Flint 0.1.5

Verify before you install

Every artifact here is signed with GitHub build provenance - a Sigstore attestation binding the file's digest to this repository, this workflow, and the commit that built it. There is no maintainer key to fetch and no trust-on-first-use step.

gh attestation verify BTCPayServer.Plugins.Flint.btcpay --repo sethforprivacy/flint

Offline, against the attestation.jsonl bundle attached below rather than GitHub's API:

gh attestation verify BTCPayServer.Plugins.Flint.btcpay \
  --bundle attestation.jsonl --repo sethforprivacy/flint

SHA256SUMS is attested too, so it can be trusted once verified. One quirk: BTCPay's PluginPacker writes it with a single space between hash and filename. GNU sha256sum -c accepts that; macOS's shasum -a 256 -c rejects the whole file, so on macOS compare shasum -a 256 <file> by eye.

Installing

Server settings Plugins Upload plugin, and select BTCPayServer.Plugins.Flint.btcpay. BTCPay restarts itself to finish. Requires BTCPay Server 2.4.1 or newer, on a non-Alpine host.

Read CHANGELOG.md for what is in this release and how far it has actually been proven, and the trust model, before you put money through it.

What's Changed

• Never display the stored Breez API key on the Advanced page by @sethforprivacy in https://github.com/sethforprivacy/flint/pull/32
• Release 0.1.5.2 by @sethforprivacy in https://github.com/sethforprivacy/flint/pull/33

Full Changelog: https://github.com/sethforprivacy/flint/compare/v0.1.5.1...v0.1.5.2