Skip to content

docs: record 0.6.0 distribution #21

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
TheCryptoDonkey merged 1 commit into from
Sep 25, 2026
Merged

docs: record 0.6.0 distribution #21

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 8 additions & 7 deletions docs/DISTRIBUTION.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,19 +12,20 @@ what store metadata points at (F-Droid's `Donate:` field takes one URL).

| Channel | Status | Signature users get |
|---|---|---|
| GitHub Releases | **Live** (0.5.0 current; v0.2.0 onward) | Ours (the 0.2.0 trust root) |
| Obtainium | **Live** via the 0.5.0 GitHub release | Ours |
| Zapstore | **Live** (0.5.0 current; v0.3.2 onward) | Ours |
| F-Droid | **Live** ([fdroiddata!42875](https://gitlab.com/fdroid/fdroiddata/-/merge_requests/42875) merged 2026-09-13, 0.4.3 listed); new tags are picked up automatically | Ours, when the reproducibility check passes |
| GitHub Releases | **Live** (0.6.0 current; v0.2.0 onward) | Ours (the 0.2.0 trust root) |
| Obtainium | **Live** via the 0.6.0 GitHub release | Ours |
| Zapstore | **Live** (0.5.0 current, 0.6.0 not yet published; v0.3.2 onward) | Ours |
| F-Droid | **Live** ([fdroiddata!42875](https://gitlab.com/fdroid/fdroiddata/-/merge_requests/42875) merged 2026-09-13; still lists only 0.4.3 on 2026-09-25, so 0.5.0 has not come through); new tags are picked up automatically | Ours, when the reproducibility check passes |
| IzzyOnDroid (optional extra) | Eligible; their tracker moved to Codeberg (account needed) | Ours |
| Accrescent | **Blocked externally** — registration is allowlist-only | Ours |

## GitHub Releases (live)

0.5.0 was published and read back on 2026-09-24, built from the tagged commit (`d0ea215`) in a
0.6.0 was published and read back on 2026-09-25, built from the tagged commit (`35d8de4`) in a
clean tree for F-Droid's reproducibility check. Its APK SHA-256 is
`9ccbf226e18036a57e6f402f81a55c7be7dd1986703af7e0581084e0a4e6d182`, and its signing certificate
matches the 0.2.0 trust root below.
`d83a5882f05fb5340b57f62a0947f689efc0f4f8c97563bcfa7b208e0b16a960`, and its signing certificate
matches the 0.2.0 trust root below. The previous release, 0.5.0 (2026-09-24, `d0ea215`), has SHA-256
`9ccbf226e18036a57e6f402f81a55c7be7dd1986703af7e0581084e0a4e6d182`.

The existing flow: bump `versionCode`/`versionName`, tag `vX.Y.Z`, build with the release
keystore (`~/keystores/cambium-release.credentials`), upload the APK plus `SHA256SUMS`, and
Expand Down
Loading