From 609b15be080f8cdd305f0cff44f24a3462aa7608 Mon Sep 17 00:00:00 2001 From: SkateSpots Date: Sat, 31 Oct 2026 15:24:07 +0700 Subject: [PATCH] docs: publish 1.7.66 safety and escrow primitive --- AGENTS.md | 8 ++++++-- distribution/README.md | 6 +++--- fastlane/metadata/android/en-US/changelogs/10766.txt | 1 + public/download/index.html | 6 +++--- 4 files changed, 13 insertions(+), 8 deletions(-) create mode 100644 fastlane/metadata/android/en-US/changelogs/10766.txt diff --git a/AGENTS.md b/AGENTS.md index c48faee..fb21331 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -2228,7 +2228,7 @@ session with **no other memory of this project**. So: instead of showing the error boundary. - **Baselines** (verified 2026-10-29): `npm test` → **0 errors, 0 warnings**, **156 tests**, build ok. The gate also type-checks the CVM server - (`tsc -p cvm-server/tsconfig.json`). `package.json` version **1.7.65**. + (`tsc -p cvm-server/tsconfig.json`). `package.json` version **1.7.66**. - ✅ Lint is **clean**: `no-explicit-any` = 0 · `react-hooks/exhaustive-deps` = 0 · `no-unused-vars` = 0 · `react-refresh` = 0. Non-component exports were **split into their own modules** (`contexts/language.ts`, `lib/sortOptions.ts`, @@ -2455,7 +2455,7 @@ Rules: or `FORGEJO_PASSWORD`; `scripts/release.sh` calls it automatically when either is set). It uploads the APK and checksum, but does not push git history. - **Self-hosted F-Droid repo:** `https://fdroid.skate-spots.org/repo` - (`org.skatespots.app`; currently 1.7.65). It is a **third-party repo**, not + (`org.skatespots.app`; currently 1.7.66). It is a **third-party repo**, not F-Droid main. Repo signing fingerprint: `88:B1:71:1C:24:02:89:FB:B2:A7:FC:C1:B3:1F:BB:9D:60:F5:7F:19:18:E0:3D:62:2D:35:F2:3D:E1:84:46:75`. The developer APK signature is unchanged; the repo key only signs indexes. @@ -2906,6 +2906,10 @@ Rules: on demand, no merge); recent 90-day confirmed-trade count beside lifetime reputation. APK sha256 `73684085…`, versionCode 10765. Web live at `a813e1e`. + - **1.7.66 (2026-10-31):** high-value safety copy (no arbitration, escrow), + 180-day half-life reputation weighting, and the unit-tested 2-of-3 escrow + policy primitive (not exposed in UI pending arbiter policy). APK sha256 + `0ed775ed…`, versionCode 10766. Web live at `cc0545c`. ### Relay archive (dataset backup) - **Transfer content between keys (`scripts/transfer-content.mjs`, 2026-10-04):** diff --git a/distribution/README.md b/distribution/README.md index 47f903f..9367613 100644 --- a/distribution/README.md +++ b/distribution/README.md @@ -7,10 +7,10 @@ account is required. - Forge: - Latest release: -- Signed APK (1.7.65): - +- Signed APK (1.7.66): + - SHA-256: - `736840855faefa48233f6b051e090b4ca7a51af94552d6afd8d960e68c355c82` + `0ed775ed2b243e7f7f58ecb3c3f0d0365219585a80dec1d974921551b704a37c` The APK is signed with the same key as the Zapstore build. Installing an F-Droid-signed build over it would require uninstalling SkateSpots and losing diff --git a/fastlane/metadata/android/en-US/changelogs/10766.txt b/fastlane/metadata/android/en-US/changelogs/10766.txt new file mode 100644 index 0000000..621410b --- /dev/null +++ b/fastlane/metadata/android/en-US/changelogs/10766.txt @@ -0,0 +1 @@ +High-value listings now show the safety note including the no-arbitration reminder; reputation uses a 180-day half-life and recent 90-day count; the 2-of-3 escrow policy primitive is unit-tested but not exposed until an arbiter policy exists. diff --git a/public/download/index.html b/public/download/index.html index ccf20b6..8c8e654 100644 --- a/public/download/index.html +++ b/public/download/index.html @@ -98,16 +98,16 @@ - Download SkateSpots-1.7.65.apk · 56 MB + Download SkateSpots-1.7.66.apk · 56 MB
Requires Android 7.0 or newer. - SHA-256: 736840855faefa48233f6b051e090b4ca7a51af94552d6afd8d960e68c355c82 + SHA-256: 0ed775ed2b243e7f7f58ecb3c3f0d0365219585a80dec1d974921551b704a37c Only install APKs from a source you trust. Android will ask you to allow installs from your browser.