MrSphay/Modrinth-plus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Sign Windows releases with MrTrust certificate
Some checks failed
Codex Template Compliance / template-compliance (push) Successful in 8s
Details
Build / build-windows (push) Failing after 10m58s
Details

Browse Source
This commit is contained in:
MrSphay
2026-05-16 01:15:02 +02:00
parent 312dee9f24
commit e66aa3d128
8 changed files with 82 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docs/release-notes.md
View File

@@ -8,6 +8,7 @@ Release artifacts are not published yet.
- Connected Library can track public Git-hosted modpack manifests.
- Per-pack auto-update can be enabled after a pack is connected.
- Windows release artifacts are signed with the MrTrust code-signing certificate.
- Gitea Actions are used as the verification runner.
## Security
@@ -15,6 +16,7 @@ Release artifacts are not published yet.
- Dependency audit: pending runner/toolchain confirmation.
- Secret handling: no tokens are stored by Connected Library v1.
- External network calls: public HTTPS manifest and `.mrpack` downloads.
- Windows trust: MrTrust-installed users can trust Modrinth Plus only when artifacts are signed with the matching MrSphay certificate chain.
## Verification
@@ -23,6 +25,7 @@ Release artifacts are not published yet.
| Gitea Actions build | Must pass before release |
| Frontend lint | Covered by Gitea build workflow |
| Rust clippy | Covered by Gitea build workflow |
| MrTrust signing | Required by Gitea build workflow |
| Artifact download | Pending release packaging |
## Notes