release: publish native 0.5.18

[shimoverse]

Summary

• publish the signed and notarized OpenVoiceFlow 0.5.18 / build 23 DMG on the website
• publish the workflow-generated Sparkle appcast so existing installations can auto-update
• advance website, manual, redirects, checksums, and distribution contracts from 0.5.17 to 0.5.18

Verification

• python3 -m pytest tests/test_docs_distribution.py tests/test_docs_seo.py -q — 31 passed
• pytest -q — 287 passed, 1 optional-dependency skip
• npm run build — passed
• release DMG SHA-256 matches the GitHub Release asset: 3b988ecc5b72952457e84945cba27544b500821c802710e7979090f47af909d6
• appcast Ed25519 signature verifies against the public key pinned in the shipping app
• DMG mounts read-only; app is Developer ID signed, Apple notarized, and reports 0.5.18 / build 23

Release gate

Merging this PR publishes appcast.xml from main; that is the point existing installations become eligible for 0.5.18 through Sparkle.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
openvoiceflow	Ready	Preview	Sep 1, 2026 8:57pm UTC

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-01T21:00:34.088123Z	c2baf4b	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.