v1.3.2
Changes
Added
scripts/sign-binaries.sh— Authenticode (Windows, viaosslsigncodeorsigntool) and GPG detached-signature (Linux) supportscripts/verify-signatures.sh— verify Authenticode and GPG signatures on prebuilt binariesscripts/virustotal-scan.sh— VirusTotal API v3 scan with JSON report output; supports files >32 MB via large-file upload URLci/sign.sh— thin CI entry-point that callsscripts/sign-binaries.sh.github/workflows/sign-and-scan.yml— manualworkflow_dispatchworkflow to sign binaries and/or run VirusTotal scanosslsigncode 2.13entry inscripts/download-prebuilt.sh(Windows zip + Linux source archive)
Changed
scripts/release.sh— integrated signing and VirusTotal scan steps; added--skip-signand--skip-vtflags- CI:
actions/upload-artifactv4.6.0 → v7.0.1;actions/download-artifactv4 → v8.0.1 (pinned SHA) .gitignore— added.claudeignore- Server binaries rebuilt against Go 1.26.2
Install
pip install airgap-devkit==1.3.2