You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Strycher 29ca744667 feat(#330): pin the expected signing certificate SHA-256 ... Rejecting only CN=Android Debug catches the #111 fallback but not a DIFFERENT key being substituted, which breaks cross-channel updates against Play just as badly. Now asserts the exact fingerprint. Established from artifacts users have already installed, with no access to the keystore password (reading a certificate off a signed APK needs none): release b55 (2026-07-06) e7da8cd5... release b58 (2026-07-10) e7da8cd5... local release build e7da8cd5... Three independent sources agree, and the owner confirmed the same strycher-personal.jks is enrolled for Play App Signing, so this is the fingerprint that must hold for a GitHub download to update over a Play install. Found while establishing it: published release b59 (2026-07-20) is DEBUG-SIGNED (765fb469, CN=Android Debug), unlike b55 and b58. That is #111 occurring in production. Filed separately. Part of epic #312, plan #321 (Phase 5).		1 day ago
..
build.yml	chore(#331): pass GIPHY_API_KEY into artifact builds	2 days ago
configure-web-domains.yml	feat(#339): deploy web client to offband.app via Cloudflare Pages	1 day ago
deploy-web.yml	feat(#339): deploy web client to offband.app via Cloudflare Pages	1 day ago
flutter_dart.yml	chore(#331): pin Flutter to 3.44.1 in every workflow	2 days ago
release-signed.yml	feat(#330): pin the expected signing certificate SHA-256	1 day ago
sync-labels-to-board.yml	chore(#59): install label-to-board sync Action for board #2	1 month ago
triage-user-issues.yml	chore(#148): auto-triage user-submitted issues (flag + P2/Backlog)	2 weeks ago