Releases
13 routes. Paths are relative to https://api.intersink.com/v1.
- GET/releasesPublished releases, newest first (?platform=&track=&limit=)
- GET/releases/channels/{channelId}Every release of the channel, drafts and withdrawn included
- POST/releases/channels/{channelId}Add a release { version, platform, arch?, track?, title?, notes?, download_url, size?, sha256?, min_os?, signature?, signature_key_id?, publish? }
- PATCH/releases/channels/{channelId}/{id}Edit a release (not once withdrawn); a published one takes only title, notes and a new signature
- POST/releases/channels/{channelId}/{id}/publishPublish: updaters and the website see it at once
- POST/releases/channels/{channelId}/{id}/withdrawWithdraw a bad release: updaters fall back to the previous one
- GET/releases/channels/{channelId}/signingRelease signing: policy (require_signature, download_hosts) and every key, revoked included
- POST/releases/channels/{channelId}/signing/keysRegister a signing public key { public_key (base64 of 32 bytes, or PEM), name? } (a person, recent sign-in)
- POST/releases/channels/{channelId}/signing/keys/{keyId}/revokeRevoke a signing key at once: its signatures stop being served or accepted (a person)
- PUT/releases/channels/{channelId}/signing/policyRelease policy { require_signature?, download_hosts? [dl.example.com, *.example.com], no IP addresses } (a person, recent sign-in); answers unsigned_published and off_list_published with examples
- GET/releases/latestLatest published release: ?platform=mac|windows|linux|android|ios|web&arch=&track=stable|beta|nightly
- GET/releases/sign.mjsThe offline signing tool (node kodkila-release-sign.mjs keygen | sign | verify)
- GET/releases/signing-keysThe channel's active release signing keys (Ed25519) and whether signatures are required. Updaters should pin keys, not fetch them.
Published releases, newest first (?platform=&track=&limit=)
GET/releases
Public: no sign-in needed.
Parameters
| Name | Type | Description |
|---|---|---|
| x-ref | string, header |
Response
200. The payload in data is not described in the spec yet.
Every release of the channel, drafts and withdrawn included
GET/releases/channels/{channelId}
Needs a signed-in user (Bearer token or access_token cookie).
Parameters
| Name | Type | Description |
|---|---|---|
| channelIdrequired | string, path |
Response
200. The payload in data is not described in the spec yet.
Add a release { version, platform, arch?, track?, title?, notes?, download_url, size?, sha256?, min_os?, signature?, signature_key_id?, publish? }
POST/releases/channels/{channelId}
Needs a signed-in user (Bearer token or access_token cookie).
Parameters
| Name | Type | Description |
|---|---|---|
| channelIdrequired | string, path |
Response
201. The payload in data is not described in the spec yet.
Edit a release (not once withdrawn); a published one takes only title, notes and a new signature
PATCH/releases/channels/{channelId}/{id}
Needs a signed-in user (Bearer token or access_token cookie).
Parameters
| Name | Type | Description |
|---|---|---|
| channelIdrequired | string, path | |
| idrequired | string, path |
Response
200. The payload in data is not described in the spec yet.
Publish: updaters and the website see it at once
POST/releases/channels/{channelId}/{id}/publish
Needs a signed-in user (Bearer token or access_token cookie).
Parameters
| Name | Type | Description |
|---|---|---|
| channelIdrequired | string, path | |
| idrequired | string, path |
Response
200. The payload in data is not described in the spec yet.
Withdraw a bad release: updaters fall back to the previous one
POST/releases/channels/{channelId}/{id}/withdraw
Needs a signed-in user (Bearer token or access_token cookie).
Parameters
| Name | Type | Description |
|---|---|---|
| channelIdrequired | string, path | |
| idrequired | string, path |
Response
200. The payload in data is not described in the spec yet.
Release signing: policy (require_signature, download_hosts) and every key, revoked included
GET/releases/channels/{channelId}/signing
Needs a signed-in user (Bearer token or access_token cookie).
Parameters
| Name | Type | Description |
|---|---|---|
| channelIdrequired | string, path |
Response
200. The payload in data is not described in the spec yet.
Register a signing public key { public_key (base64 of 32 bytes, or PEM), name? } (a person, recent sign-in)
POST/releases/channels/{channelId}/signing/keys
Needs a signed-in user (Bearer token or access_token cookie).
Parameters
| Name | Type | Description |
|---|---|---|
| channelIdrequired | string, path |
Response
201. The payload in data is not described in the spec yet.
Revoke a signing key at once: its signatures stop being served or accepted (a person)
POST/releases/channels/{channelId}/signing/keys/{keyId}/revoke
Needs a signed-in user (Bearer token or access_token cookie).
Parameters
| Name | Type | Description |
|---|---|---|
| channelIdrequired | string, path | |
| keyIdrequired | string, path |
Response
200. The payload in data is not described in the spec yet.
Release policy { require_signature?, download_hosts? [dl.example.com, *.example.com], no IP addresses } (a person, recent sign-in); answers unsigned_published and off_list_published with examples
PUT/releases/channels/{channelId}/signing/policy
Needs a signed-in user (Bearer token or access_token cookie).
Parameters
| Name | Type | Description |
|---|---|---|
| channelIdrequired | string, path |
Response
200. The payload in data is of type object.
Latest published release: ?platform=mac|windows|linux|android|ios|web&arch=&track=stable|beta|nightly
GET/releases/latest
Public: no sign-in needed.
Parameters
| Name | Type | Description |
|---|---|---|
| x-ref | string, header |
Response
200. The payload in data is not described in the spec yet.
The offline signing tool (node kodkila-release-sign.mjs keygen | sign | verify)
GET/releases/sign.mjs
Public: no sign-in needed.
Response
200. The payload in data is not described in the spec yet.
The channel's active release signing keys (Ed25519) and whether signatures are required. Updaters should pin keys, not fetch them.
GET/releases/signing-keys
Public: no sign-in needed.
Parameters
| Name | Type | Description |
|---|---|---|
| x-ref | string, header |
Response
200. The payload in data is not described in the spec yet.