Updates the README, CHANGELOG, Version.

Author: psuong

CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.2.0] - 2026-07-24
+### Added
+- Adds checksum security levels: None, Laxed, Strict. See the [README](README) for more information.
+- Adds ability to download exe and move them to a package directory.
+- Adds dependency to [FileTypeChecker](https://github.com/AJMitev/FileTypeChecker) for file type validation
+
 ## [2.1.0] - 2026-07-22
 ### Added
 - Adds an early exit when doing a rotational log backups, see feature [here](https://github.com/psuong/binget/issues/7)

README.md

@@ -8,6 +8,13 @@ a configuration `toml` file that you supply.
 url = "https://api.github.com/repos/"
 destination = "your-destination-path"
 
+# Security Levels determine how to deal with the checksum when downloading the pkg from Github
+# 0 : None, ignore any checksum validation (not recommended)
+# 1 : Laxed, ignore checksum validation if it is not published in Github (this can be due to a manual upload by the repo owner 
+# or they did not provide one.) Generally, not recommended since there is no way to validate.
+# 2 : Strict, checksum validation is required. If it does not exist the package install will fail.
+security_level = 2
+
 [repositories.omnisharp-lsp]
 id = "OmniSharp/omnisharp-roslyn"
 targetPattern = "omnisharp-win-x64-net\\d+\\.\\d+\\.zip"
@@ -19,6 +26,7 @@ Your `config.toml` file is effectively your primary package list.
 |-----|-------------|
 | url | The repository you want to pull from. Currently only tested with Github. |
 | destination | The location of where the packages will be downloaded and extracted to. **Use an absolute path.** |
+| security_level | See the comments in the (Example config)[#example-config] for more details. Must be an integer 0, 1, or 2. |
 | repositories.ALIAS | Replace ALIAS with a name you want to identify the package with with. E.g. omnisharp-roslyn would be displayed as omnisharp-lsp. |
 | id | The unique identifier for the repository. Github repositories typically follow {owner}/{repository-name}.
 | targetPattern | Repository owners will typically release multiple assets. Use a regex pattern to find the asset you want or exact name. |

binget.csproj

@@ -6,8 +6,8 @@
     <ImplicitUsings>false</ImplicitUsings>
     <Nullable>disable</Nullable>
     <RootNamespace>BinGet</RootNamespace>
-    <InformationalVersion>2.1.0.0</InformationalVersion>
-    <FileVersion>2.1.0</FileVersion>
+    <InformationalVersion>2.2.0.0</InformationalVersion>
+    <FileVersion>2.2.0</FileVersion>
     <Company>psuong</Company>
     <Copyright>MIT Licensed</Copyright>
   </PropertyGroup>