punktfunk

Author	SHA1	Message	Date
enricobuehler	73e1224345	fix(ci/update): an empty AUTHENTICODE_SHA256 broke the manifest build — jq -R needs one input line ci / web (push) Successful in 1m5s Details ci / docs-site (push) Successful in 2m30s Details ci / rust-arm64 (push) Successful in 3m40s Details android / android (push) Successful in 4m35s Details decky / build-publish (push) Successful in 47s Details ci / rust (push) Successful in 6m26s Details arch / build-publish (push) Successful in 8m54s Details docker / builders (ci/android-ci.Dockerfile, punktfunk-android-ci) (push) Successful in 11s Details docker / builders (ci/arch-ci.Dockerfile, punktfunk-arch-ci) (push) Successful in 23s Details docker / builders (ci/fedora-rpm.Dockerfile, punktfunk-fedora-rpm) (push) Successful in 11s Details docker / builders (ci/rust-ci-noble.Dockerfile, punktfunk-rust-ci-noble) (push) Successful in 12s Details docker / builders (ci/rust-ci.Dockerfile, punktfunk-rust-ci) (push) Successful in 12s Details docker / apps (., web/Dockerfile, punktfunk-web) (push) Successful in 1m10s Details docker / apps (docs-site, docs-site/Dockerfile, punktfunk-docs) (push) Failing after 12m27s Details docker / deploy-docs (push) Skipped Details docker / builders (--build-arg FEDORA_VERSION=44, ci/fedora-rpm.Dockerfile, punktfunk-fedora44-rpm, -f44) (push) Successful in 10s Details docker / builders-arm64cross (push) Successful in 11s Details apple / swift (push) Successful in 4m45s Details rpm / build-publish (44, fedora-44, punktfunk-fedora44-rpm) (push) Successful in 19m47s Details rpm / build-publish (43, bazzite, punktfunk-fedora-rpm) (push) Successful in 19m15s Details deb / build-publish-host (push) Successful in 4m45s Details deb / build-publish-client-arm64 (push) Successful in 1m25s Details apple / screenshots (push) Canceled after 7m43s Details deb / build-publish (push) Canceled after 3m20s Details printf '%s' hands jq -R no line at all for an empty value; its empty output made --argjson invalid. Seen on the first live canary-manifest run. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> (cherry picked from commit a12c8bc99d41c4f7b8e4c426d560171b2b12dd5e)	2026-07-30 15:23:52 +02:00
enricobuehlerandClaude Fable 5	c4c4f217bf	ci(update): build+sign+publish the update manifest — stable at announce, canary after the canary installer bash+openssl signer (raw-64-byte ed25519 over exact bytes, base64 .sig — the plugin-index format) with the pinned-key cross-check, manifest-then-sig upload order, and a live-feed self-verify. announce.yml re-hashes the installer against its sidecar and fail-closes without UPDATE_MANIFEST_KEY; pre-release tags never enter the stable feed. windows-host.yml grows a Linux canary-manifest job. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-30 14:34:47 +02:00