Carmine Paolino 88a9c017e6 Sign release checksums behind the maintainer's approval ...

The publish job now runs in the release-signing environment (v* tags,
maintainer approval) and signs the checksums.txt that release-names.py
writes with Spotifast's Ed25519 key, then verifies the signature and every
listed file against the committed public key. The private key lives only
in that environment's secret, with a backup in 1Password. The updater
starts requiring the signature in a later release, once signed releases
exist.

2026-09-25 17:19:27 +02:00

..

fonts

Take Inter and the system fallback fonts from fastframe-fonts

2026-09-25 15:47:12 +02:00

i18n

Update through fastframe-update

2026-09-25 15:56:09 +02:00

icons

Declare the icons with fastframe-icons

2026-09-25 15:48:06 +02:00

skins

Complete Spotifast rename with upgrade-safe profile migration

2026-09-22 13:13:32 +02:00

update-public-key.hex

Sign release checksums behind the maintainer's approval

2026-09-25 17:19:27 +02:00