npub1q9geyrch3feyczz242sxjaa05yczv50dlpug082sjln2kl0wrnxst0nrfa/bitflash

Age	Commit message (Collapse)	Author
2026-08-07	tools: reject non-http(s) dashboard URLs in the pool directory	Bitflash
	A pool's dashboard URL comes from its self-published status file. Escaping it for HTML is not enough: a javascript: or data: scheme would still render as a clickable script-injection on the public directory page. Only emit a link for http(s) schemes; anything else shows as no link.
2026-08-07	tools: build a static pool directory	Nsable-sh

2026-08-06	release: sign SHA256SUMS with a pinned key, verify against it	Bitflash
	verify-release.sh embeds the Bitflash release signing key and now requires that the checksum signature validate against that exact key, not merely against some key in the caller's keyring (#138). It also fetches releases from releases.bitflash.network instead of the retired GitHub host, resolving 'latest' from latest.txt. Release signing key fingerprint: 910A 2B4C CA87 9E81 FB4B 2AEA 1D4A 53D3 B78A A4B8
2026-08-04	Add release verification tooling (#108)	mtg0001
	Co-authored-by: Gilcimar Duarte <ti@gpm.infra>

upleb.uk