Gregory's Server
@dwrweb @fdroidorg @Tusky Tusky was added to F-Droid before F-Droid started spending more resources on reproducible builds.
Because introducing reproducible builds is way easier for new apps than existing apps (due to the key changes), Tusky has never been built reproducibly.
That is not to say that Tusky is insecure, just that F-Droid doesn't ships an .apk they build instead of a confirmed-to-be-correct .apk from the Tusky developers.
See https://f-droid.org/en/2023/01/15/towards-a-reproducible-fdroid.html for more details.
@dwrweb @fdroidorg @Tusky So, only the official Mastodon app changed signature and needs a re-install. Tusky is still on the same signature as day one and updates will keep arriving with no user action needed.