summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNicolas Williams <nico@cryptonector.com>2023-08-01 00:07:55 -0500
committerNicolas Williams <nico@cryptonector.com>2023-08-01 00:07:55 -0500
commit053fbebf189ccce1e954c58108940ddf16dff556 (patch)
tree574401596dce6c3d19436aac5ce3f77768625dfc
parentd042a807a1cf3ae8f68be1907be235e3db34c8ac (diff)
Update download page with new release key
-rw-r--r--download/index.html9
1 files changed, 5 insertions, 4 deletions
diff --git a/download/index.html b/download/index.html
index 73e7b2ac..357ccb1d 100644
--- a/download/index.html
+++ b/download/index.html
@@ -215,12 +215,13 @@ The checksums for jq 1.6 are in
<a href="https://raw.githubusercontent.com/jqlang/jq/master/sig/v1.6/sha256sum.txt">sig/v1.6/sha256sum.txt</a>.
The checksums for jq 1.5 are in
<a href="https://raw.githubusercontent.com/jqlang/jq/master/sig/v1.5/sha256sum.txt">sig/v1.5/sha256sum.txt</a>.</p>
-<p>Additionally, all binaries are signed by the
-<a href="https://raw.githubusercontent.com/jqlang/jq/master/sig/jq-release.key">jq Package Signing Key</a>.
-The signatures can be found under
+<p>Additionally, all release artifacts are signed by a jq release key. We have two release keys, <a href="https://raw.githubusercontent.com/jqlang/jq/master/sig/jq-release-old.key">one for 1.6 and older releases</a>, and <a href="https://raw.githubusercontent.com/jqlang/jq/master/sig/jq-release-new.key">one for 1.7 and newer releases</a>.
+Signatures can be found under
<a href="https://github.com/jqlang/jq/tree/master/sig">sig/v1.x/*.asc</a>.
+The signatures for jq 1.7rc are in
+<a href="https://github.com/jqlang/jq/tree/master/sig/v1.7rc1">sig/v1.7rc1/*.asc</a>.
The signatures for jq 1.6 are in
-<a href="https://github.com/jqlang/jq/tree/master/sig/v1.6">sig/v1.5/*.asc</a>.
+<a href="https://github.com/jqlang/jq/tree/master/sig/v1.6">sig/v1.6/*.asc</a>.
The signatures for jq 1.5 are in
<a href="https://github.com/jqlang/jq/tree/master/sig/v1.5">sig/v1.5/*.asc</a>.
You can use <a href="https://gnupg.org/">GnuPG</a> to verify a signature by downloading