Prepare patched Linux wallet maintenance release

README.md

@@ -351,8 +351,9 @@ window to per-block ASERT with a two-hour half-life. Wallet files, addresses,
 transactions, supply, rewards, and proof of work are unchanged. Pool miners
 receive the current consensus work from the upgraded coordinator.
 
-The wallet-only v0.1.34 beta is available as a signed Android APK and a Linux
-AppImage from [GitHub Releases](https://github.com/krutftw/bitcoin09/releases/tag/v0.1.34).
+The wallet-only v0.1.34 beta is available as a signed Android APK from the
+[main release](https://github.com/krutftw/bitcoin09/releases/tag/v0.1.34) and a
+Linux AppImage from the [current maintenance release](https://github.com/krutftw/bitcoin09/releases/tag/v0.1.34-wallet-linux.1).
 Installable Windows and universal Mac wallet previews are available in the
 [native preview release](https://github.com/krutftw/bitcoin09/releases/tag/v0.1.34-wallet-preview.1).
 They are wallet-only public-CI builds and still show the platform's

docs/DIRECT-DOWNLOADS.md

@@ -5,10 +5,10 @@ BTC09 Wallet is distributed directly through GitHub Releases. No app-store accou
 ## Available beta files
 
 - **Android ARM64 signed APK:** [btc09-wallet-android-arm64.apk](https://github.com/krutftw/bitcoin09/releases/download/v0.1.34/btc09-wallet-android-arm64.apk)
-- **Linux x64:** [btc09-wallet-linux-x64.AppImage](https://github.com/krutftw/bitcoin09/releases/download/v0.1.34/btc09-wallet-linux-x64.AppImage)
-- **Checksums:** [SHA256SUMS](https://github.com/krutftw/bitcoin09/releases/download/v0.1.34/SHA256SUMS)
+- **Linux x64:** [btc09-wallet-linux-x64.AppImage](https://github.com/krutftw/bitcoin09/releases/download/v0.1.34-wallet-linux.1/btc09-wallet-linux-x64.AppImage)
+- **Checksums:** [Android](https://github.com/krutftw/bitcoin09/releases/download/v0.1.34/SHA256SUMS) · [Linux](https://github.com/krutftw/bitcoin09/releases/download/v0.1.34-wallet-linux.1/SHA256SUMS)
 
-[Open the v0.1.34 release](https://github.com/krutftw/bitcoin09/releases/tag/v0.1.34). Android shows its standard sideload permission when an APK is installed from a browser or file manager. The APK is signed with the project release key.
+[Open the v0.1.34 release](https://github.com/krutftw/bitcoin09/releases/tag/v0.1.34) or the [Linux wallet maintenance release](https://github.com/krutftw/bitcoin09/releases/tag/v0.1.34-wallet-linux.1). Android shows its standard sideload permission when an APK is installed from a browser or file manager. The APK is signed with the project release key.
 
 ## Windows and Mac preview
 

docs/RELEASE-v0.1.34-wallet-linux.1.md

@@ -0,0 +1,33 @@
+# BTC09 Wallet v0.1.34 Linux maintenance build 1
+
+This replaces the Linux AppImage attached to the main v0.1.34 release.
+
+## What changed
+
+The wallet now includes the gtk-rs maintainers' fix for
+[GHSA-wrw7-89jp-8q8g](https://github.com/advisories/GHSA-wrw7-89jp-8q8g).
+BTC09's Tauri/GTK stack still requires the glib 0.18 crate line, so the exact
+upstream fix is backported onto the official glib 0.18.5 source and pinned in
+the build.
+
+Wallet files, addresses, balances, transactions, recovery words, chain rules,
+and the wallet interface are unchanged.
+
+## Who should update
+
+Anyone using `btc09-wallet-linux-x64.AppImage` should download this maintenance
+build and replace the previous AppImage. The BTC09 node and miner binaries,
+Android wallet, Windows wallet, and Mac wallet do not use this Linux GTK
+dependency and do not need an update for this issue.
+
+## Verify the download
+
+Download `btc09-wallet-linux-x64.AppImage` and `SHA256SUMS` from this release,
+then run:
+
+```text
+sha256sum -c SHA256SUMS
+```
+
+Only use files published by the
+[official BTC09 repository](https://github.com/krutftw/bitcoin09/releases).

docs/RELEASE-v0.1.34.md

@@ -44,9 +44,13 @@ more than 30 minutes ahead of network time.
 | macOS Apple silicon full app | `btc09-macos-apple.zip` |
 | macOS Intel full app | `btc09-macos-intel.zip` |
 | Android arm64 wallet | `btc09-wallet-android-arm64.apk` |
-| Linux x64 native wallet | `btc09-wallet-linux-x64.AppImage` |
+| Linux x64 native wallet | `btc09-wallet-linux-x64.AppImage` (superseded) |
 | Checksums | `SHA256SUMS` |
 
+Linux native-wallet users should use the current
+[maintenance build](https://github.com/krutftw/bitcoin09/releases/tag/v0.1.34-wallet-linux.1),
+which replaces the AppImage originally attached to this release.
+
 The installable wallet-only previews for Windows x64 and macOS 13+ are in the
 [native preview release](https://github.com/krutftw/bitcoin09/releases/tag/v0.1.34-wallet-preview.1).
 They do not contain node or mining features. Windows and macOS show an

docs/index.html

@@ -1643,19 +1643,20 @@ <h3>Linux</h3>
 </div>
 <div class="release-note">
 <span>Current release: v0.1.34. Official files are published on GitHub. Verify a download before running it.</span>
-<a href="https://github.com/krutftw/bitcoin09/releases/download/v0.1.34/SHA256SUMS">SHA256SUMS</a>
+<a href="https://github.com/krutftw/bitcoin09/releases/download/v0.1.34/SHA256SUMS">Main release checksums</a>
+<a href="https://github.com/krutftw/bitcoin09/releases/download/v0.1.34-wallet-linux.1/SHA256SUMS">Linux wallet checksum</a>
 </div>
 <aside class="native-release-status" aria-labelledby="native-wallet-status">
 <div>
 <span class="platform">Native wallet beta</span>
 <h3 id="native-wallet-status">Direct downloads, no app store</h3>
 <p>Android and Linux are ready. Windows and Mac previews are also installable now, with an unverified-publisher warning until trusted signing is complete.</p>
-<div class="native-status-links"><a href="https://github.com/krutftw/bitcoin09/releases/download/v0.1.34-wallet-preview.1/btc09-wallet-windows-x64-setup.exe">Windows preview</a><a href="https://github.com/krutftw/bitcoin09/releases/download/v0.1.34-wallet-preview.1/btc09-wallet-macos-universal-preview.zip">Mac preview</a><a href="https://github.com/krutftw/bitcoin09/releases/download/v0.1.34/btc09-wallet-android-arm64.apk">Android</a><a href="https://github.com/krutftw/bitcoin09/releases/download/v0.1.34/btc09-wallet-linux-x64.AppImage">Linux</a><a href="https://github.com/krutftw/bitcoin09/blob/master/docs/DIRECT-DOWNLOADS.md">Install help</a></div>
+<div class="native-status-links"><a href="https://github.com/krutftw/bitcoin09/releases/download/v0.1.34-wallet-preview.1/btc09-wallet-windows-x64-setup.exe">Windows preview</a><a href="https://github.com/krutftw/bitcoin09/releases/download/v0.1.34-wallet-preview.1/btc09-wallet-macos-universal-preview.zip">Mac preview</a><a href="https://github.com/krutftw/bitcoin09/releases/download/v0.1.34/btc09-wallet-android-arm64.apk">Android</a><a href="https://github.com/krutftw/bitcoin09/releases/download/v0.1.34-wallet-linux.1/btc09-wallet-linux-x64.AppImage">Linux</a><a href="https://github.com/krutftw/bitcoin09/blob/master/docs/DIRECT-DOWNLOADS.md">Install help</a></div>
 <p>Free code signing provided by SignPath.io, certificate by SignPath Foundation. <a href="https://signpath.io/">About SignPath</a> · <a href="https://github.com/krutftw/bitcoin09/blob/master/CODE_SIGNING.md">Code signing policy</a>.</p>
 </div>
 <ul class="native-status-list" aria-label="Native wallet platform status">
 <li><strong>Android signed APK</strong><span>Available</span></li>
-<li><strong>Linux AppImage</strong><span>Available</span></li>
+<li><strong>Linux AppImage</strong><span>Maintenance build available</span></li>
 <li><strong>Windows preview</strong><span>Available · signing pending</span></li>
 <li><strong>macOS preview</strong><span>Available · signing pending</span></li>
 <li><strong>iPhone</strong><span>Tested · no public install yet</span></li>

tools/release/test_direct_distribution.py

@@ -20,6 +20,7 @@ def test_public_guide_links_the_released_no_store_beta(self):
             "SHA256SUMS",
             "Available beta files",
             "releases/tag/v0.1.34",
+            "v0.1.34-wallet-linux.1",
             "btc09-wallet-android-arm64.apk",
             "btc09-wallet-linux-x64.AppImage",
             "v0.1.34-wallet-preview.1",
@@ -32,6 +33,22 @@ def test_public_guide_links_the_released_no_store_beta(self):
 
         self.assertNotIn("will use GitHub Releases", guide)
 
+    def test_linux_wallet_maintenance_release_is_documented(self):
+        notes_path = pathlib.Path("docs/RELEASE-v0.1.34-wallet-linux.1.md")
+        self.assertTrue(notes_path.exists(), "Linux wallet maintenance notes are missing")
+        notes = notes_path.read_text(encoding="utf-8")
+
+        for token in (
+            "GHSA-wrw7-89jp-8q8g",
+            "btc09-wallet-linux-x64.AppImage",
+            "SHA256SUMS",
+            "glib 0.18.5",
+            "Wallet files, addresses, balances, transactions",
+            "do not need an update for this issue",
+        ):
+            with self.subTest(token=token):
+                self.assertIn(token, notes)
+
     def test_code_signing_policy_is_public_and_excludes_mining(self):
         policy_path = pathlib.Path("CODE_SIGNING.md")
         self.assertTrue(policy_path.exists(), "code-signing policy is missing")
@@ -81,7 +98,8 @@ def test_homepage_links_the_released_native_wallet_beta(self):
             "Linux AppImage",
             "no public install yet",
             "releases/download/v0.1.34/btc09-wallet-android-arm64.apk",
-            "releases/download/v0.1.34/btc09-wallet-linux-x64.AppImage",
+            "releases/download/v0.1.34-wallet-linux.1/btc09-wallet-linux-x64.AppImage",
+            "releases/download/v0.1.34-wallet-linux.1/SHA256SUMS",
             "releases/download/v0.1.34-wallet-preview.1/btc09-wallet-windows-x64-setup.exe",
             "releases/download/v0.1.34-wallet-preview.1/btc09-wallet-macos-universal-preview.zip",
         ):