Flint 1.0.4

Verify before you install

Every artifact here is signed with GitHub build provenance - a Sigstore attestation binding the file's digest to this repository, this workflow, and the commit that built it. There is no maintainer key to fetch and no trust-on-first-use step.

gh attestation verify BTCPayServer.Plugins.Flint.btcpay --repo sethforprivacy/flint

Offline, against the attestation.jsonl bundle attached below rather than GitHub's API:

gh attestation verify BTCPayServer.Plugins.Flint.btcpay \
  --bundle attestation.jsonl --repo sethforprivacy/flint

SHA256SUMS is attested too, so it can be trusted once verified. One quirk: BTCPay's PluginPacker writes it with a single space between hash and filename. GNU sha256sum -c accepts that; macOS's shasum -a 256 -c rejects the whole file, so on macOS compare shasum -a 256 <file> by eye.

Installing

Server settings Plugins, find Flint in the plugin store (official listing), and install it. BTCPay restarts itself to finish.

Alternatively, Server settings Plugins Upload plugin, and select BTCPayServer.Plugins.Flint.btcpay. BTCPay restarts itself to finish. Both routes require BTCPay Server 2.4.1 or newer, on a non-Alpine host.

Read the CHANGELOG for what is in this release and how far it has actually been proven, and the trust model, before you put money through it.

What's Changed

• chore: gitignore *.local.md; withhold regtest SDK log on preimage/session-token by @sethforprivacy in https://github.com/sethforprivacy/flint/pull/55
• Resolve the setup-tab store from the request authorisation, not the form model by @sethforprivacy in https://github.com/sethforprivacy/flint/pull/56
• Release the storage lock when the Spark SDK connect throws by @sethforprivacy in https://github.com/sethforprivacy/flint/pull/57
• Low-risk hardening batch: scrubbed SDK errors, path-free lock reason, packaging and test hygiene by @sethforprivacy in https://github.com/sethforprivacy/flint/pull/63
• Gate forwarded.log and fingerprint withheld material in the funded-regtest audit artifacts by @sethforprivacy in https://github.com/sethforprivacy/flint/pull/58
• Pin the dependency graph: lock files, exact Spark SDK pin, locked-mode CI restores by @sethforprivacy in https://github.com/sethforprivacy/flint/pull/59
• Order the settleable-invoice walk by expiry over its own partial covering index by @sethforprivacy in https://github.com/sethforprivacy/flint/pull/61
• Gate payment-hash prompt recording on Flint presence; 14-day retention by @sethforprivacy in https://github.com/sethforprivacy/flint/pull/62
• Classify the cross-store Lightning sweep from loaded stores; run it at startup plus 30 minutes by @sethforprivacy in https://github.com/sethforprivacy/flint/pull/60
• Release 1.0.4 by @sethforprivacy in https://github.com/sethforprivacy/flint/pull/64

Full Changelog: https://github.com/sethforprivacy/flint/compare/v1.0.3...v1.0.4