1 files changed, 8 insertions, 4 deletions

diff --git a/Makefile b/Makefile
index 4fdab39..9f97b73 100644
--- a/Makefile
+++ b/Makefile
@@ -2,6 +2,7 @@
 #
 #   make linux    build Bitflash-*-x86_64.AppImage
 #   make windows  build Bitflash-*-windows.zip (from MSYS2 UCRT64)
+#   make windows-tor build Bitflash-*-windows-with-tor.zip
 #   make tests    build and run standalone unit tests
 #   make checksums create SHA256SUMS for release assets
 #   make verify-release TAG=v1.2.13
@@ -10,10 +11,10 @@
 ROOT    := $(shell pwd)
 NPROC   := $(shell nproc 2>/dev/null || echo 2)
 SUDO    := $(shell [ "$$(id -u)" = "0" ] && echo "" || echo "sudo")
-# Not "1.2.18". This tree is upstream v1.2.18 plus 24 commits of our own and a
-# hand-merged payout ledger, so a binary built here must not be mistakable for
+# Not "1.2.19". This tree is upstream v1.2.19 plus our own hardening commits and
+# a hand-merged payout ledger, so a binary built here must not be mistakable for
 # the upstream release of that number -- it names every release artifact.
-VERSION := 1.2.18+sec
+VERSION := 1.2.19+sec
 
 # ---- Pinned third-party sources -------------------------------------------
 #
@@ -239,6 +240,9 @@ windows: deps-windows
         @zip -r Bitflash-$(VERSION)-windows.zip Bitflash-$(VERSION)-windows/
         @echo "Built: Bitflash-$(VERSION)-windows.zip"
 
+windows-tor: windows
+        ./scripts/package-windows-tor.sh
+
 # ---- Clean ----------------------------------------------------------------
 
 clean:
@@ -265,6 +269,6 @@ sign-checksums:
 verify-release:
         ./scripts/verify-release.sh $(if $(TAG),$(TAG),latest)
 
-.PHONY: linux windows clean appimage \
+.PHONY: linux windows windows-tor clean appimage \
         tests fuzz-net-message-smoke fuzz-script-smoke checksums sign-checksums verify-release \
         deps-linux deps-windows deps-apt deps-secp256k1 deps-randomx