Skip to content

Add verified Linux ARM64 helper releases - #106

Merged
dantraynor merged 2 commits into
mainfrom
What-would-you-like-to-name-this-branch
Aug 16, 2026
Merged

Add verified Linux ARM64 helper releases#106
dantraynor merged 2 commits into
mainfrom
What-would-you-like-to-name-this-branch

Conversation

@dantraynor

Copy link
Copy Markdown
Owner

What

Adds Linux ARM64 host builds, a version-pinned checksum and provenance-aware per-user installer, architecture-aware v0.1.13 install guidance, and corresponding documentation. Hardens CI and release workflows with pinned actions, final-asset checksums and attestations, coordinated notarized macOS packaging, and a reproducible Firefox source archive.

Why

Provides a safe Linux ARM64 installation path while making companion releases complete, consistent, and independently verifiable; no linked issue.

How to Test

  • Run pnpm typecheck and pnpm test
  • Run pnpm test:installer
  • Run pnpm e2e:chrome and pnpm e2e:firefox
  • Run Go vet/race tests and make host-all
  • Run the Firefox review and clean source-rebuild gates

Checklist

  • Tested in Chrome
  • Tested in Firefox
  • Updated README if needed

tesserasadmin and others added 2 commits August 15, 2026 02:16
Resolve the EXPECTED_HOST_VERSION doc row: keep this branch's 0.1.13
bump with main's minimum-version wording from #110.
@dantraynor
dantraynor marked this pull request as ready for review August 16, 2026 20:41
@dantraynor
dantraynor merged commit 17f014b into main Aug 16, 2026
12 checks passed
@dantraynor
dantraynor deleted the What-would-you-like-to-name-this-branch branch August 16, 2026 20:41
dantraynor added a commit that referenced this pull request Aug 16, 2026
Resolutions:
- Drop the blocking host-version gate from #110 in favor of this
  branch's non-blocking helper version notice; EXPECTED_HOST_VERSION is
  gone entirely.
- Keep this branch's arch-aware install views and release candidate
  pipeline, which already cover Linux ARM64 from #106.
- Take main's hardened install.sh/install.test.sh (umask, signal traps,
  curl --disable, checksum-first ordering) and keep the shellcheck CI
  step alongside pnpm test:installer.
- Keep the e2e Chrome sandbox flags (equivalent fix landed on both
  sides in #111 and here).
- Port main's release concurrency group into the candidate workflow.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants