Lertaro/Lertaro v4.9.5 on GitHub

Changelog (Commits)

bump: version v4.9.5 (ec9fc47)
feat: add full-window stay-open hotkey (ce7e6d8)
fix: harden mutex takeover and snapshot parsing (152e03c)
fix(App,Cli,CoreExtensions): harden pipe search, single-instance mutex, and instant answers (dcf2af3)
fix(Core): harden index snapshot, MFT parsing, delta counting, and alias filtering (ae70d44)

Security Verification

SHA-256 Checksums

Lertaro-Setup.exe (x64): ce6c173bc900ac00577d3aa4f4bf3489d0b996e9221d1704f8834f53566fb84c
Lertaro-Portable.zip (x64): e25f60d0a12ce103f59e70136769a9b3e6c4c07778bd745e5d97e2dc211b1539
Lertaro-Setup-arm64.exe (arm64): 7038c5133a2799e9f7163475bbd5f9c51a18312c26833381204e02de4acdbc07
Lertaro-Portable-arm64.zip (arm64): a7e0ba4c36ab1e3bcc3ec6cdc81ce319af7a30adb1c425699b366de096614c20

Signature Verification (ECDsa NistP256)

The portable ZIP release is signed using our official release key.

To verify the signature manually using OpenSSL:

# 1. Save the public key shown above to 'public_key.pem'
# 2. Run the following command:
openssl dgst -sha256 -verify public_key.pem -signature Lertaro-Portable.zip.sig Lertaro-Portable.zip
# Expected output: Verified OK

To verify the signature manually in PowerShell (.NET 5.0+):

$zipBytes = [System.IO.File]::ReadAllBytes('Lertaro-Portable.zip')
$sigBytes = [System.IO.File]::ReadAllBytes('Lertaro-Portable.zip.sig')
$ecdsa = [System.Security.Cryptography.ECDsa]::Create()
$pubKeyPem = '-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE117370jTbSPgIwHLntC+Bi3SD6gJ
QfxAySjSpUWa6zy4n0YHVv/ZWXM9zQlF2LTqpQC0iHNdJNH+MKU9UvDMTQ==
-----END PUBLIC KEY-----'
$ecdsa.ImportFromPem($pubKeyPem)
$ecdsa.VerifyData($zipBytes, $sigBytes, [System.Security.Cryptography.HashAlgorithmName]::SHA256, [System.Security.Cryptography.DSASignatureFormat]::Rfc3279DerSequence)
# Expected output: True