From 2bf7025310835fdf0c11604b3535ecb59eedbae5 Mon Sep 17 00:00:00 2001 From: Jer Miller Date: Sun, 27 Sep 2026 21:38:37 -0600 Subject: [PATCH] release: prepare Linux 2.0.9 with refreshed build images --- CHANGELOG.md | 2 ++ Cargo.lock | 4 ++-- Cargo.toml | 2 +- licensing/rust-dependency-notices.index.json | 2 +- packaging/release-policy.toml | 22 ++++++++++---------- 5 files changed, 17 insertions(+), 15 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index dd2bd92..27bb753 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,8 @@ and this project adheres to Semantic Versioning. ## [Unreleased] +## [2.0.9] - 2026-09-28 + ### Fixed - security fix: when you paired this computer while your journal's private network was on, even over your own wifi, the solstone app sent your pairing link's one-time secret through the relay before checking it had reached your journal, so someone who could sit where the relay sits could have read the secret and used it to pair their own device. it now checks first that it's talking to your journal. please install this update before you pair again. if you paired this way, open your journal's network app and remove any device you don't recognize, including under "nothing added yet". diff --git a/Cargo.lock b/Cargo.lock index a07d0e3..98a5f3c 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -2559,7 +2559,7 @@ dependencies = [ [[package]] name = "rust-release-manifest" -version = "2.0.8" +version = "2.0.9" dependencies = [ "ar", "base64", @@ -2863,7 +2863,7 @@ dependencies = [ [[package]] name = "solstone-linux" -version = "2.0.8" +version = "2.0.9" dependencies = [ "ashpd", "chrono", diff --git a/Cargo.toml b/Cargo.toml index a780639..3793ee3 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -6,7 +6,7 @@ members = [ resolver = "3" [workspace.package] -version = "2.0.8" +version = "2.0.9" edition = "2024" license = "AGPL-3.0-only" rust-version = "1.97.1" diff --git a/licensing/rust-dependency-notices.index.json b/licensing/rust-dependency-notices.index.json index 8bba8d0..41ebc35 100644 --- a/licensing/rust-dependency-notices.index.json +++ b/licensing/rust-dependency-notices.index.json @@ -1,6 +1,6 @@ { "schema": "solstone-linux.rust-dependency-notices.v1", - "cargo_lock_sha256": "7bb07491693564cf52900b9f436b13884a1a58d1f3260210b4d69fe4f49350d6", + "cargo_lock_sha256": "071021ffe975adaa3513d176c56a6ed8e473e274a4ea8a2f0a14a2231de6788a", "notices_sha256": "9543d6d2b62c2ccc21bf900f7a84a151c9e9e0126e9e5b5d3a96ca123fb98682", "population_query": "cargo metadata --locked --offline --format-version 1 --filter-platform x86_64-unknown-linux-gnu", "root_package": "solstone-linux", diff --git a/packaging/release-policy.toml b/packaging/release-policy.toml index 8957ed3..1f33025 100644 --- a/packaging/release-policy.toml +++ b/packaging/release-policy.toml @@ -1,34 +1,34 @@ -build_ubuntu = "sha256:7e01ada93d5cb9f325cf0f940a30e39294f45daf71d1ca6bb9b9c42556f33926" -build_fedora = "sha256:609af4fd3e085a64b557a66ebc30e51cdc938adf0848d19c0ad6ba26979d6310" -proof_debian = "sha256:cfeb432e43bd4b333dc5f90b624e9dc6d60e81edca9f47ad6c113cd92ac3634e" -proof_rpm = "sha256:2cde10135b3b9f300402ffcfea702a4da279872b2c0592453f197d25c199791b" -proof_tar = "sha256:cfeb432e43bd4b333dc5f90b624e9dc6d60e81edca9f47ad6c113cd92ac3634e" +build_ubuntu = "sha256:ffca3fc055478c4f1fdf622ec87490911dd9d73bd1151df2178b5da74fc503c4" +build_fedora = "sha256:9dae8dfbac4796d22e5df888ec1cfaa3d079933fdcc857743bc7d4eda3a58153" +proof_debian = "sha256:59bf9724d486033aaf8fc2f7dbe47d4cd8cef46a2b7306e5d4b47978dd45d0a3" +proof_rpm = "sha256:d9493e82bea4512d66f927f6d022375e2bc49db4b213f186adf25340c9bdfcf7" +proof_tar = "sha256:59bf9724d486033aaf8fc2f7dbe47d4cd8cef46a2b7306e5d4b47978dd45d0a3" # Operator-owned values: verify these inside the provisioned digest images and # commit any corrections before selecting EXPECTED_RELEASE_COMMIT. [debian-amd64] -image_digest = "sha256:cfeb432e43bd4b333dc5f90b624e9dc6d60e81edca9f47ad6c113cd92ac3634e" +image_digest = "sha256:59bf9724d486033aaf8fc2f7dbe47d4cd8cef46a2b7306e5d4b47978dd45d0a3" os_release = "Ubuntu 22.04.5 LTS" package_manager_version = "Debian 'dpkg' package management program version 1.21.1 (amd64)." -install_command = ["dpkg", "--install", "/input/solstone-linux_2.0.8-1_amd64.deb"] +install_command = ["dpkg", "--install", "/input/solstone-linux_2.0.9-1_amd64.deb"] version_command = ["/usr/bin/solstone-linux", "--version"] executable_path = "/usr/bin/solstone-linux" executable_mode = 493 [rpm-x86_64] -image_digest = "sha256:2cde10135b3b9f300402ffcfea702a4da279872b2c0592453f197d25c199791b" +image_digest = "sha256:d9493e82bea4512d66f927f6d022375e2bc49db4b213f186adf25340c9bdfcf7" os_release = "Fedora Linux 42 (Container Image)" package_manager_version = "RPM version 4.20.1" -install_command = ["rpm", "--install", "/input/solstone-linux-2.0.8-1.x86_64.rpm"] +install_command = ["rpm", "--install", "/input/solstone-linux-2.0.9-1.x86_64.rpm"] version_command = ["/usr/bin/solstone-linux", "--version"] executable_path = "/usr/bin/solstone-linux" executable_mode = 493 [tar-x86_64] -image_digest = "sha256:cfeb432e43bd4b333dc5f90b624e9dc6d60e81edca9f47ad6c113cd92ac3634e" +image_digest = "sha256:59bf9724d486033aaf8fc2f7dbe47d4cd8cef46a2b7306e5d4b47978dd45d0a3" os_release = "Ubuntu 22.04.5 LTS" package_manager_version = "installer portable-tar" -install_command = ["/input/install.sh", "--prefix", "/proof-root", "/input/solstone-linux-2.0.8-linux-x86_64.tar.gz"] +install_command = ["/input/install.sh", "--prefix", "/proof-root", "/input/solstone-linux-2.0.9-linux-x86_64.tar.gz"] version_command = ["/bin/solstone-linux", "--version"] executable_path = "/bin/solstone-linux" executable_mode = 493 -- 2.51.2