Deivid Soto 86f03ba787 test(upgrade): disable signature check in checksum-matching tests ... TestVerifyChecksumWithHTTPTest and TestVerifyChecksumCaseInsensitive predate release signing (commit 1757bda baked the release pubkey). With the pubkey set, verifyChecksum now requires a valid checksums.txt.sig and fails at signature decode before reaching the SHA256 comparison these tests assert. They exercise the checksum-matching path only, so clear releasePubKeyBase64 for their duration (t.Cleanup restore) — mirroring the existing pattern in signature_test.go. The signature path itself keeps its dedicated coverage there. No production change.		2026-06-04 08:35:46 +02:00
..
cache.go	fix(daemon): use correct systemd user target and isolate test cache	2026-04-06 18:49:44 +02:00
download.go	fix(upgrade): fetch releases from TorrentClaw app, not GitHub	2026-05-21 14:46:10 +02:00
extract.go	fix(security): CORS allowlist, URL scheme guard, state perms, ZIP slip, mirror docs	2026-05-15 18:48:59 +02:00
signature.go	feat(release): sign release checksums (ed25519), enforce + bake pubkey	2026-06-03 19:23:19 +02:00
signature_test.go	fix(upgrade): fetch releases from TorrentClaw app, not GitHub	2026-05-21 14:46:10 +02:00
upgrade.go	fix(upgrade): fetch releases from TorrentClaw app, not GitHub	2026-05-21 14:46:10 +02:00
upgrade_test.go	test(upgrade): disable signature check in checksum-matching tests	2026-06-04 08:35:46 +02:00