v0.14.3
·
104 commits
to master
since this release
Immutable
release. Only release title and notes can be modified.
Build:
- Release assets are now PGP-signed. The release workflow leaves the GitHub release as a draft, sign-release.sh detach-signs every asset — the .deb packages, the bare binaries, the source tarball and SHA256SUMS — verifies each signature, uploads the .asc files and only then publishes. Signing has to happen before publication because a published release's assets are immutable and can no longer be replaced.