dvb-projekt/dvb-WarpPool
dvb-projekt/dvb-WarpPool
1
0
Fork 0
Code Issues Pull requests Projects Releases 25 Packages 1 Wiki Activity Actions
25 releases 74 tags
  • v1.24.0 958bf89b6f

    v1.24.0
    All checks were successful
    CI / Rust clippy (push) Successful in 1m38s
    Details
    CI / Rust fmt (push) Successful in 1m11s
    Details
    CI / Rust test (push) Successful in 5m20s
    Details
    CI / UI (SvelteKit) (push) Successful in 1m10s
    Details
    CI / Security Audit (push) Successful in 1m21s
    Details
    docs / build (push) Successful in 37s
    Details
    Release / Docker Multi-Arch (push) Successful in 19m46s
    Details
    Release / Binary aarch64-unknown-linux-gnu (push) Successful in 10m44s
    Details
    Release / Binary x86_64-unknown-linux-gnu (push) Successful in 9m36s
    Details
    Release / Linux .deb + .rpm (amd64) (push) Successful in 10m27s
    Details
    Release / Linux .deb + .rpm (arm64) (push) Successful in 11m19s
    Details
    Release / Linux AppImage (aarch64) (push) Successful in 10m27s
    Details
    Release / Linux AppImage (x86_64) (push) Successful in 9m30s
    Details
    Release / Cosign sign artifacts (push) Successful in 34s
    Details
    Release / Forgejo Release (push) Successful in 35s
    Details
    Stable

    dvb-projekt released this 2026-07-24 11:04:07 +00:00 | 32 commits to main since this release

    Taproot wallets can prove ownership now.

    Added

    • BIP-322 ownership verification for Taproot (bc1p) addresses. The owner
      area — the privacy toggle and per-address notification target (including the
      new personal-best / top-100 moment pushes) — is unlocked by proving control
      of the payout address with a signed message, no account, no funds moved. That
      proof only had a format for legacy and SegWit-v0 addresses (BIP-137), so
      Taproot addresses could mine but never unlock it. They now verify via BIP-322
      "simple" (key-path), the format Sparrow produces for Taproot. Dispatch is
      strict by address type: a P2TR address is checked only via BIP-322, every
      other type only via BIP-137 — no cross-accept. The Schnorr check runs solely
      against the output key taken from the claimed address, and both the message
      and the address are bound into the signature's sighash, so a signature can
      never be replayed across addresses or messages. Only a single-element key-path
      witness (SIGHASH_DEFAULT or ALL) is accepted; script-path, annex, and weaker
      sighash types are rejected. The owner-area hints now name a BIP-322-capable
      wallet (Sparrow) for Taproot in all eight languages.

    dvb-WarpPool v1.24.0 — Downloads

    Docker

    git.warppool.org/dvb-projekt/dvb-warppool:v1.24.0 (multi-arch amd64+arm64, ohne v-Präfix)

    Native packages

    • Linux .deb: amd64 + arm64 → apt install ./dvb-warppool_*.deb
    • Linux .rpm: amd64 + arm64 → dnf install ./dvb-warppool-*.rpm
    • Linux AppImage: x86_64 + aarch64 portable
    • Linux tarballs: x86_64 + aarch64 for manual installs
    • macOS .dmg: added shortly after publish (built separately) — or build from source
    • Windows .msi: paused since the forge migration (no Windows runner yet)

    Signatures

    • SHA256SUMS + cosign bundle (SHA256SUMS.bundle, project key)
    • SBOM (SPDX) for all dependencies

    Verify (project public key cosign.pub in the repo root):

    cosign verify-blob \
  --key cosign.pub \
  --bundle SHA256SUMS.bundle \
  SHA256SUMS
sha256sum --check SHA256SUMS

    First-time setup: run dvb-warppool-setup for the first-run wizard.

    Downloads