Blog ·

Opensidian 0.9.4 is out

Opensidian 0.9.4 is out: download it here, and verify your download against the signed SHA256SUMS.

This is a feature and bug-fix release on top of 0.9.3. The downloads are the same five packages for Linux x86_64 (two AppImages, Flatpak, RPM, DEB). Every file has a GitHub artifact attestation, SHA256SUMS is GPG-signed with the same key as 0.9.3, and the release itself is immutable.

Highlights

Fixed

Known issues

Verify your download

Download every file of the release into one directory, then check the checksums, the build provenance, the release attestation and the signature:

sha256sum -c SHA256SUMS
for f in opensidian-0.9.4-x86_64* SHA256SUMS; do
  gh attestation verify "$f" --repo jpzk/opensidian
done
gh release verify v0.9.4 -R jpzk/opensidian
for f in opensidian-0.9.4-x86_64* SHA256SUMS SHA256SUMS.asc; do
  gh release verify-asset v0.9.4 "$f" -R jpzk/opensidian
done
gpg --keyserver hkps://keys.openpgp.org --recv-keys A6E69ED6BC4779F3281721484CC1AFDE15B64EA3
gpg --verify SHA256SUMS.asc SHA256SUMS

The key fingerprint is A6E6 9ED6 BC47 79F3 2817 2148 4CC1 AFDE 15B6 4EA3. The RPM is not signed, so rpm -K reports no signature; check it with the commands above. On rpm 6 (for example Fedora 44) install it with sudo rpm -Uvh --nosignature ./opensidian-0.9.4-x86_64.rpm.

Credits

Thank you to everyone who reported, built, reviewed and discussed. The full list of contributors is in the release notes.

Full changelog: GitHub release v0.9.4.