9 releases 10 tags

RSS feed

• v0.5.0 1962e4cd6a

  Compare

  Reed v0.5.0 Stable

  admin_ekaii released this 2026-10-21 22:49:47 +00:00 | 9 commits to main since this release

  No known key found for this signature in database

  Reed 0.5.0. The apps join the relay network that 0.5.0-rc1 brought to the relays: each app ships the three directory authorities' keys and a recent signed list of relays checked against them, so a fresh install knows where to go before it has reached any relay. reed-public, the original relay, stays the home of every account, so contacts still on 0.4 keep reaching you. Messages stay end-to-end encrypted: no relay and no authority can read them. Also in this release: a voice note goes only to the conversation you recorded it in (web and desktop), the desktop app does what the web app does (Start without a passphrase, voice notes and photos, the Requests screen), and a security update of rustls-webpki to 0.103.16 and webpki-roots to 1.0.10 (RUSTSEC-2026-0382, RUSTSEC-2026-0381). CHANGELOG.md in the tag has the full list. The hosted web app at app.reed.ekaii.fr runs this release.

  Included

  • reed-v0.5.0-universal.apk: the signed universal Android APK (reed-v0.5.0-universal-unsigned.apk is the unsigned build it was signed from)
  • reed-v0.5.0-linux-x86_64.AppImage and reed-v0.5.0-linux-x86_64.deb
  • reed-relay and reed-cli static musl binaries for x86_64 and aarch64 Linux, with their cargo audit reports (audit-*.txt, no advisory found)
  • SBOMs in CycloneDX format (*.cdx.json)
  • reed-v0.5.0-vendored.tar.zst (vendored sources) and reed-v0.5.0-web-dist.tar.zst (web client build)
  • webcat-manifest.json and webcat-bundle.json (the WEBCAT manifest, logged to Sigsum, and its bundle)
  • the bootstrap pair reed-v0.5.0-bootstrap-authorities.json and reed-v0.5.0-bootstrap-consensus.bin (the signed consensus of 2026-10-21 15:00 UTC, 3 of 3 signatures, listing reed-public), with reed-v0.5.0-bootstrap-vectors.json
  • release.json, signing-cert-sha256.txt, reproduce-desktop-x86_64-unknown-linux-gnu.txt, SHA256SUMS and SHA256SUMS.sigstore.json

  Not in this release

  • No macOS DMG.
  • No aarch64 Linux packages (no aarch64 AppImage or .deb). The relay and CLI binaries are available for aarch64.

  Verify

  1. Check the signature on SHA256SUMS with the cosign public key from the tag (tools/release/keys/reed-release-cosign.pub):

     cosign verify-blob --key reed-release-cosign.pub --bundle SHA256SUMS.sigstore.json SHA256SUMS
     

  2. Check the downloaded files against it:

     sha256sum -c SHA256SUMS
     

     SHA256SUMS lists the SBOMs as sbom/<name>: put the downloaded .cdx.json files in an sbom/ folder first, or add --ignore-missing to check only what you downloaded.

  3. Android: the APK signer certificate SHA-256 must be 52c1d0ef5f1ca2ab8baa3c21fbf14240b9088d2a3e734b05b79e86b5f5ed5d2c (apksigner verify --print-certs reed-v0.5.0-universal.apk), the same as every earlier release, so it installs over the previous version and keeps your data. It is also in signing-cert-sha256.txt.

  4. The tag is signed: git -c gpg.ssh.allowedSignersFile=tools/release/keys/allowed_signers verify-tag v0.5.0.

  Upgrading from the 0.5.0-rc1 Linux .deb

  dpkg reads the hyphen in 0.5.0-rc1 as a Debian revision, so it sorts above 0.5.0 and apt treats this release as a downgrade. Use sudo apt install --allow-downgrades ./reed-v0.5.0-linux-x86_64.deb or sudo dpkg -i ./reed-v0.5.0-linux-x86_64.deb.

  Relay image: forgejo.ekaii.fr/exo/reed-relay@sha256:ad21da3b88e494985e5660bda61c22a033b620a31a074579698fbc9fee76b18d, cosign-signed with the release key (verify: cosign verify --key reed-release-cosign.pub forgejo.ekaii.fr/exo/reed-relay@sha256:ad21da3b88e494985e5660bda61c22a033b620a31a074579698fbc9fee76b18d). It runs on the three directory authorities and on reed-public since 2026-10-22.

  Reproducibility: the Mac did not reproduce this release. The build host built every artefact twice, from two copies at two paths, and the two builds were identical (the APK, the web dist and the core files: 28 of 28; the x86_64 AppImage and .deb by content). As the independent check, F-Droid's own build environment (the fdroidserver buildserver-trixie image running fdroiddata's CI steps) rebuilt the APK from the tag on 2026-10-22 at 01:59 UTC, and the result equals the published reed-v0.5.0-universal.apk apart from the signature (apksigcopier compare). That rebuild ran on the same build host, but with a different toolchain and environment. The F-Droid recipe in the tag lists one scandelete path that the v0.5.0 tree no longer needs (fdroidserver refuses it); the rebuild used the recipe with that one line removed, as main now has it.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • SHA256SUMS
    5 downloads · 2026-10-22 00:29:16 +00:00 · 2.2 KiB
  • SHA256SUMS.sigstore.json
    1 download · 2026-10-22 00:29:16 +00:00 · 3.8 KiB
  • audit-reed-cli-v0.5.0-aarch64-linux-musl.txt
    0 downloads · 2026-10-22 00:31:06 +00:00 · 301 B
  • audit-reed-cli-v0.5.0-x86_64-linux-musl.txt
    0 downloads · 2026-10-22 00:31:07 +00:00 · 300 B
  • audit-reed-relay-v0.5.0-aarch64-linux-musl.txt
    0 downloads · 2026-10-22 00:31:07 +00:00 · 303 B
  • audit-reed-relay-v0.5.0-x86_64-linux-musl.txt
    0 downloads · 2026-10-22 00:31:07 +00:00 · 302 B
  • reed-cli-v0.5.0-aarch64-linux-musl
    0 downloads · 2026-10-22 00:29:45 +00:00 · 32 MiB
  • reed-cli-v0.5.0-x86_64-linux-musl
    2 downloads · 2026-10-22 00:30:19 +00:00 · 36 MiB
  • reed-cli_x86_64-unknown-linux-musl.cdx.json
    0 downloads · 2026-10-22 00:31:04 +00:00 · 737 KiB
  • reed-ffi_aarch64-apple-ios.cdx.json
    0 downloads · 2026-10-22 00:31:04 +00:00 · 755 KiB
  • reed-ffi_aarch64-linux-android.cdx.json
    0 downloads · 2026-10-22 00:31:05 +00:00 · 754 KiB
  • reed-ffi_armv7-linux-androideabi.cdx.json
    0 downloads · 2026-10-22 00:31:05 +00:00 · 750 KiB
  • reed-relay-v0.5.0-aarch64-linux-musl
    0 downloads · 2026-10-22 00:30:21 +00:00 · 14 MiB
  • reed-relay-v0.5.0-x86_64-linux-musl
    1 download · 2026-10-22 00:30:24 +00:00 · 15 MiB
  • reed-relay_aarch64-unknown-linux-musl.cdx.json
    0 downloads · 2026-10-22 00:31:05 +00:00 · 335 KiB
  • reed-relay_x86_64-unknown-linux-musl.cdx.json
    0 downloads · 2026-10-22 00:31:06 +00:00 · 336 KiB
  • reed-v0.5.0-bootstrap-authorities.json
    0 downloads · 2026-10-22 00:30:24 +00:00 · 737 B
  • reed-v0.5.0-bootstrap-consensus.bin
    0 downloads · 2026-10-22 00:30:24 +00:00 · 1.4 KiB
  • reed-v0.5.0-bootstrap-vectors.json
    0 downloads · 2026-10-22 00:30:24 +00:00 · 7.6 KiB
  • reed-v0.5.0-linux-x86_64.AppImage
    0 downloads · 2026-10-22 00:29:13 +00:00 · 110 MiB
  • reed-v0.5.0-linux-x86_64.deb
    0 downloads · 2026-10-22 00:29:16 +00:00 · 15 MiB
  • reed-v0.5.0-universal-unsigned.apk
    0 downloads · 2026-10-22 00:30:40 +00:00 · 64 MiB
  • reed-v0.5.0-universal.apk
    7 downloads · 2026-10-22 00:28:53 +00:00 · 64 MiB
  • reed-v0.5.0-vendored.tar.zst
    0 downloads · 2026-10-22 00:31:03 +00:00 · 97 MiB
  • reed-v0.5.0-web-dist.tar.zst
    0 downloads · 2026-10-22 00:31:03 +00:00 · 1.7 MiB
  • reed-wasm_wasm32-unknown-unknown.cdx.json
    0 downloads · 2026-10-22 00:31:06 +00:00 · 171 KiB
  • release.json
    1 download · 2026-10-22 02:05:08 +00:00 · 2.8 KiB
  • reproduce-desktop-x86_64-unknown-linux-gnu.txt
    0 downloads · 2026-10-22 00:31:06 +00:00 · 1.8 KiB
  • signing-cert-sha256.txt
    0 downloads · 2026-10-22 00:29:16 +00:00 · 65 B
  • webcat-bundle.json
    0 downloads · 2026-10-22 00:29:17 +00:00 · 8.5 KiB
  • webcat-manifest.json
    0 downloads · 2026-10-22 00:29:17 +00:00 · 7.9 KiB
• v0.5.0-rc1 a6e4d78cea

  Compare

  Reed v0.5.0-rc1 Pre-release

  admin_ekaii released this 2026-10-18 01:53:29 +00:00 | 98 commits to main since this release

  Release candidate of Reed 0.5.0 (pre-release). Relays now form a network instead of a single server: three directory authorities vote every hour on which relays are up and publish one signed consensus, which a device accepts only when a majority of the authorities it ships with signed it. Relays join with an admission token, your queues can live on several relays, and version 0.4 apps keep reaching the original relay as before. As CHANGELOG.md says, this is a release candidate of the relay only: the apps move to 0.5.0 with the authorities' bootstrap snapshot once the authorities are live, and the bootstrap snapshot attached here lists no relays yet. The APK, AppImage and .deb in this pre-release are built from the same tag for testing, while the hosted web app is not updated by this pre-release and stays on 0.4.1. CHANGELOG.md in the tag has the full list, including the security fixes from the federation review.

  Included

  • reed-v0.5.0-rc1-universal.apk: the signed universal Android APK (reed-v0.5.0-rc1-universal-unsigned.apk is the unsigned build it was signed from)
  • reed-v0.5.0-rc1-linux-x86_64.AppImage and reed-v0.5.0-rc1-linux-x86_64.deb
  • reed-relay and reed-cli static musl binaries for x86_64 and aarch64 Linux
  • SBOMs in CycloneDX format (*.cdx.json)
  • reed-v0.5.0-rc1-vendored.tar.zst (vendored sources) and reed-v0.5.0-rc1-web-dist.tar.zst (web client build)
  • webcat-manifest.json and webcat-bundle.json (the WEBCAT manifest, logged to Sigsum, and its bundle)
  • the bootstrap pair reed-v0.5.0-rc1-bootstrap-authorities.json and reed-v0.5.0-rc1-bootstrap-consensus.bin, with reed-v0.5.0-rc1-bootstrap-vectors.json
  • release.json, signing-cert-sha256.txt, SHA256SUMS and SHA256SUMS.sigstore.json

  Not in this pre-release

  • No macOS DMG.
  • No aarch64 Linux packages (no aarch64 AppImage or .deb). The relay and CLI binaries are available for aarch64.

  Verify

  1. Check the signature on SHA256SUMS with the cosign public key from the tag (tools/release/keys/reed-release-cosign.pub):

     cosign verify-blob --key reed-release-cosign.pub --bundle SHA256SUMS.sigstore.json SHA256SUMS
     

  2. Check the downloaded files against it:

     sha256sum -c SHA256SUMS
     

     SHA256SUMS lists the SBOMs as sbom/<name>: put the downloaded .cdx.json files in an sbom/ folder first, or add --ignore-missing to check only what you downloaded.

  3. Android: the APK signer certificate SHA-256 must be 52c1d0ef5f1ca2ab8baa3c21fbf14240b9088d2a3e734b05b79e86b5f5ed5d2c (apksigner verify --print-certs reed-v0.5.0-rc1-universal.apk). It is also in signing-cert-sha256.txt.

  Linux .deb and the final 0.5.0

  The package version is 0.5.0-rc1. dpkg reads the hyphen as a Debian revision, so 0.5.0-rc1 sorts above 0.5.0 and apt treats the final 0.5.0 as a downgrade (it asks, and refuses under -y). To install the final over this candidate, use sudo apt install --allow-downgrades ./reed-v0.5.0-linux-<arch>.deb or sudo dpkg -i ./reed-v0.5.0-linux-<arch>.deb. Users who only install final releases are not affected.

  Relay image: forgejo.ekaii.fr/exo/reed-relay@sha256:7c788350e30d35973ff9222585678ca8d9d0134336527a96ed6be654a12633c7, cosign-signed with the release key (verify: cosign verify --key reed-release-cosign.pub forgejo.ekaii.fr/exo/reed-relay@sha256:7c788350e30d35973ff9222585678ca8d9d0134336527a96ed6be654a12633c7).

  Reproducibility: the Mac did not reproduce this candidate. The build host built every artefact twice, from two copies at two paths, and the two builds were identical (the APK, the web dist and the core files: 28 of 28; the x86_64 AppImage and .deb by content). As the independent check, F-Droid's own build environment (the fdroidserver buildserver-trixie image running fdroiddata's CI steps) rebuilt the APK from the tag on 2026-10-18 at 12:15 UTC, and the result equals the published reed-v0.5.0-rc1-universal.apk apart from the signature (apksigcopier compare, and fdroid's own comparison against this release's APK). That rebuild ran on the same build host, but with a different toolchain and environment.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    6 downloads

  ---

  • SHA256SUMS
    18 downloads · 2026-10-18 08:20:54 +00:00 · 2.3 KiB
  • SHA256SUMS.sigstore.json
    5 downloads · 2026-10-18 08:20:54 +00:00 · 3.8 KiB
  • reed-cli-v0.5.0-rc1-aarch64-linux-musl
    4 downloads · 2026-10-18 08:19:26 +00:00 · 32 MiB
  • reed-cli-v0.5.0-rc1-x86_64-linux-musl
    8 downloads · 2026-10-18 08:19:41 +00:00 · 36 MiB
  • reed-cli_x86_64-unknown-linux-musl.cdx.json
    4 downloads · 2026-10-18 08:20:43 +00:00 · 738 KiB
  • reed-ffi_aarch64-apple-ios.cdx.json
    3 downloads · 2026-10-18 08:20:44 +00:00 · 756 KiB
  • reed-ffi_aarch64-linux-android.cdx.json
    3 downloads · 2026-10-18 08:20:45 +00:00 · 755 KiB
  • reed-ffi_armv7-linux-androideabi.cdx.json
    4 downloads · 2026-10-18 08:20:46 +00:00 · 750 KiB
  • reed-relay-v0.5.0-rc1-aarch64-linux-musl
    5 downloads · 2026-10-18 08:19:48 +00:00 · 14 MiB
  • reed-relay-v0.5.0-rc1-x86_64-linux-musl
    6 downloads · 2026-10-18 08:19:59 +00:00 · 15 MiB
  • reed-relay_aarch64-unknown-linux-musl.cdx.json
    4 downloads · 2026-10-18 08:20:46 +00:00 · 335 KiB
  • reed-relay_x86_64-unknown-linux-musl.cdx.json
    4 downloads · 2026-10-18 08:20:47 +00:00 · 336 KiB
  • reed-v0.5.0-rc1-bootstrap-authorities.json
    3 downloads · 2026-10-18 08:20:00 +00:00 · 737 B
  • reed-v0.5.0-rc1-bootstrap-consensus.bin
    5 downloads · 2026-10-18 08:20:00 +00:00 · 1.1 KiB
  • reed-v0.5.0-rc1-bootstrap-vectors.json
    5 downloads · 2026-10-18 08:20:01 +00:00 · 7.1 KiB
  • reed-v0.5.0-rc1-linux-x86_64.AppImage
    4 downloads · 2026-10-18 08:20:46 +00:00 · 110 MiB
  • reed-v0.5.0-rc1-linux-x86_64.deb
    4 downloads · 2026-10-18 08:20:54 +00:00 · 14 MiB
  • reed-v0.5.0-rc1-universal-unsigned.apk
    8 downloads · 2026-10-18 08:20:41 +00:00 · 64 MiB
  • reed-v0.5.0-rc1-universal.apk
    11 downloads · 2026-10-18 08:19:26 +00:00 · 64 MiB
  • reed-v0.5.0-rc1-vendored.tar.zst
    4 downloads · 2026-10-18 08:21:46 +00:00 · 97 MiB
  • reed-v0.5.0-rc1-web-dist.tar.zst
    6 downloads · 2026-10-18 08:20:42 +00:00 · 1.7 MiB
  • reed-wasm_wasm32-unknown-unknown.cdx.json
    4 downloads · 2026-10-18 08:20:48 +00:00 · 171 KiB
  • release.json
    3 downloads · 2026-10-18 12:26:49 +00:00 · 2.8 KiB
  • signing-cert-sha256.txt
    3 downloads · 2026-10-18 08:20:55 +00:00 · 65 B
  • webcat-bundle.json
    4 downloads · 2026-10-18 08:20:56 +00:00 · 9.2 KiB
  • webcat-manifest.json
    3 downloads · 2026-10-18 08:20:55 +00:00 · 8.6 KiB
• v0.4.1 904844623b

  Compare

  Reed v0.4.1 Stable

  admin_ekaii released this 2026-10-03 17:13:31 +00:00 | 1070 commits to main since this release

  Direct distribution (docs/RELEASE.md): the signed universal APK, the macOS DMG (ad-hoc signed), the Linux AppImage and .deb for x86_64 and aarch64. SHA256SUMS is signed (SHA256SUMS.sigstore.json); verify with the published cosign key.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    6 downloads

  ---

  • SHA256SUMS
    8 downloads · 2026-10-03 18:12:18 +00:00 · 2.1 KiB
  • SHA256SUMS.sigstore.json
    2 downloads · 2026-10-03 18:12:17 +00:00 · 3.4 KiB
  • reed-cli-v0.4.1-aarch64-linux-musl
    3 downloads · 2026-10-03 18:12:49 +00:00 · 31 MiB
  • reed-cli-v0.4.1-x86_64-linux-musl
    10 downloads · 2026-10-03 18:12:41 +00:00 · 34 MiB
  • reed-cli_x86_64-unknown-linux-musl.cdx.json
    2 downloads · 2026-10-03 18:13:20 +00:00 · 727 KiB
  • reed-ffi_aarch64-apple-ios.cdx.json
    0 downloads · 2026-10-03 18:13:20 +00:00 · 746 KiB
  • reed-ffi_aarch64-linux-android.cdx.json
    2 downloads · 2026-10-03 18:13:21 +00:00 · 745 KiB
  • reed-ffi_armv7-linux-androideabi.cdx.json
    1 download · 2026-10-03 18:13:21 +00:00 · 742 KiB
  • reed-relay-v0.4.1-aarch64-linux-musl
    4 downloads · 2026-10-03 18:12:28 +00:00 · 9.5 MiB
  • reed-relay-v0.4.1-x86_64-linux-musl
    2 downloads · 2026-10-03 18:12:26 +00:00 · 10 MiB
  • reed-relay_aarch64-unknown-linux-musl.cdx.json
    2 downloads · 2026-10-03 18:13:21 +00:00 · 328 KiB
  • reed-relay_x86_64-unknown-linux-musl.cdx.json
    2 downloads · 2026-10-03 18:13:21 +00:00 · 329 KiB
  • reed-v0.4.1-linux-x86_64.AppImage
    6 downloads · 2026-10-03 18:12:12 +00:00 · 110 MiB
  • reed-v0.4.1-linux-x86_64.deb
    3 downloads · 2026-10-03 18:12:17 +00:00 · 14 MiB
  • reed-v0.4.1-universal.apk
    7 downloads · 2026-10-03 18:11:29 +00:00 · 63 MiB
  • reed-v0.4.1-vendored.tar.zst
    3 downloads · 2026-10-03 18:13:19 +00:00 · 96 MiB
  • reed-v0.4.1-web-dist.tar.zst
    5 downloads · 2026-10-03 18:12:49 +00:00 · 1.5 MiB
  • reed-wasm_wasm32-unknown-unknown.cdx.json
    3 downloads · 2026-10-03 18:13:22 +00:00 · 170 KiB
  • release.json
    4 downloads · 2026-10-03 18:13:19 +00:00 · 2.4 KiB
  • signing-cert-sha256.txt
    1 download · 2026-10-03 18:12:18 +00:00 · 65 B
  • webcat-bundle.json
    2 downloads · 2026-10-03 18:12:18 +00:00 · 6.9 KiB
  • webcat-manifest.json
    3 downloads · 2026-10-03 18:12:18 +00:00 · 6.2 KiB
• v0.4.0 fdbb9db0bc

  Compare

  Reed v0.4.0 Stable

  admin_ekaii released this 2026-10-03 14:43:51 +00:00 | 1074 commits to main since this release

  Direct distribution (docs/RELEASE.md): the signed universal APK, the macOS DMG (ad-hoc signed), the Linux AppImage and .deb for x86_64 and aarch64. SHA256SUMS is signed (SHA256SUMS.sigstore.json); verify with the published cosign key.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    12 downloads

  ---

  • SHA256SUMS
    2 downloads · 2026-10-03 16:07:21 +00:00 · 2.1 KiB
  • SHA256SUMS.sigstore.json
    2 downloads · 2026-10-03 16:07:20 +00:00 · 3.5 KiB
  • reed-cli-v0.4.0-aarch64-linux-musl
    4 downloads · 2026-10-03 16:08:08 +00:00 · 31 MiB
  • reed-cli-v0.4.0-x86_64-linux-musl
    7 downloads · 2026-10-03 16:07:53 +00:00 · 34 MiB
  • reed-cli_x86_64-unknown-linux-musl.cdx.json
    2 downloads · 2026-10-03 16:09:20 +00:00 · 727 KiB
  • reed-ffi_aarch64-apple-ios.cdx.json
    2 downloads · 2026-10-03 16:09:21 +00:00 · 746 KiB
  • reed-ffi_aarch64-linux-android.cdx.json
    2 downloads · 2026-10-03 16:09:22 +00:00 · 745 KiB
  • reed-ffi_armv7-linux-androideabi.cdx.json
    2 downloads · 2026-10-03 16:09:22 +00:00 · 742 KiB
  • reed-relay-v0.4.0-aarch64-linux-musl
    4 downloads · 2026-10-03 16:07:34 +00:00 · 9.5 MiB
  • reed-relay-v0.4.0-x86_64-linux-musl
    2 downloads · 2026-10-03 16:07:32 +00:00 · 10 MiB
  • reed-relay_aarch64-unknown-linux-musl.cdx.json
    1 download · 2026-10-03 16:09:22 +00:00 · 328 KiB
  • reed-relay_x86_64-unknown-linux-musl.cdx.json
    2 downloads · 2026-10-03 16:09:22 +00:00 · 329 KiB
  • reed-v0.4.0-linux-x86_64.AppImage
    6 downloads · 2026-10-03 16:07:12 +00:00 · 110 MiB
  • reed-v0.4.0-linux-x86_64.deb
    4 downloads · 2026-10-03 16:07:20 +00:00 · 14 MiB
  • reed-v0.4.0-universal.apk
    2 downloads · 2026-10-03 16:06:25 +00:00 · 63 MiB
  • reed-v0.4.0-vendored.tar.zst
    3 downloads · 2026-10-03 16:09:20 +00:00 · 96 MiB
  • reed-v0.4.0-web-dist.tar.zst
    4 downloads · 2026-10-03 16:08:09 +00:00 · 1.5 MiB
  • reed-wasm_wasm32-unknown-unknown.cdx.json
    2 downloads · 2026-10-03 16:09:23 +00:00 · 170 KiB
  • release.json
    2 downloads · 2026-10-03 16:09:20 +00:00 · 2.4 KiB
  • signing-cert-sha256.txt
    2 downloads · 2026-10-03 16:07:21 +00:00 · 65 B
  • webcat-bundle.json
    1 download · 2026-10-03 16:07:21 +00:00 · 5.2 KiB
  • webcat-manifest.json
    2 downloads · 2026-10-03 16:07:21 +00:00 · 4.5 KiB
• v0.3.0 15208e7ad4

  Compare

  Reed v0.3.0 Stable

  admin_ekaii released this 2026-09-30 15:38:14 +00:00 | 1127 commits to main since this release

  Direct distribution (docs/RELEASE.md): the signed universal APK, the macOS DMG (ad-hoc signed), the Linux AppImage and .deb for x86_64 and aarch64. SHA256SUMS is signed (SHA256SUMS.sigstore.json); verify with the published cosign key.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    8 downloads

  ---

  • SHA256SUMS
    3 downloads · 2026-09-30 16:23:43 +00:00 · 470 B
  • SHA256SUMS.sigstore.json
    2 downloads · 2026-09-30 16:23:42 +00:00 · 4 KiB
  • reed-v0.3.0-universal.apk
    16 downloads · 2026-09-30 16:23:42 +00:00 · 52 MiB
  • signing-cert-sha256.txt
    3 downloads · 2026-09-30 16:23:43 +00:00 · 65 B
  • webcat-manifest.json
    2 downloads · 2026-09-30 16:23:43 +00:00 · 1.8 KiB
• v0.3.0-rc2 da51b08ca1

  Compare

  Reed v0.3.0-rc2 Pre-release

  admin_ekaii released this 2026-09-30 08:38:44 +00:00 | 1131 commits to main since this release

  Direct distribution (docs/RELEASE.md): the signed universal APK, the macOS DMG (ad-hoc signed), the Linux AppImage and .deb for x86_64 and aarch64. SHA256SUMS is signed (SHA256SUMS.sigstore.json); verify with the published cosign key.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    1 download

  ---

  • SHA256SUMS
    3 downloads · 2026-09-30 10:13:40 +00:00 · 2.2 KiB
  • SHA256SUMS.sigstore.json
    3 downloads · 2026-09-30 10:13:40 +00:00 · 3.7 KiB
  • codesign-dv.txt
    3 downloads · 2026-09-30 10:13:41 +00:00 · 607 B
  • reed-v0.3.0-rc2-linux-x86_64.AppImage
    6 downloads · 2026-09-30 10:13:32 +00:00 · 108 MiB
  • reed-v0.3.0-rc2-linux-x86_64.deb
    4 downloads · 2026-09-30 10:13:40 +00:00 · 14 MiB
  • reed-v0.3.0-rc2-macos-aarch64.dmg
    4 downloads · 2026-09-30 10:12:15 +00:00 · 12 MiB
  • reed-v0.3.0-rc2-universal.apk
    9 downloads · 2026-09-30 10:12:10 +00:00 · 52 MiB
  • signing-cert-sha256.txt
    2 downloads · 2026-09-30 10:13:41 +00:00 · 65 B
  • webcat-bundle.json
    3 downloads · 2026-09-30 10:13:42 +00:00 · 6.6 KiB
  • webcat-manifest.json
    2 downloads · 2026-09-30 10:13:41 +00:00 · 5.9 KiB
• v0.3.0-rc1 b4f5b472d8

  Compare

  Reed v0.3.0-rc1 Pre-release

  admin_ekaii released this 2026-09-29 23:16:37 +00:00 | 1132 commits to main since this release

  Direct distribution (docs/RELEASE.md): the signed universal APK, the macOS DMG (ad-hoc signed), the Linux AppImage and .deb for x86_64 and aarch64. SHA256SUMS is signed (SHA256SUMS.sigstore.json); verify with the published cosign key.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads

  ---

  • SHA256SUMS
    5 downloads · 2026-09-30 00:18:48 +00:00 · 1.8 KiB
  • SHA256SUMS.sigstore.json
    4 downloads · 2026-09-30 00:18:48 +00:00 · 3.7 KiB
  • android-foss.cdx.json
    1 download · 2026-09-30 00:19:44 +00:00 · 248 KiB
  • codesign-dv.txt
    4 downloads · 2026-09-30 00:18:49 +00:00 · 603 B
  • reed-cli-v0.3.0-rc1-aarch64-linux-musl
    2 downloads · 2026-09-30 00:19:22 +00:00 · 31 MiB
  • reed-cli-v0.3.0-rc1-x86_64-linux-musl
    5 downloads · 2026-09-30 00:19:27 +00:00 · 34 MiB
  • reed-cli_x86_64-unknown-linux-musl.cdx.json
    2 downloads · 2026-09-30 00:19:44 +00:00 · 727 KiB
  • reed-ffi_aarch64-apple-ios.cdx.json
    2 downloads · 2026-09-30 00:19:44 +00:00 · 746 KiB
  • reed-ffi_aarch64-linux-android.cdx.json
    2 downloads · 2026-09-30 00:19:45 +00:00 · 745 KiB
  • reed-ffi_armv7-linux-androideabi.cdx.json
    1 download · 2026-09-30 00:19:45 +00:00 · 742 KiB
  • reed-relay-v0.3.0-rc1-aarch64-linux-musl
    4 downloads · 2026-09-30 00:19:15 +00:00 · 9.2 MiB
  • reed-relay-v0.3.0-rc1-x86_64-linux-musl
    7 downloads · 2026-09-30 00:19:17 +00:00 · 10 MiB
  • reed-relay_aarch64-unknown-linux-musl.cdx.json
    2 downloads · 2026-09-30 00:19:45 +00:00 · 328 KiB
  • reed-relay_x86_64-unknown-linux-musl.cdx.json
    2 downloads · 2026-09-30 00:19:46 +00:00 · 329 KiB
  • reed-v0.3.0-rc1-macos-aarch64.dmg
    5 downloads · 2026-09-30 00:18:48 +00:00 · 12 MiB
  • reed-v0.3.0-rc1-universal.apk
    4 downloads · 2026-09-30 00:18:43 +00:00 · 52 MiB
  • reed-v0.3.0-rc1-vendored.tar.zst
    6 downloads · 2026-09-30 00:19:43 +00:00 · 96 MiB
  • reed-v0.3.0-rc1-web-dist.tar.zst
    3 downloads · 2026-09-30 00:19:28 +00:00 · 1.5 MiB
  • reed-wasm_wasm32-unknown-unknown.cdx.json
    2 downloads · 2026-09-30 00:19:46 +00:00 · 170 KiB
  • release.json
    2 downloads · 2026-09-30 00:19:43 +00:00 · 2.3 KiB
  • repo.cdx.json
    11 downloads · 2026-09-30 00:19:58 +00:00 · 73 MiB
  • signing-cert-sha256.txt
    3 downloads · 2026-09-30 00:18:48 +00:00 · 65 B
• v0.2.0-rc2 dd5a0278e4

  Compare

  Reed v0.2.0-rc2 Pre-release

  admin_ekaii released this 2026-09-10 23:06:54 +00:00 | 1196 commits to main since this release

  Reed v0.2.0-rc2: M2 release candidate 2 (pre-release). The APK is signed with the Reed release key; every other artefact is the reproducible unsigned output.

  Since rc1 (tag v0.2.0-rc1): the relay answers a spent registration window with the typed ALLOWED status 3 "rate limited" (ADR-53) with refusal counters and log lines, and the core retries; ContactView.waiting shows pending acceptances on the three shells; the real-device bench scripts run end to end; the Kani assurance is closed (21 harnesses SUCCESSFUL, tools/assurance/kani.sh exits 0; KNOWN-ISSUES A-8 and A-11 fixed); the link simulator's property oracle is exact; the gate's ios-generated step diffs the tracked Swift binding. Gate green on 3b0eb70 (24 steps, ProVerif 7 models, cargo deny). Report: docs/REPORT-M2.md section 7.

  Artefacts: tools/release/reproduce.sh v0.2.0-rc2 --native on the tag, PASS, 25 artefacts identical across two independent builds. reed-v0.2.0-rc2-universal.apk is signed (v2 and v3) with the Reed release certificate, SHA-256 52c1d0ef5f1ca2ab8baa3c21fbf14240b9088d2a3e734b05b79e86b5f5ed5d2c (signing-cert-sha256.txt; build-status/m3/KEY-CEREMONY-2026-09-11.md). SHA256SUMS is signed with cosign: verify offline with tools/release/keys/reed-release-cosign.pub and SHA256SUMS.sigstore.json (docs/RELEASE.md 6). Installing the APK needs "install unknown apps" for your browser or file manager; no store listing exists (direct distribution, DECISIONS-M3 D1). iOS stays on the simulator (no Developer Program).

  SHA256SUMS:

  1eee790c831001edfab07b61ad932c354a7f945717af64a891c20d736215f588  libreed_ffi-arm64-v8a.so
  750ad922d46ff227cddd656fd831a4a3cb9c04c50e3699193834b8dd34b69c0a  libreed_ffi-armeabi-v7a.so
  3f4471235d01bb9044a4e2c0f62c24e3835fd1a77fcd800bce0171fbd27b214c  reed-v0.2.0-rc2-universal-unsigned.apk
  5fcd8aa65ec79e05fe58b6c8b0f7ef9cb36d6a52e8ebd0f2ab0313578439ef05  reed-v0.2.0-rc2-universal.apk
  7f5dae90a5878f8788ac135138e87c8d5573ac1edd1fa55b08bc1a903b59800f  reed-v0.2.0-rc2-vendored.tar.zst
  a73a85d30bef1cc58741cfb04a3fbe95cf008381b69435fc50d98a55cacdab25  reed-v0.2.0-rc2-web-dist.tar.zst
  89a629ebc9e6106529fe36f3e89d0be7d8cd0fb0fea5760621dd7655852c4d27  reed_wasm_bg.wasm
  afd15b98e76a5d78d33bdae61ef11854b38bc6d4213e29fcfd39ea4fde34c380  webcat-manifest.json
  

  Downloads

  • Source code (ZIP)
    1 download
  • Source code (TAR.GZ)
    4 downloads

  ---

  • SHA256SUMS
    5 downloads · 2026-09-10 23:53:37 +00:00 · 754 B
  • SHA256SUMS.sigstore.json
    1 download · 2026-09-10 23:53:37 +00:00 · 4 KiB
  • libreed_ffi-arm64-v8a.so
    5 downloads · 2026-09-10 23:42:21 +00:00 · 25 MiB
  • libreed_ffi-armeabi-v7a.so
    5 downloads · 2026-09-10 23:42:54 +00:00 · 18 MiB
  • reed-v0.2.0-rc2-universal-unsigned.apk
    2 downloads · 2026-09-11 00:01:10 +00:00 · 48 MiB
  • reed-v0.2.0-rc2-universal.apk
    9 downloads · 2026-09-11 00:01:10 +00:00 · 48 MiB
  • reed-v0.2.0-rc2-vendored.tar.zst
    11 downloads · 2026-09-11 00:01:11 +00:00 · 64 MiB
  • reed-v0.2.0-rc2-web-dist.tar.zst
    8 downloads · 2026-09-10 23:53:37 +00:00 · 1 MiB
  • reed_wasm_bg.wasm
    8 downloads · 2026-09-10 23:43:02 +00:00 · 4.2 MiB
  • signing-cert-sha256.txt
    6 downloads · 2026-09-10 23:53:38 +00:00 · 65 B
  • webcat-manifest.json
    2 downloads · 2026-09-10 23:53:38 +00:00 · 1.7 KiB
• v0.2.0-rc1 cc6527cd44

  Compare

  Reed v0.2.0-rc1 (M2 release candidate 1) Pre-release

  admin_ekaii released this 2026-09-08 06:54:23 +00:00 | 1218 commits to main since this release

  Reed v0.2.0-rc1: M2 release candidate 1 (pre-release, unsigned).

  What is in M2: Tor client and onion relay, LAN and BLE links, LoRa companions (Meshtastic and MeshCore firmware), groups, content-free push, iOS host, interop with Briar, SimpleX, Nostr, Chatmail, Meshtastic and MeshCore, release engineering and assurance. Report: docs/REPORT-M2.md (section 7 for the closing wave). Gate green on ccf1e55; native double build PASS, 25 artefacts identical across two independent builds.

  The artefacts below are the reproducible outputs of tools/release/reproduce.sh v0.2.0-rc1 --native on the tag: the universal unsigned APK (install requires developer options; the signed store builds are an owner action), the web dist tarball, the wasm core, the two Android native libraries, the vendored Rust sources and the webcat manifest. Verify with the SHA256SUMS file; rebuild with tools/release/reproduce.sh to compare.

  SHA256SUMS:

  fedd8dbf2be2abf00ebf7b046781a47bbf9ef08acfd090f98a3a75e15b2458db  libreed_ffi-arm64-v8a.so
  a787abba07b5a69defa8a838743ad9b1ab6d43877af9c8db29b6b5745020d2c4  libreed_ffi-armeabi-v7a.so
  44c905c8ada4dd198bbd1066a5d37c52df3d83eeb39574cc9ebff2efd84a2e65  reed_wasm_bg.wasm
  f39546173ebedf073584070a84e9bb01ed2cf3095693562d95190a45087c0be1  reed-v0.2.0-rc1-universal-unsigned.apk
  fd72d1b6c9b2d30284011fda01a4e5dca761fa002812419fca15987de40448f2  reed-v0.2.0-rc1-vendored.tar.zst
  cd8a3b95e9604d1f0d68d486e41eeb2af508a753ea9e3055895bb43f9b4a3cdc  reed-v0.2.0-rc1-web-dist.tar.zst
  717a4c3703b7111f87f53e27e634ab6fb40a42be4ee15994abd2f2ec6d635d27  webcat-manifest.json
  

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    3 downloads

  ---

  • SHA256SUMS
    5 downloads · 2026-09-09 14:44:27 +00:00 · 658 B
  • libreed_ffi-arm64-v8a.so
    5 downloads · 2026-09-09 14:43:21 +00:00 · 25 MiB
  • libreed_ffi-armeabi-v7a.so
    6 downloads · 2026-09-09 14:43:25 +00:00 · 18 MiB
  • reed-v0.2.0-rc1-universal-unsigned.apk
    9 downloads · 2026-09-09 14:43:56 +00:00 · 48 MiB
  • reed-v0.2.0-rc1-vendored.tar.zst
    11 downloads · 2026-09-09 14:44:26 +00:00 · 64 MiB
  • reed-v0.2.0-rc1-web-dist.tar.zst
    9 downloads · 2026-09-09 14:44:27 +00:00 · 1 MiB
  • reed_wasm_bg.wasm
    5 downloads · 2026-09-09 14:43:26 +00:00 · 4.2 MiB
  • webcat-manifest.json
    1 download · 2026-09-09 14:44:27 +00:00 · 1.7 KiB