Skip to content

chore: publish the signed Sparkle appcast for 1.1.0 - #16

Merged
LucaGerlich merged 1 commit into
mainfrom
chore/appcast-1.1.0
Oct 11, 2026
Merged

LucaGerlich merged 1 commit into
mainfrom
chore/appcast-1.1.0

Conversation

@LucaGerlich

Copy link
Copy Markdown
Owner

Publishes the signed appcast for 1.1.0, written by Scripts/release.sh and committed byte-for-byte (any edit would break the feed signature).

  • Adds the 1.1.0 item (build 3) with embedded release notes; keeps the 1.0.1 item unchanged.
  • The feed is EdDSA-signed: 1.1.0 requires that (SURequireSignedFeed); 1.0.x clients read the signature as an XML comment and update normally.
  • Verified before committing: sign_update --verify appcast.xml, and the DMG on the GitHub release against its edSignature.

Merge immediately: until it lands, 1.0.x users are not offered 1.1.0.

Written by Scripts/release.sh and committed byte for byte: the feed is
signed, and any edit would break that signature.
@LucaGerlich
LucaGerlich merged commit 0b088d3 into main Oct 11, 2026
1 check passed
@LucaGerlich
LucaGerlich deleted the chore/appcast-1.1.0 branch October 11, 2026 22:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant