From a82279c6a4319da264c02fd271511701a0a70684 Mon Sep 17 00:00:00 2001
From: Lilleman auf Larv <lilleman@larvit.se>
Date: Tue, 13 Oct 2026 23:53:53 +0200
Subject: [PATCH] =?UTF-8?q?Answer=20product-owner=20round=201:=200=20?=
 =?UTF-8?q?=F0=9F=94=B4,=201=20=F0=9F=9F=A1;=20check=20the=20apk=20reposit?=
 =?UTF-8?q?ory=20on=20Alpine=203.24's=20apk-tools=203,=20and=20say=20how?=
 =?UTF-8?q?=20macOS=20runs=20a=20downloaded=20binary?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 README.md                                | 2 ++
 release-tooling/package-repos.Dockerfile | 4 ++--
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index adc33c5..40efeb1 100644
--- a/README.md
+++ b/README.md
@@ -64,6 +64,8 @@ apk add fejkdata
 
 Each [release](https://github.com/larvit/fejkdata/releases) also carries the binaries for
 Linux, macOS and Windows on amd64 and arm64, and the `.deb`, `.rpm` and `.apk` packages.
+The binaries are not signed, so macOS refuses one a browser downloaded until
+`xattr -d com.apple.quarantine fejkdata` clears its quarantine flag.
 
 ## CLI
 
diff --git a/release-tooling/package-repos.Dockerfile b/release-tooling/package-repos.Dockerfile
index 7c3dacd..35cac22 100644
--- a/release-tooling/package-repos.Dockerfile
+++ b/release-tooling/package-repos.Dockerfile
@@ -55,7 +55,7 @@ RUN --mount=type=secret,id=gpg,required=true --mount=type=tmpfs,target=/root/.gn
 	&& printf '[fejkdata]\nname=fejkdata\nbaseurl=%s/rpm\nrepo_gpgcheck=1\ngpgcheck=0\ngpgkey=%s/fejkdata.asc\n' \
 		"$BASE_URL" "$BASE_URL" > fejkdata.repo
 
-FROM alpine:3.22.2 AS apk
+FROM alpine:3.24.2 AS apk
 RUN apk add --no-cache abuild openssl
 COPY --from=packages *.apk /packages/
 RUN --mount=type=secret,id=rsa,required=true,target=/keys/fejkdata.rsa \
@@ -92,7 +92,7 @@ RUN sed -e 's#^baseurl=.*#baseurl=file:///site/rpm#' -e 's#^gpgkey=.*#gpgkey=fil
 	&& fejkdata --version > /checked \
 	&& { [ -z "$EXPECTED_VERSION" ] || [ "$(cat /checked)" = "fejkdata $EXPECTED_VERSION" ]; }
 
-FROM alpine:3.22.2 AS check-apk
+FROM alpine:3.24.2 AS check-apk
 ARG EXPECTED_VERSION
 COPY --from=site / /site
 RUN cp /site/apk/fejkdata.rsa.pub /etc/apk/keys/ \