You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Correct 0.25.20 appcast notes to match the tagged binary - #3049
The release workflow read the mutable release draft after PR #3048 merged, so the 0.25.20 appcast incorrectly advertised a fix absent from its tagged source (29ecea602b6b14f224ad811d0fdf371d42e0a22d). Remove that one line. The GitHub release notes are already corrected, and #3048 is marked pending release.
Validation: parsed the before/after XML; only the 0.25.20 description changes. Every enclosure URL, byte length, Ed25519 signature and other version entry is unchanged. No app code, binary, version or tag changes.
Source evidence: tag0.25.20 targets29ecea60; #3048 merged later as41cc89e8. Live evidence: release workflow37791527268 published the mutable draft with #3048 included; current public release notes have been corrected. The workflow needs a separate follow-up to snapshot/filter notes and released labels by tag ancestry.
Audited head d5d904f4480350d04c1dcadfa7e389caffd4efdf: one release-note line removed from the 0.25.20 description. Parsed XML before/after comparison confirms every enclosure URL, byte length, Ed25519 signature and other version entry is identical.
SOURCE EVIDENCE: 0.25.20 tag points to 29ecea602b6b14f224ad811d0fdf371d42e0a22d; #3048 merged later as 41cc89e8e91d41b796870950042a56cc0d4e54bf. This PR changes metadata only and preserves the published binary.
LIVE EVIDENCE: downloaded public 0.25.20 DMG is 82,531,729 bytes, SHA-256 2875ff10d71a8eb2b81b34ed1480f54e8f5c379b6d60827f8cdd60ace2684fd0; stapler validation and strict deep codesign pass; Gatekeeper accepts Notarized Developer ID; bundle version is0.25.20. The public appcast Ed25519 signature independently verifies against this DMG using the public key in the released app. GitHub release notes already exclude3048; appcast correction awaits this PR and CI.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The release workflow read the mutable release draft after PR #3048 merged, so the 0.25.20 appcast incorrectly advertised a fix absent from its tagged source (
29ecea602b6b14f224ad811d0fdf371d42e0a22d). Remove that one line. The GitHub release notes are already corrected, and #3048 is marked pending release.Validation: parsed the before/after XML; only the 0.25.20 description changes. Every enclosure URL, byte length, Ed25519 signature and other version entry is unchanged. No app code, binary, version or tag changes.
Source evidence: tag0.25.20 targets29ecea60; #3048 merged later as41cc89e8. Live evidence: release workflow37791527268 published the mutable draft with #3048 included; current public release notes have been corrected. The workflow needs a separate follow-up to snapshot/filter notes and released labels by tag ancestry.