From 7157f863a3b6511ad5cbf5cfb44ea3dd693affa3 Mon Sep 17 00:00:00 2001 From: ShutenOishi Date: Mon, 19 Oct 2026 22:08:02 +0900 Subject: [PATCH 1/4] fix(website): show only English release details on en CLI page --- en/cli.html | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) diff --git a/en/cli.html b/en/cli.html index 7d589cf..c159120 100644 --- a/en/cli.html +++ b/en/cli.html @@ -16,7 +16,7 @@

pgextwin CLI

Windows CLI v0.3.1

A safer one-line download, now 83.83% smaller.

Download current Catalog-registered PostgreSQL extension ZIPs for Windows x64. Signed Catalog selection, strict original ZIP SHA256, and an explicit frozen-snapshot mode. This read-only CLI does not install extensions.

- +
@@ -82,19 +82,13 @@

Other commands

Local Catalog browsing is separate

UNVERIFIED · INTEGRITY_ONLY

-

v0.3.1

Release notes · English → 日本語

+

v0.3.1

Release notes

English

CLI v0.3.1 — smaller executable, same safety checks. The self-contained Windows x64 executable was reduced from 79,338,604 to 12,827,362 bytes (83.83%) using full trimming and single-file compression. JSON responses are generated with trim-compatible System.Text.Json metadata rather than suppressed IL2026 warnings.

By default, download-all --pg all authenticates the publicly signed Catalog selection feed and downloads the current Catalog-registered set of 14 extensions × PG14–18 (70 original ZIP files). Use --pg 18 to select one major or --fixed to use the historical immutable snapshot. Each downloaded ZIP is rehashed, and a failed batch is removed without overwriting existing downloads.

Security boundary: Sigstore verification authenticates the Catalog feed and independently attested CLI executable. Extension ZIP bytes are checked against Catalog-pinned SHA256 values (INTEGRITY_ONLY); their own Sigstore signatures, provenance and installation/publication authorizations are not verified or granted. CLI v0.3.1 is a published prerelease, not a Windows Authenticode-signed installer.

Independent public EXE and 70/70 ZIP Windows verification · Full GitHub Release

-
-

日本語

-

CLI v0.3.1 — 安全性を維持しながら軽量化。 Windows x64用の自己完結型EXEを、79,338,604バイトから12,827,362バイトへ83.83%削減しました。完全トリミングと単一ファイル圧縮を使用し、JSON出力はトリミング対応のSystem.Text.Jsonソース生成方式に変更。IL2026警告を無視・抑制することなく対応しました。

-

標準の download-all --pg all は、公開されたSigstore署名付きCatalog選択情報を検証し、現在Catalogに登録されている14拡張×PG14～18の元ZIPを70件取得します。--pg 18 で1バージョンだけ、--fixed で過去の不変スナップショットに切替可能です。ZIPごとのSHA256を再計算し、途中失敗時には一時出力を破棄して既存のダウンロードを上書きしません。

-

安全性の区別： Sigstoreによる真正性検証の対象はCatalogフィードとCLI本体です。拡張ZIPはCatalogのSHA256とのバイト整合性のみ（INTEGRITY_ONLY）です。個々の拡張ZIPのSigstore署名・来歴・インストール／配布認可が成立したことにはなりません。CLI v0.3.1は公開済みのプレリリースであり、Windows Authenticode署名付きインストーラーではありません。

-

公開EXEとZIP 70/70の独立Windows検証 · GitHub Release全文

From cebc122c10f63bd835ae78ccb4562b8729ff9f02 Mon Sep 17 00:00:00 2001 From: ShutenOishi Date: Mon, 19 Oct 2026 22:08:06 +0900 Subject: [PATCH 2/4] fix(website): show only Japanese release details on ja CLI page --- ja/cli.html | 12 +++--------- 1 file changed, 3 insertions(+), 9 deletions(-) diff --git a/ja/cli.html b/ja/cli.html index 86e5d17..57fea12 100644 --- a/ja/cli.html +++ b/ja/cli.html @@ -16,7 +16,7 @@

pgextwin CLI

Windows CLI v0.3.1

1行で最新版を取得。EXEは83.83%軽量化。

Windows x64向けPostgreSQL拡張ZIPを、Catalogに登録された最新版から安全に一括取得。署名付きCatalogの認証・元ZIPのSHA256再検証・過去の固定版への切替に対応します。インストーラーではありません。

- +
@@ -82,14 +82,8 @@

そのほかのコマンド

ローカルCatalogの

UNVERIFIED · INTEGRITY_ONLY

-

v0.3.1

リリースノート · English → 日本語

-
-

English

-

CLI v0.3.1 — smaller executable, same safety checks. The self-contained Windows x64 executable was reduced from 79,338,604 to 12,827,362 bytes (83.83%) using full trimming and single-file compression. JSON responses are generated with trim-compatible System.Text.Json metadata rather than suppressed IL2026 warnings.

-

By default, download-all --pg all authenticates the publicly signed Catalog selection feed and downloads the current Catalog-registered set of 14 extensions × PG14–18 (70 original ZIP files). Use --pg 18 to select one major or --fixed to use the historical immutable snapshot. Each downloaded ZIP is rehashed, and a failed batch is removed without overwriting existing downloads.

-

Security boundary: Sigstore verification authenticates the Catalog feed and independently attested CLI executable. Extension ZIP bytes are checked against Catalog-pinned SHA256 values (INTEGRITY_ONLY); their own Sigstore signatures, provenance and installation/publication authorizations are not verified or granted. CLI v0.3.1 is a published prerelease, not a Windows Authenticode-signed installer.

-

Independent public EXE and 70/70 ZIP Windows verification · Full GitHub Release

-
+

v0.3.1

リリースノート

+

日本語

CLI v0.3.1 — 安全性を維持しながら軽量化。 Windows x64用の自己完結型EXEを、79,338,604バイトから12,827,362バイトへ83.83%削減しました。完全トリミングと単一ファイル圧縮を使用し、JSON出力はトリミング対応のSystem.Text.Jsonソース生成方式に変更。IL2026警告を無視・抑制することなく対応しました。

標準の download-all --pg all は、公開されたSigstore署名付きCatalog選択情報を検証し、現在Catalogに登録されている14拡張×PG14～18の元ZIPを70件取得します。--pg 18 で1バージョンだけ、--fixed で過去の不変スナップショットに切替可能です。ZIPごとのSHA256を再計算し、途中失敗時には一時出力を破棄して既存のダウンロードを上書きしません。

From a4e8969a797684c9355240c8d566d0c5aeb22683 Mon Sep 17 00:00:00 2001 From: ShutenOishi Date: Mon, 19 Oct 2026 22:08:18 +0900 Subject: [PATCH 3/4] test(website): enforce strictly separated English/Japanese CLI notes per locale --- tests/cli-preview.test.js | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/tests/cli-preview.test.js b/tests/cli-preview.test.js index 44f5521..3f4e9fd 100644 --- a/tests/cli-preview.test.js +++ b/tests/cli-preview.test.js @@ -30,8 +30,10 @@ for (const lang of ['en','ja']) { assert.ok(!home.includes('CLI v0.2.2')); assert.ok(!page.includes('install --apply')); assert.ok(!page.includes('signatureVerified=true')); - assert.ok(page.indexOf('
Date: Mon, 19 Oct 2026 22:08:31 +0900 Subject: [PATCH 4/4] test(website): check live localized CLI release notes are separated --- scripts/verify-published-pages.mjs | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/scripts/verify-published-pages.mjs b/scripts/verify-published-pages.mjs index 31d29e4..8608fc9 100644 --- a/scripts/verify-published-pages.mjs +++ b/scripts/verify-published-pages.mjs @@ -45,9 +45,9 @@ async function verify() { page.includes('download-all --pg all --fixed') && page.includes('83.83%'), "Published CLI v0.3.1 incomplete ("+locale+")"); - assert.ok(page.indexOf('