Hi, I package this for Arch Linux. Previous releases have had their commits signed but the release commit for 1.3.4 does not. Our packaging script tries to verify signatures(against the GH bot sig from https://github.com/web-flow.gpg) so updating it to the 1.3.4 release currently fails.
Curious if this will be standard going forward & we should stop verifying commit signatures or if this was just an oversight.
Thanks!