Option to not display/show updates for apps with different signature

I have added a repo for the guardian project. I trust it enough to install ChatSecure from it, but not enough to install their build of F-Droid. Because they build F-Droid nightly, I get notification updates every day. This problem would be solved for me if F-Droid has an option to ignore app updates when the update is coming from a different repository and has a different signature.

Coming from a different repository is impossible, because there's no way of knowing how the version you already have installed got there. Different signature though, yes - the option should definitely be there to ignore those updates.

mentioned in merge request !52 (merged)

mentioned in issue #329 (closed)

Working on this in !158 (merged).

mentioned in merge request !158 (merged)

mentioned in issue #627 (closed)

mentioned in issue #628

This is related to #511 (closed)

Added ~16415 label

Milestone changed to 1.0

mentioned in issue #665 (closed)

mentioned in issue #23 (closed)

mentioned in issue fdroidserver#178

In the UI redesign we are currently working on, in addition to recent work to make multiple repos work better (in #511 (closed)), we've discussed the idea of improving the handling of app versions with different signing keys. The general idea is that, yes, we should avoid notifying users of updates available with different signing keys. This will be done by being more careful with how we assign "suggested versions" after doing a repo update. Right now the calculation for "suggested version" doesn't take into account the signing key of an app. This should indeed be taken into account, so that a new version with a different signing key is never suggested. Fixing this should automatically fix the notification problem, as they are very closely related.

added db label