• v1.29.0 0e6ed05061

    v1.29.0
    All checks were successful
    CI / Rust clippy (push) Successful in 1m47s
    CI / Rust fmt (push) Successful in 1m13s
    CI / Rust test (push) Successful in 5m55s
    CI / UI (SvelteKit) (push) Successful in 1m18s
    CI / Security Audit (push) Successful in 1m17s
    docs / build (push) Successful in 2m16s
    Release / Docker Multi-Arch (push) Successful in 22m36s
    Release / Binary aarch64-unknown-linux-gnu (push) Successful in 12m12s
    Release / Binary x86_64-unknown-linux-gnu (push) Successful in 10m16s
    Release / Linux .deb + .rpm (amd64) (push) Successful in 2m1s
    Release / Linux .deb + .rpm (arm64) (push) Successful in 1m47s
    Release / Linux AppImage (aarch64) (push) Successful in 26s
    Release / Linux AppImage (x86_64) (push) Successful in 27s
    Release / Cosign sign artifacts (push) Successful in 27s
    Release / Forgejo Release (push) Successful in 36s
    Stable

    dvb-projekt released this 2026-09-11 10:55:31 +00:00 | 273 commits to main since this release

    The two pieces that were obviously missing the moment v1.28.0 shipped: the
    WarpTune coupling from the admin page instead of the config file, and the
    badge for miners of a public pool, whose sidecars the pool cannot reach.

    Added

    • Admin → Profile → dvb-WarpTune coupling: GET/POST /api/admin/tune
      edit [mining.tune] (enabled, sidecar URL, poll interval, stale
      threshold) and apply it live — the daemon's poll loop reads the shared
      config every tick, so switching the coupling on, off or to another URL
      needs no restart. Audit action tune.set.
    • Visitor push for public pools: the owner area of a wallet page creates a
      wallet-bound push token (POST/DELETE /api/users/{address}/tune-token,
      stored hashed, rotatable, revocable). A dvb-WarpTune sidecar with
      pool_push = true and the token in pool_push_token_env sends its
      snapshot to POST /api/tune/push every pool_push_secs (default 30 s).
      The pool keeps the latest snapshot per wallet in memory (stale after two
      minutes, dropped after an hour), caps the body at 256 KiB and 64 miners,
      accepts one push per ten seconds per wallet, and refuses a snapshot whose
      miners mine to another wallet. GET /api/users/{address} carries a tune
      object: full for the verified owner, reduced (rig, mode, state,
      frequency) for visitors once the owner turned Show badge to visitors on
      (POST /api/users/{address}/tune-public, wallet_prefs.tune_public).
      The wallet page shows a badge per rig; the owner area has the token and
      visibility controls. All in eight UI languages.
    • dvb-WarpTune journal entry push (state changes of the snapshot push) and
      a push: line in check-config.

    Changed

    • dvb-WarpTune's setup guide and setup script are in English now; the live
      confirmation of setup-warptune.sh --live answers to yes.

    dvb-WarpPool v1.29.0 — Downloads

    Docker

    git.warppool.org/dvb-projekt/dvb-warppool:v1.29.0 (multi-arch amd64+arm64, ohne v-Präfix)

    Native packages

    • Linux .deb: amd64 + arm64 → apt install ./dvb-warppool_*.deb
    • Linux .rpm: amd64 + arm64 → dnf install ./dvb-warppool-*.rpm
    • Linux AppImage: x86_64 + aarch64 portable
    • Linux tarballs: x86_64 + aarch64 for manual installs
    • macOS .dmg: added shortly after publish (built separately) — or build from source
    • Windows .msi: paused since the forge migration (no Windows runner yet)

    Signatures

    • SHA256SUMS + cosign bundle (SHA256SUMS.bundle, project key)
    • SBOM (SPDX) for all dependencies

    Verify (project public key cosign.pub in the repo root):

    cosign verify-blob \
      --key cosign.pub \
      --bundle SHA256SUMS.bundle \
      SHA256SUMS
    sha256sum --check SHA256SUMS
    

    First-time setup: run dvb-warppool-setup for the first-run wizard.

    Downloads