Verifying the Release
In order to verify the release, you'll need to have gpg or gpg2 installed on your system. Once you've obtained a copy (and hopefully verified that as well), you'll first need to import the keys that have signed this release if you haven't done so already:
curl https://raw.githubusercontent.com/MostroP2P/mostro/main/keys/negrunch.asc | gpg --import
curl https://raw.githubusercontent.com/MostroP2P/mostro/main/keys/arkanoider.asc | gpg --importOnce you have the required PGP keys, you can verify the release (assuming manifest.txt.sig.negrunch, manifest.txt.sig.arkanoider and manifest.txt are in the current directory) with:
gpg --verify manifest.txt.sig.negrunch manifest.txt
gpg --verify manifest.txt.sig.arkanoider manifest.txt
gpg: Signature made fri 10 oct 2025 11:28:03 -03
gpg: using RSA key 1E41631D137BA2ADE55344F73852B843679AD6F0
gpg: Good signature from "Francisco Calderón <fjcalderon@gmail.com>" [ultimate]
gpg: Signature made fri 10 oct 2025 11:28:03 -03
gpg: using RSA key 2E986CA1C5E7EA1635CD059C4989CC7415A43AEC
gpg: Good signature from "Arkanoider <github.913zc@simplelogin.com>" [ultimate]
That will verify the signature of the manifest file, which ensures integrity and authenticity of the archive you've downloaded locally containing the binaries. Next, depending on your operating system, you should then re-compute the sha256 hash of the archive with shasum -a 256 <filename>, compare it with the corresponding one in the manifest file, and ensure they match exactly.
What's Changed in v0.16.5
💼 Other
- Update CHANGELOG for version 0.16.5 by @grunch
- Adding instance name to "y" tags by @sergey3bv in #653
🚜 Refactor
- refactor: complete phase-5 handler DI migration to AppContext (#639) by @mostronatorcoder[bot] in #657
- refactor: wire AppContext into dispatcher and migrate cancel module (#639 phase 2) by @mostronatorcoder[bot] in #652
- refactor: add AppContext struct for dependency injection (#639 phase 1) by @mostronatorcoder[bot] in #651
- refactor: remove password infrastructure and all encryption code paths by @mostronatorcoder[bot] in #647
- refactor: remove dual encrypted/unencrypted code paths in db.rs by @mostronatorcoder[bot] in #646
- refactor: remove encryption from app layer and util by @mostronatorcoder[bot] in #645
- refactor: add --decrypt-db CLI command for database migration by @mostronatorcoder[bot] in #644
- refactor: add deprecation warning for MOSTRO_DB_PASSWORD by @mostronatorcoder[bot] in #643
🧪 Testing
- test: add phase-4 cancel unit tests using AppContext builder (#639) by @mostronatorcoder[bot] in #655
- test: add phase-3 mock test context utilities for AppContext (#639) by @mostronatorcoder[bot] in #654
- test: add 28 mutation testing tests for db module by @mostronatorcoder[bot] in #640
⚙️ Miscellaneous Tasks
- Release mostro version 0.16.5 by @grunch
- ci: make PR mutation testing opt-in via label by @mostronatorcoder[bot] in #648
◀️ Revert
- revert: logical revert of PR #617 targeted update behavior by @mostronatorcoder[bot] in #659
Contributors
- @grunch made their contribution
- @sergey3bv made their contribution in #653
- @mostronatorcoder[bot] made their contribution in #659
Full Changelog: v0.16.4...v0.16.5