Argh, I wasn’t thinking about Obtainium. The combination of github redirects and key handover leading to auto-upgrades is now indeed a problem. And makes wait and see not a viable strategy anymore.
@sedlund Did you check the APK’s release signatures, i.e. that they are the same as @Catfriend1 prior ones? From what you describe I assume yes - just want to double check. I can check myself otherwise in a bit, but want to do some other things myself first.
While I am not saying that I see anything problematic with the releases yet, as calmh and @sedlund pointed out how it happened is definitely weird. I haven’t found a way to contact researchxxl (ticket is locked) - if anyone can, please ask him to get in contact and/or remove these releases from github for now. I am actively looking into ways to improve this situation as soon as possible and will update when I know more (or don’t).