, signed with the release key:gpg --verify SHA256SUMS.txt.asc SHA256SUMS.txt
Free and open source. Read the source, not the privacy policy.